# This AppArmor profile is part of the prometheus-php-fpm_exporter package
# Georg Pfuetzenreuter <mail+apparmor@georg-pfuetzenreuter.net>

abi <abi/3.0>,

include <tunables/global>

/usr/bin/php-fpm_exporter {
  include <abstractions/base>

  network inet stream,
  network inet6 stream,

  /proc/@{pid}/net/netstat r,
  /proc/@{pid}/{fd/,limits,stat} r,
  /proc/sys/net/core/somaxconn r,

  /run/php-fpm/*.sock r,

  /usr/bin/php-fpm_exporter mr,

  include if exists <local/prometheus-php-fpm_exporter>
}
