abi <abi/4.0>,

include <tunables/global>

profile minio /usr/sbin/minio {
  include <abstractions/minio>

  owner /var/lib/minio/ r,
  owner /var/lib/minio/** rwlk,

  include if exists <local/minio>
}

profile minio-devel {
  include <abstractions/minio>

  owner /var/lib/minio-devel/ r,
  owner /var/lib/minio-devel/** rwlk,

  include if exists <local/minio>
}

profile minio-mc /usr/bin/minio-mc {
  include <abstractions/base>
  ## include <abstractions/nameservice>
  include <abstractions/ssl_certs>
  include <abstractions/consoles>

  /sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,

  owner /proc/@{pid}/cpuset r,

  owner @{HOME}/.mc/ rw,
  owner @{HOME}/.mc/** rw,
  owner @{HOME}/.minio-mc/ rw,
  owner @{HOME}/.minio-mc/** rw,
  owner @{HOME}/.minio-client/ rw,
  owner @{HOME}/.minio-client/** rw,

  /usr/bin/minio-mc rm,
  /usr/bin/minio-client rm,

  include if exists <local/minio-mc>
  include if exists <local/minio-client>
}
