abi <abi/4.0>,

include <tunables/global>

profile pgbouncer /usr/sbin/pgbouncer {
  include <abstractions/base>
  include <abstractions/nameservice>
  include <abstractions/openssl>
  include <abstractions/perl>
  include <abstractions/ssl_certs>

  capability dac_override,
  capability dac_read_search,
  capability setgid,
  capability setuid,

  /usr/sbin/pgbouncer rm,

  /etc/pgbouncer/ r,
  /etc/pgbouncer/* r,

  owner /var/log/pgbouncer/pgbouncer.log rw,
  owner /run/pgbouncer/pgbouncer.pid rw,
  owner /tmp/.s.PGSQL.* rw,

  include if exists <local/usr.sbin.pgbouncer>
  include if exists <local/pgbouncer>
}
