# ------------------------------------------------------------------
#
#   Copyright (C) 2014 Canonical Ltd.
#
#   This program is free software; you can redistribute it and/or
#   modify it under the terms of version 2 of the GNU General Public
#   License published by the Free Software Foundation.
#
#   Author: Jonathan Davies <jonathan.davies@canonical.com>
#
# ------------------------------------------------------------------

#include <tunables/global>

/usr/lib/ipsec/stroke flags=(attach_disconnected) {
  #include <abstractions/base>

  capability dac_override,

  /etc/strongswan.conf          r,
  /etc/strongswan.d/            r,
  /etc/strongswan.d/**          r,

  /run/charon.ctl               rw,

  /usr/lib/ipsec/stroke         rm,

  # Site-specific additions and overrides. See local/README for details.
  #include <local/usr.lib.ipsec.stroke>
}