logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

gvfs-open (1180B)

    

  1. # vim:syntax=apparmor
  3.   abi <abi/3.0>,
  5. # This abstraction is designed to be used in a child profile to limit what
  6. # confined application can invoke via gvfs-open helper.
  7. #
  8. # NOTE: most likely you want to use xdg-open abstraction instead for better
  9. # portability across desktop environments, unless you are sure that confined
  10. # application only uses /usr/bin/gvfs-open directly.
  11. #
  12. # Usage example:
  13. #
  14. # ```
  15. # profile foo /usr/bin/foo {
  16. # ...
  17. # /usr/bin/gvfs-open rPx -> foo//gvfs-open,
  18. # ...
  19. # } # end of main profile
  20. #
  21. # # out-of-line child profile
  22. # profile foo//gvfs-open {
  23. #   include <abstractions/gvfs-open>
  24. #
  25. #   # needed for ubuntu-* abstractions
  26. #   include <abstractions/ubuntu-helpers>
  27. #
  28. #   # Only allow to handle http[s]: and mailto: links
  29. #   include <abstractions/ubuntu-browsers>
  30. #   include <abstractions/ubuntu-email>
  31. #
  32. #   # < add additional allowed applications here >
  33. # }
  34. # ```
  36.   include <abstractions/base>
  38.   # gvfs-open is deprecated, it launches gio open <uri>
  39.   include <abstractions/gio-open>
  41.   # Main executables
  43.   /usr/bin/gvfs-open r,
  44.   /{,usr/}bin/dash mr,
  46.   # Include additions to the abstraction
  47.   include if exists <abstractions/gvfs-open.d>