# vim:syntax=apparmor
# Author: Ken VanDine <ken.vandine@canonical.com>
#
#include <tunables/global>

profile "content-hub-test-ok" {
    #include <abstractions/base>
    #include <abstractions/dbus-session>
    /etc/issue r,
}
profile "content-hub-test-bad" {
    #include <abstractions/base>
    #include <abstractions/dbus-session>
    audit deny /etc/issue r,
}

# Mostly unconfined. Don't allow capability or any mount rules. Also ensure that
# exec inherits from this profile
profile content-hub-testability (attach_disconnected) {
  network,
  / rwkl,
  /** rwlkm,
  /** pix,
  dbus,
  signal,
  ptrace,
  unix,
}
