#include <tunables/global>

/var/webservers/mc.wg.banananet.work/launch {
  #include <abstractions/base>
  #include <abstractions/bash>
  #include <abstractions/nameservice>
  #include <abstractions/ubuntu-browsers.d/java>
  #include <abstractions/user-tmp>

  /etc/timezone r,
  /proc/*/net/if_inet6 r,
  /proc/*/net/ipv6_route r,
  /proc/sys/net/core/somaxconn r,
  /proc/sys/net/ipv4/tcp_fastopen r,
  /usr/bin/dash ix,
  /usr/lib/jvm/java-11-openjdk-amd64/bin/java mrix,
  /usr/lib/jvm/java-11-openjdk-amd64/lib/server/classes.jsa mr,
  /usr/share/java/java-atk-wrapper.jar r,
  /var/webservers/mc.wg.banananet.work/launch r,
  owner /proc/*/coredump_filter rw,
  owner /proc/*/mountinfo r,
  owner /tmp/libnetty_transport_native_epoll_x86_*.so mrw,
  owner /var/webservers/mc.wg.banananet.work/bin/server.*.jar r,
  owner /var/webservers/mc.wg.banananet.work/data/** rw,

}