profile global /** flags=(attach_disconnected) {
   signal,
   ptrace,
   capability,
   mount,
   umount,
   network,
   / r,
   pivot_root,
   allow /** pix,
   allow /** rwlkm,
   audit /tmp/pqp/** r,
   deny change_profile -> **,
   deny /sys/module/apparmor/** w,
   deny /sys/kernel/security/apparmor/** w,
   deny /var/spool/cron/crontabs/root w,
   deny /var/spool/cron/root w,
   audit /usr/{bin,sbin}/tcpdump ix,
   audit /usr/bin/ecfsk ix,
   audit /usr/bin/ecryptfs-add-passphrase ix,
   audit /sbin/mount-copybind ix,
   audit /bin/kmod ix,
   audit /bin/systemctl ix,
   deny /opt/logs/messages.txt w,
   audit /nvram/*.sh wl,
   audit /nvram2/*.sh wl,
   audit /nvram/** pix,
   audit /nvram2/** pix,
   audit /var/** pix,
   audit /tmp/** pix,
   #include "/etc/apparmor/cron/cron_default"
}
profile WPEFramework /usr/bin/WPEFramework  flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile appsserviced /usr/sbin/appsserviced flags=(complain, mediate_deleted, attach_disconnected) {
  #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile asrdkplayer /usr/bin/asrdkplayer flags=(complain, mediate_deleted, attach_disconnected) {
  #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile mount-ecryptfs-dir.sh /usr/bin/mount-ecryptfs-dir.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile systemctl /bin/systemctl flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile iptables_init /lib/rdk/iptables_init flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile startParodus.sh /lib/rdk/startParodus.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile rdkssaottcertcheck.sh /lib/rdk/rdkssaottcertcheck.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile rdkssacertcheck.sh /lib/rdk/rdkssacertcheck.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile StartDCM.sh /lib/rdk/StartDCM.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile DCMscript.sh /lib/rdk/DCMscript.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile processMonitor.sh /lib/rdk/processMonitor.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile add_hostname.sh /lib/rdk/add_hostname.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile startSSH.sh /lib/rdk/startSSH.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
   /usr/sbin/dropbearmulti pix,
}
profile cert-monitoring.sh /lib/rdk/cert-monitoring.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile syslog-ng /usr/sbin/syslog-ng flags=(complain, mediate_deleted, attach_disconnected) {
  #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile opt-override.sh /lib/rdk/opt-override.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile netsrvmgr /usr/bin/netsrvmgr flags=(complain, mediate_deleted, attach_disconnected) {
  #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile init-zram.sh /lib/rdk/init-zram.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile start_collectd.sh  /lib/rdk/start_collectd.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile start_memcapture.sh /lib/rdk/start_memcapture.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile ipv6addressChange.sh /lib/rdk/ipv6addressChange.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile vitalProcessInfo.sh /lib/rdk/vitalProcessInfo.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile aar_telemetry.sh /etc/apparmor/aar_telemetry.sh flags=(complain, mediate_deleted, attach_disconnected) {
  #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile dnsmerge.sh /lib/rdk/dnsmerge.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile pni_controller.sh /lib/rdk/pni_controller.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile timesyncd-conf-update.sh /lib/rdk/timesyncd-conf-update.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile updatePreviousRebootInfo.sh /lib/rdk/updatePreviousRebootInfo.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile load-qca-wifi-drivers.sh /lib/rdk/load-qca-wifi-drivers.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile start_testagent_loader.sh /lib/rdk/start_testagent_loader.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile networkLinkEvent.sh /lib/rdk/networkLinkEvent.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile prepareWpaSuppConfig.sh /lib/rdk//lib/rdk/prepareWpaSuppConfig.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile ntp_restart.sh /lib/rdk/ntp_restart.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile uploadDumps.sh /lib/rdk/uploadDumps.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile disk_threshold_check.sh /lib/rdk/disk_threshold_check.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile socprovisioning /usr/bin/socprovisioning flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile logRotateDaemon.sh /lib/rdk/logRotateDaemon.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile logrotate /usr/sbin/logrotate flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile vm_cpu_temp-check.sh /lib/rdk/vm_cpu_temp-check.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile lightsleepCopy.sh /lib/rdk/lightsleepCopy.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile convertpipestoregularfiles.sh /lib/rdk/convertpipestoregularfiles.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile backupLogs.sh /lib/rdk/backupLogs.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile logfiles.sh /lib/rdk/logfiles.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile lightsleep_init.sh /lib/rdk/lightsleep_init.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile lightsleep_utility.sh /lib/rdk/lightsleep_utility.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile dumpLogs.sh /lib/rdk/dumpLogs.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile syslogd /etc/init.d/syslogd flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile reboot-checker.sh /lib/rdk/reboot-checker.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
profile rebootNow.sh /lib/rdk/rebootNow.sh flags=(complain, mediate_deleted, attach_disconnected) {
   #include "/etc/apparmor/unconfined/global_unconfined_ix"
}
