# Last Modified: Sun Dec 06 12:30:32 2015
# vim:syntax=apparmor et
#include <tunables/global>

profile system_i2p flags=(complain) {
  #include <abstractions/i2p>

  #
  #  Additional rules required when running as a service.
  #

  owner /{,lib/live/mount/overlay/}var/lib/i2p/** rwk,
  owner /{,lib/live/mount/overlay/}var/lib/i2p/i2p-config/eepsite/cgi-bin rix,
  owner /{,lib/live/mount/overlay/}var/log/i2p/* rw,

  owner /{,var/}run/i2p/{i2p,routerjvm}.pid rw,
  owner /{,var/}run/i2p/router.ping rw,

  # Site-specific additions and overrides. See local/README for details.
  #include <local/system_i2p>
}
