#include <tunables/global>

# Define vars with unconfined since autopilot rules may reference them
###VAR###

# TODO: when v3 userspace lands, use:
# ###PROFILEATTACH### (unconfined) {}

# v2 compatible wildly permissive profile
###PROFILEATTACH### (attach_disconnected) {
  capability,
  network,
  / rwkl,
  /** rwlkm,
  /** pix,

  mount,
  remount,
  umount,
  dbus,
  signal,
  ptrace,
  unix,
  change_profile,
}