abi <abi/3.0>,

include <tunables/global>

profile uptermd /usr/bin/uptermd {
  include <abstractions/base>

  capability net_bind_service,

  network inet stream,
  network inet6 stream,

  /usr/bin/uptermd r,

  /etc/uptermd/* r,

  /etc/machine-id r,
  /sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,
  /proc/sys/net/core/somaxconn r,

  /proc/@{pid}/{cgroup,cpuset,mountinfo} r,

  # Site-specific additions and overrides. See local/README for details.
  include if exists <local/uptermd>
}
