#include <tunables/global>

#include if exists "/etc/apparmor.d/tunables/home.d"

# This is a snap name without the instance key
@{SNAP_NAME}="google-cloud-cli"
# This is a snap name with instance key
@{SNAP_INSTANCE_NAME}="google-cloud-cli"
@{SNAP_INSTANCE_DESKTOP}="google-cloud-cli"
@{SNAP_COMMAND_NAME}="bq"
@{SNAP_REVISION}="396"
@{PROFILE_DBUS}="snap_2egoogle_2dcloud_2dcli_2ebq"
@{INSTALL_DIR}="/{,var/lib/snapd/}snap"

profile "snap.google-cloud-cli.bq" flags=(attach_disconnected,mediate_deleted,complain) {
  # set file rules so that exec() inherits our profile unless there is
  # already a profile for it (eg, snap-confine)
  / rwkl,
  /** rwlkm,
  /** pix,

  capability,
  change_profile unsafe /**,
  dbus,
  network,
  mount,
  remount,
  umount,
  pivot_root,
  ptrace,
  signal,
  unix,


}