# vim:syntax=apparmor
# Last Modified: Fri Jun 15 16:37:54 2007
#include <tunables/global>

/sbin/rpcbind {
  #include <abstractions/base>
  #include <abstractions/nameservice>

  capability net_bind_service,
  capability setuid,

  /sbin/rpcbind mr,
  /etc/rpc r,
  /etc/netconfig r,
  /var/run/rpcbind.lock rwk,
  /var/run/rpcbind.sock rw,
  /var/lib/rpcbind/rpcbind.file rw,
  /var/lib/rpcbind/portmap.file rw,
  @{PROC}/net/ r,
  @{PROC}/net/unix r,

}