# Description: Can access the network as a client
# Usage: common
#include <abstractions/nameservice>
#include <abstractions/ssl_certs>

@{PROC}/sys/net/core/somaxconn r,

# We want to explicitly deny access to NetworkManager because its DBus API
# gives away too much
deny dbus (receive, send)
     bus=system
     path=/org/freedesktop/NetworkManager,
deny dbus (receive, send)
     bus=system
     peer=(name=org.freedesktop.NetworkManager),

# Do the same for ofono (LP: #1226844)
deny dbus (receive, send)
     bus=system
     interface="org.ofono.Manager",
