#include <tunables/global>

# A simple test comment which will persist


/usr/bin/a/simple/cleanprof/test/profile {
  #include <abstractions/base>

  set rlimit nofile <= 256,

  audit capability,

  network stream,

  signal set=(abrt alrm bus chld fpe hup ill int kill pipe quit segv stkflt term trap usr1 usr2),

  ptrace tracedby,

  unix (receive) type=dgram,

  /home/*/** r,
  /home/foo/** w,

  change_profile,


  ^foo {
    capability dac_override,

    /etc/fstab r,

  }
}
/usr/bin/other/cleanprof/test/profile {
  /home/*/** rw,
  /home/foo/bar r,

}