#include <tunables/global>

/usr/bin/wpa_supplicant {
  #include <abstractions/base>
  #include <abstractions/dbus-strict>

  capability net_admin,
  capability net_raw,
  capability chown,
  capability dac_override,
  network inet dgram,
  network inet raw,
  network packet dgram,
  network netlink,

  /usr/bin/wpa_supplicant mr,

  /run/wpa_supplicant/ rw,
  /run/wpa_supplicant/** rw,

  /run/dbus/system_bus_socket rw,
  /run/sendsigs.omit.d/wpasupplicant.pid rw,

  /etc/wpa_supplicant/ rw,
  /etc/wpa_supplicant/** rw,
  
  /etc/nsswitch.conf r,
  /etc/group r,
 
  @{PROC}/@{pid}/psched r,

  /dev/rfkill r,

  dbus (send, receive)
       bus=system
       path=/fi/w1/wpa_supplicant1,

  dbus (send, receive)
       bus=system
       path=/fi/w1/wpa_supplicant1/**,

  dbus (send,receive)
       bus=system
       path=/fi/epitest/hostap/WPASupplicant/**,

  #include <local/usr.bin.wpa_supplicant>
}