/run/php-fpm/limesurvey.sock rwlk,
profile LimeSurvey {
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/user-tmp>

  /etc/limesurvey/{config*,console,email,fonts,ldap,packages,questiontypes,routes,tcpdf,updater_version,vendor,version}.php r,
  __LIMEDIR__/locale/*/*.mo mrk,
  owner __LIMEDIR__/application/config/security.php mrw,
  owner __LIMEDIR__/{tmp,upload}/ r,
  owner __LIMEDIR__/tmp/** mrwk,
  __LIMEDIR__/{admin/index,index,setdebug}.php r,
  __LIMEDIR__/application/*/*.php r,
  __LIMEDIR__/application/{core,controllers,extensions,helpers,libraries,models,views}/**.php r,
  __LIMEDIR__/application/extensions/**/assets/{,{css,js,js/i18n}/,**.{css,js}} r,
  __LIMEDIR__/application/core/plugins/*/config.xml r,
  __LIMEDIR__/{node_modules,vendor}/** r,
  __LIMEDIR__/application/views/*/*/** r,
  __LIMEDIR__/{upload,themes}/*/{,*/} r,
  __LIMEDIR__/upload/*{,/*/} rw,
  __LIMEDIR__/upload/themes/*/*/{,**} rw,
  __LIMEDIR__/{,upload/}themes/{admin,question,survey}/{,generalfiles/} r,
  __LIMEDIR__/themes/*/*/{config.xml,*/**} r,
  __LIMEDIR__/modules/admin/{,*/*/*.php} r,
  __LIMEDIR__/application/views/**/config.xml r,
  __LIMEDIR__/application/views/*/** r,
  __LIMEDIR__/assets/** r,
  owner /var/cache/limesurvey/cache/* rwk,
  owner /run/limesurvey_sessions/{,*} rwk,
  /etc/limesurvey/config.php rw,

  unix (receive) type=stream,
  signal send set=abrt peer=php-fpm,
  signal receive set=abrt peer=php-fpm,
  signal receive set=quit peer=php-fpm,
  signal receive set=kill peer=php-fpm,
  signal receive set=term peer=php-fpm,

  #include if exists <php-fpm.d/LimeSurvey.d>
  #include if exists <local/php-fpm.d/LimeSurvey.d>
}
