# Last Modified: Fri Oct 30 11:33:31 2020 #include <tunables/global> /usr/bin/yggdrasil { #include <abstractions/base> #include <abstractions/nameservice> capability net_admin, capability net_raw, /dev/net/tun rw, /proc/sys/net/core/somaxconn r, /sys/kernel/mm/transparent_hugepage/hpage_pmd_size r, /etc/yggdrasil.conf rw, /run/yggdrasil.sock rw, }