#include <tunables/global>

profile mb_secure_bridge flags=(attach_disconnected,mediate_deleted) {
  #include <abstractions/base>
  #include <abstractions/nameservice>

  signal,

  network inet stream,
  network inet6 stream,
  network inet dgram,
  network inet6 dgram,

  /usr/local/bin/mb-secure-bridge rix,
  /etc/ssl/certs/ca-certificates.crt r,
  /data/ rw,
  /data/** rwk,
  /config/ r,
  /config/** r,
}