# Last Modified: Fri Apr 13 21:57:17 2018
#include <tunables/global>

/usr/bin/updatedb {
  #include <abstractions/base>

  capability dac_override,
  capability dac_read_search,
  capability fowner,

  / r,
  /**/ r,
  /etc/updatedb.conf r,
  /usr/bin/updatedb mr,
  owner /proc/@{pid}/mounts r,
  /var/lib/mlocate/mlocate.db rwk,
  /var/lib/mlocate/mlocate.db.?????? rw,

}