# BTGuard VPN — wg local override.
#
# wg-quick spawns /usr/bin/wg under its own AppArmor sub-profile that, like
# wg-quick, only permits /etc/wireguard/**. Allow it to read configs the
# helper staged in /var/lib/btguard-vpn-helper/wg/ as well, so 'wg setconf'
# (executed transparently by wg-quick) succeeds.

  /var/lib/btguard-vpn-helper/wg/ r,
  /var/lib/btguard-vpn-helper/wg/** r,
