1 # Last Modified: Thu Jan 2 15:12:38 2014
2 #include <tunables/global>
4 /usr/bin/torbrowser-launcher {
5 #include <abstractions/base>
6 #include <abstractions/nameservice>
7 #include <abstractions/python>
8 #include <abstractions/consoles>
9 #include <abstractions/gnome>
10 #include <abstractions/fonts>
11 #include <abstractions/X>
12 #include <abstractions/audio>
13 #include <abstractions/freedesktop.org>
14 #include <abstractions/dconf>
16 capability sys_ptrace,
18 #/bin/{dash,grep,ps} rix,
20 @{HOME}/.torbrowser/ rw,
21 @{HOME}/.torbrowser/** mrwk,
22 @{HOME}/.torbrowser/gnupg_homedir/* l,
23 @{HOME}/.torbrowser/tbb/{stable,alpha}/{i686,x86_64}/tor-browser_*/start-tor-browser ux,
25 @{PROC}/@{pid}/{cmdline,mountinfo,stat,status} r,
26 @{PROC}/@{pid}/task/** r,
27 @{PROC}/sys/kernel/pid_max r,
28 @{PROC}/tty/drivers r,
31 /usr/bin/{gpg,wmctrl,dirname,expr,file,getconf,id,dash,grep,ps} rix,
32 /usr/bin/torbrowser-launcher rux,
33 /usr/share/file/magic.mgc r,
34 /usr/share/file/magic/ r,
35 /usr/share/themes/** r,
36 /usr/share/torbrowser-launcher/** r,
38 /usr/share/glib-2.0/schemas/gschemas.compiled r,
39 owner /{,var/}run/user/*/dconf/user rw,