#include <tunables/global>
/usr/lib/nagios/plugins/check_icmp {
    #include <abstractions/base>
    #include <abstractions/nameservice>

    capability net_raw,
    capability setuid,
    network inet raw,

    /etc/monitoring-plugins/* r,
}