logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

exo-open (1921B)

    

  1. # vim:syntax=apparmor
  3.   abi <abi/3.0>,
  5. # This abstraction is designed to be used in a child profile to limit what
  6. # confined application can invoke via exo-open helper.
  7. #
  8. # NOTE: most likely you want to use xdg-open abstraction instead for better
  9. # portability across desktop environments, unless you are sure that confined
  10. # application only uses /usr/bin/exo-open directly.
  11. #
  12. # Usage example:
  13. #
  14. # ```
  15. # profile foo /usr/bin/foo {
  16. # ...
  17. # /usr/bin/exo-open rPx -> foo//exo-open,
  18. # ...
  19. # } # end of main profile
  20. #
  21. # # out-of-line child profile
  22. # profile foo//exo-open {
  23. #   include <abstractions/exo-open>
  24. #
  25. #   # needed for ubuntu-* abstractions
  26. #   include <abstractions/ubuntu-helpers>
  27. #
  28. #   # Only allow to handle http[s]: and mailto: links
  29. #   include <abstractions/ubuntu-browsers>
  30. #   include <abstractions/ubuntu-email>
  31. #
  32. #   # Add if accessibility access is considered as required
  33. #   # (for message box in case exo-open fails)
  34. #   include <abstractions/dbus-accessibility>
  35. #
  36. #   # < add additional allowed applications here >
  37. # }
  39.   include <abstractions/X>
  40.   include <abstractions/audio> # for alert messages
  41.   include <abstractions/base>
  42.   include <abstractions/dbus-session-strict>
  43.   include <abstractions/gnome>
  45.   # Main executables
  47.   /usr/bin/exo-open rix,
  48.   /usr/lib{32,64,/@{multiarch}}/xfce4/exo-[0-9]/exo-helper-[0-9] ix,
  50.   # Other executables
  52.   /{,usr/}bin/which rix,
  54.   # System files
  56.   /etc/xdg/{,xdg-*/}xfce4/helpers.rc r,
  57.   /etc/xfce4/defaults.list r, # TODO: move into xfce4 abstraction?
  58.   /usr/share/sounds/freedesktop/** r, # for message box alert sound
  59.   /usr/share/xfce4/helpers/*.desktop r,
  60.   /usr/share/{xfce{,4},xubuntu}/applications/{,*.list} r,
  62.   # User files
  64.   owner @{PROC}/@{pid}/fd/ r,
  65.   owner @{HOME}/.config/xfce4/helpers.rc r,
  66.   owner @{HOME}/.local/share/xfce4/helpers/*.desktop r,
  68.   # Include additions to the abstraction
  69.   include if exists <abstractions/exo-open.d>