#include <tunables/global>

/usr/bin/wpa_cli {
  #include <abstractions/base>

  /usr/bin/wpa_cli mr,

  /{var/,}run/wpa_supplicant/ r,
  owner /tmp/wpa_ctrl_@{pid}-[0-9] rw,

  # for interactive mode
  /etc/inputrc r,
  owner @{HOME}/.wpa_cli_history rw,

  #include <local/usr.bin.wpa_cli>
}