profile matrix-synapse {

    include <abstractions/base>

    include <abstractions/python>

    include <abstractions/ssl_certs>

    include <abstractions/openssl>

    network inet stream,

    network inet6 stream,

    /etc/gai.conf r,

    /etc/host.conf r,

    /etc/hosts r,

    /etc/mime.types r,

    /etc/nsswitch.conf r,

    /etc/passwd r,

    /etc/resolv.conf r,

    owner @{PROC}/@{pid}/{fd/,limits,mounts,stat} r,

    /etc/matrix-synapse/** r,

    owner /var/lib/matrix-synapse/ r,

    owner /var/{lib,log}/matrix-synapse/** rw,

    /usr/bin/bash Cx -> bash,

    profile bash {

        include <abstractions/base>

        /usr/bin/bash r,

        /usr/bin/uname PUx,

    }

}