  profile roundcubemail flags=(attach_disconnected) {
    include <abstractions/php-fpm>

    /etc/roundcubemail/ r,
    /etc/roundcubemail/** r,

    /var/log/roundcubemail/ r,
    /var/log/roundcubemail/** rwlk,

    /srv/www/vhosts/roundcubemail/public/ r,
    /srv/www/vhosts/roundcubemail/public/** r,
    /srv/www/vhosts/roundcubemail/public/config/config.php k,
    owner /srv/www/vhosts/roundcubemail/data/** rwlk,
    owner /srv/www/vhosts/roundcubemail/tmp/ r,
    owner /srv/www/vhosts/roundcubemail/tmp/** rwlk,
    owner /srv/www/vhosts/roundcubemail/sessions/ r,
    owner /srv/www/vhosts/roundcubemail/sessions/** rwlk,

    ###
    # include snippets provides e.g. by plugin directories
    #
    # We use the directory layout for abstraction includes in AppArmor 3
    #
    include if exists <php-fpm.d/roundcubemail.d>
    #
    # allow admins to add snippets as well.
    #
    include if exists <local/php-fpm.d/roundcubemail.d>
    #
    ###
  }
