# vim:syntax=apparmor

#include <tunables/global>
profile ping /{usr/,}bin/iputils-ping {
  #include <abstractions/base>
  #include <abstractions/consoles>
  #include <abstractions/nameservice>

  capability net_raw,
  capability setuid,
  network inet raw,
  network inet6 raw,

  /{usr/,}bin/iputils-ping mixr,
  /etc/modules.conf r,

  # Site-specific additions and overrides. See local/README for details.
  #include <local/usr.bin.iputils-ping>
}