#include <tunables/global>
#include <tunables/gnunet>
-profile @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-helper-nat-server flags=(complain) {
- #include <abstractions/gnunet-common>
+profile @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-helper-nat-server {
+ #include <abstractions/gnunet-suid>
capability setuid,
@{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-helper-nat-server mr,
+
+ # Site-specific additions and overrides. See local/README for details.
+ #include <local/gnunet-suid>
}