AppArmor profile for DNSCrypt 1.3.0

# Last Modified: Sat Jul  6 01:30:54 2013
#This Apparmor profile is provided by insanitybit.com , and if there are updates that
#is where you will find them. Report issues or changes there please!

#include <tunables/global>

/usr/sbin/dnscrypt-proxy {
  #include <abstractions/nameservice>

  capability block_suspend,
  capability net_admin,
  capability net_bind_service,
  capability setgid,
  capability setuid,
  capability sys_chroot,



  /bin/false r,
  /dev/null rw,
  /dev/urandom r,
  /etc/ld.so.cache r,
  /etc/localtime r,
  /lib/*-linux-gnu*/libc-*.so mr,
  /lib/*-linux-gnu*/libm-*.so mr,
  /lib/*-linux-gnu*/libnsl-*.so mr,
  /lib/*-linux-gnu*/libnss_compat-*.so mr,
  /lib/*-linux-gnu*/libnss_files-*.so mr,
  /lib/*-linux-gnu*/libnss_nis-*.so mr,
  /run/dnscrypt-proxy.pid rw,
  /usr/lib/libsodium.*a mr,

}