# Bodhi.Zazen's current bfilter profile
# Please note this is for :
# Ubuntu 9.04

#include <tunables/global>

/usr/bin/bfilter {
  #include <abstractions/base>
  #include <abstractions/nameservice>

  capability setgid,
  capability setuid,

  deny @{HOME}/.bash* rw,
  deny @{HOME}/.ssh/* rw,
  deny @{HOME}/.zshrc rw,
  deny @{PROC}/ r,
  deny @{PROC}/* r,

  /etc/bfilter/** r,
  /sys/devices/system/cpu/ r,
  /usr/bin/bfilter r,
  owner /var/run/bfilter.pid rwk,
  /var/run/bfilter.pid rw,

}