File apparmor-usr.bin.json_exporter of Package prometheus-json_exporter

# AppArmor profile for prometheus apache-exporter

#include <tunables/global>

profile /usr/bin/prometheus-json_exporter flags=(attach_disconnected) {

  #include <abstractions/base>

  network inet  stream,
  network inet6 stream,

  /etc/ld.so.cache r,
  /etc/nsswitch.conf r,
  /etc/passwd r,

  @{PROC}/sys/net/core/somaxconn r,
  @{PROC}/@{pid}/fd/ r,
  @{PROC}/@{pid}/{stat,limits} r,
  @{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,

  # grant read access to json_exporter executable
  /usr/bin/json_exporter r,

  # grant read access to config file
  /etc/prometheus/json_exporter.yml r,
  
}