#include <tunables/global>

/usr/bin/turnserver {
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/user-tmp>

  /etc/coturn/*.conf r,
  /etc/pki/coturn/** r,
  /usr/bin/turnserver mr,
  owner /run/coturn/* w,
  owner /var/lib/coturn/* rwk,
  owner /var/log/coturn/*.log rw,
  owner /var/log/turn*.log w,

  # Site-specific additions and overrides. See local/README for details.
  #include <local/usr.bin.turnserver>
}