# Last Modified: Mon Jul 27 15:18:30 2015
#include <tunables/global>
#include <tunables/gnunet>

profile @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-dns {
  #include <abstractions/gnunet-sgid>

  capability setgid,

  /usr/lib/ld-*.so r,

  #GNUnet helper
  @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-helper-dns Px,

  @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-dns mr,

  #Gnunet libraries
  @{GNUNET_PREFIX}/lib/libgnunetdnsstub.so.* mr,
  @{GNUNET_PREFIX}/lib/libgnunetstatistics.so.* mr,
  @{GNUNET_PREFIX}/lib/libgnunettun.so.* mr,

  # Site-specific additions and overrides. See local/README for details.
  #include <local/gnunet-sgid>
}
