From d6ae21b7145d1faac3b87fd5ba9b49088feb96c4 Mon Sep 17 00:00:00 2001
From: nobodysu <nobodysu@users.noreply.github.com>
Date: Mon, 10 Jan 2022 21:53:48 +0000
Subject: [PATCH] Create murmurd

---
 murmurd | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 murmurd

diff --git a/murmurd b/murmurd
new file mode 100644
index 0000000..8943be1
--- /dev/null
+++ b/murmurd
@@ -0,0 +1,29 @@
+
+include <tunables/global>
+
+profile murmurd /{,usr/}sbin/murmurd {
+  /{,usr/}sbin/murmurd r,
+  include <abstractions/base>
+  include <abstractions/openssl>
+  include <abstractions/ssl_certs>
+  include <abstractions/3rd/nameservice-strict>
+
+  capability chown,
+  capability setgid,
+  capability setuid,
+  capability dac_override,
+  capability sys_resource,
+
+  /etc/mumble-server.ini r,
+
+  owner /{,var/}run/mumble-server/*.pid rw,
+
+  owner /var/lib/mumble-server/{,**}    rw,
+  owner /var/lib/mumble-server/*.sqlite rwk,
+
+  /var/log/mumble-server/*.log rw,
+
+  /{,usr/}bin/lsb_release Px -> lsb_release,
+
+  include if exists <local/murmurd>
+}