summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--apparmor-profiles/opt.scudcloud.scudcloud76
1 files changed, 76 insertions, 0 deletions
diff --git a/apparmor-profiles/opt.scudcloud.scudcloud b/apparmor-profiles/opt.scudcloud.scudcloud
new file mode 100644
index 0000000..135194c
--- /dev/null
+++ b/apparmor-profiles/opt.scudcloud.scudcloud
@@ -0,0 +1,76 @@
+# Last Modified: Sat Nov 14 17:12:20 2015
+#include <tunables/global>
+
+/opt/scudcloud/scudcloud {
+ #include <abstractions/base>
+ #include <abstractions/gnome>
+ #include <abstractions/kde>
+ #include <abstractions/nameservice>
+ #include <abstractions/fonts>
+ #include <abstractions/audio>
+ #include <abstractions/cups-client>
+ #include <abstractions/dbus-session>
+ #include <abstractions/ibus>
+
+ /opt/scudcloud/ r,
+ /opt/scudcloud/** r,
+ "/usr/bin/env python3" ix,
+ /usr/bin/python3.4 ix,
+
+ @{PROC}/[0-9]*/cmdline r,
+
+ #/etc/localtime r,
+ /etc/fstab r,
+ #/etc/resolv.conf r,
+ #/etc/hosts r,
+ #/etc/host.conf r,
+ #/etc/gai.conf r,
+ #/etc/fonts/** r,
+ #/etc/ssl/certs/ r,
+ #/etc/nsswitch.conf r,
+
+ /usr/bin/xdg-open rix,
+ /usr/bin/xprop rix,
+ /bin/grep rix,
+ /bin/egrep rix,
+ /usr/bin/dbus-send rix,
+ /usr/bin/xdg-mime rix,
+ /usr/lib/iceweasel/iceweasel px,
+
+ /usr/share/** r,
+ #/usr/share/icons/ r,
+ /usr/share/icons/** rk,
+ #/usr/share/ca-certificates/mozilla/** r,
+ /usr/local/lib/python*/dist-packages/ r,
+ /usr/local/lib/python*/dist-packages/** rm,
+ /usr/lib/python*/** rm,
+ #/usr/share/fonts/** r,
+ #/usr/share/fontconfig/** r,
+ #/usr/share/hunspell/** r,
+ #/usr/share/texmf/fonts/** r,
+ #/usr/local/share/fonts/ r,
+ #/usr/local/share/fonts/** r,
+ /usr/local/share/** r,
+
+ /var/cache/fontconfig/** r,
+
+ owner /tmp/** rwm,
+ #owner /tmp/*.png rw,
+ #/tmp/.X[0-9]*-lock r,
+
+ #owner @{HOME}/ r,
+ #owner @{HOME}/.gtk-bookmarks r,
+ owner @{HOME}/.config/gtk-3.0/bookmarks r,
+ #owner @{HOME}/.config/gtk-2.0/gtkfilechooser.ini r,
+ owner @{HOME}/.config/scudcloud/ r,
+ owner @{HOME}/.config/scudcloud/** rwk,
+ #owner @{HOME}/.gtkrc-2.0 r,
+ #owner @{HOME}/.Xauthority r,
+ #owner @{HOME}/.config/Trolltech.conf rk,
+ owner @{HOME}/.cache/gstreamer-1.0/** r,
+
+ owner @{HOME}/Öffentlich/ r,
+ owner @{HOME}/Öffentlich/** r,
+ owner /mnt/virtual/wolfi/Öffentlich/ r,
+ owner /mnt/virtual/wolfi/Öffentlich/** r,
+}