# Last Modified: Sat May  4 18:48:24 2019
#include <tunables/global>

/usr/bin/lokinet {
  #include <abstractions/base>

  capability net_admin,
  capability net_bind_service,

  network inet dgram,
  network inet6 dgram,
  network netlink raw,

  /dev/net/tun rw,
  /lib/@{multiarch}/ld-*.so mr,
  /usr/bin/lokinet mr,

  owner /var/lib/lokinet/ rw,
  owner /var/lib/lokinet/** rwk,

  owner @{HOME}/.lokinet/ rw,
  owner @{HOME}/.lokinet/** rwk,

}