logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

multimedia (1414B)

    

  1. # vim:syntax=apparmor
  2. # Users of this abstraction need to include the ubuntu-helpers abstraction
  3. # in the toplevel profile. Eg:
  4. #   include <abstractions/ubuntu-helpers>
  6.   abi <abi/3.0>,
  8.   include <abstractions/X>
  10.   # Pulseaudio
  11.   /usr/bin/pulseaudio Pixr,
  13.   # Image viewers
  14.   /usr/bin/eog Cxr -> sanitized_helper,
  15.   /usr/bin/gimp* Cxr -> sanitized_helper,
  16.   /usr/bin/shotwell Cxr -> sanitized_helper,
  17.   /usr/bin/digikam Cxr -> sanitized_helper,
  18.   /usr/bin/gwenview Cxr -> sanitized_helper,
  20.   include <abstractions/ubuntu-media-players>
  21.   owner @{HOME}/.adobe/ w,
  22.   owner @{HOME}/.adobe/** rw,
  23.   owner @{HOME}/.macromedia/ w,
  24.   owner @{HOME}/.macromedia/** rw,
  25.   /opt/real/RealPlayer/mozilla/nphelix.so rm,
  26.   /usr/bin/lpstat Cxr -> sanitized_helper,
  27.   /usr/bin/lpr Cxr -> sanitized_helper,
  29.   # Bittorrent clients
  30.   include <abstractions/ubuntu-bittorrent-clients>
  32.   # Archivers
  33.   /usr/bin/ark Cxr -> sanitized_helper,
  34.   /usr/bin/file-roller Cxr -> sanitized_helper,
  35.   /usr/bin/xarchiver Cxr -> sanitized_helper,
  36.   /usr/local/lib{,32,64}/*.so* mr,
  38.   # News feed readers
  39.   include <abstractions/ubuntu-feed-readers>
  41.   # If we allow the above, nvidia based systems will also need this
  42.   include <abstractions/nvidia>
  44.   # Virus scanners
  45.   /usr/bin/clamscan Cx -> sanitized_helper,
  47.   # gxine (LP: #1057642)
  48.   /var/lib/xine/gxine.desktop r,
  50.   # For WebRTC camera access (LP: #1665535)
  51.   /dev/video[0-9]* rw,