abi <abi/4.0>,

include <tunables/global>

profile teamspeak-client /usr/libexec/teamspeak3/client/ts3client_linux_amd64  {
  include <abstractions/base>
  include <abstractions/nameservice>
  include <abstractions/X>
  include <abstractions/gnome>
  include <abstractions/fonts>
  include <abstractions/nvidia>
  include <abstractions/audio>
  include <abstractions/p11-kit-files>
  include <abstractions/nssdb-user-files>

  capability sys_admin,
  capability sys_chroot,
  capability sys_ptrace,

  /etc/hosts r,
  /etc/resolv.conf r,

  /usr/libexec/teamspeak3/client/** r,
  /usr/libexec/teamspeak3/client/ts3client_linux_amd64 rm,
  /usr/libexec/teamspeak3/client/**/*.so* rm,
  /usr/libexec/teamspeak3/client/*.so* rm,
  /usr/libexec/teamspeak3/client/QtWebEngineProcess rmix,


  owner /proc/@{pid}/comm r,
  owner /proc/@{pid}/mem r,
  owner /proc/@{pid}/stat r,
  owner /proc/@{pid}/task/ r,
  owner /proc/@{pid}/task/*/{comm,status} r,

  owner /proc/@{pid}/oom_score_adj w,
  owner /proc/@{pid}/gid_map w,
  owner /proc/@{pid}/uid_map w,
  /proc/ r,


  owner /proc/@{pid}/fd/ r,
  owner /proc/@{pid}/setgroups w,
  /proc/vmstat r,
  /sys/bus/pci/devices/ r,
  /proc/devices r,

  owner @{HOME}/.ts3client/ rw,
  owner @{HOME}/.ts3client/** rwlk,
  owner "@{HOME}/.local/share/TeamSpeak 3/" rw,
  owner "@{HOME}/.local/share/TeamSpeak 3/**" rw,

  owner @{HOME}/.cache/qtshadercache/** rw,

  /etc/udev/udev.conf r,
  /usr/share/hwdata/pnp.ids r,

  /sys/devices/**/{vendor,device,class} r,

  deny /etc/machine-id r,

  /dev/shm/ r,
  owner /dev/shm/.org.chromium.Chromium.* rw,

  network inet,
  network inet6,

  include if exists <local/teamspeak-client>
}
