File unrealircd.apparmor of Package unrealircd

#include <tunables/global>

/usr/sbin/ircd {
  #include <abstractions/base>
  #include <abstractions/nameservice>

  capability net_bind_service,
  capability setgid,
  capability setuid,
  deny capability chown,
  capability dac_override,

  /etc/Unreal/** r,
  deny /etc/Unreal/** w,
  /var/run/Unreal/** rw,
  /var/run/Unreal/tmp/*.so m,
  /var/log/Unreal/* rw,
  /var/lib/Unreal/ircd.tune rw,
  /usr/lib{,64}/Unreal/*.so mr,
}