]> git.lizzy.rs Git - torbrowser-launcher.git/blob - apparmor/usr.bin.torbrowser-launcher
Deduplicate tons of rules thanks to the gnome abstraction, that itself includes the...
[torbrowser-launcher.git] / apparmor / usr.bin.torbrowser-launcher
1 # Last Modified: Thu Jan  2 15:12:38 2014
2 #include <tunables/global>
3
4 /usr/bin/torbrowser-launcher {
5   #include <abstractions/base>
6   #include <abstractions/nameservice>
7   #include <abstractions/python>
8   #include <abstractions/consoles>
9   #include <abstractions/gnome>
10   #include <abstractions/fonts>
11   #include <abstractions/X>
12   #include <abstractions/audio>
13   #include <abstractions/freedesktop.org>
14   #include <abstractions/dconf>
15   
16   capability sys_ptrace,
17
18   #/bin/{dash,grep,ps} rix,
19   /etc/magic r,
20   @{HOME}/.torbrowser/ rw,
21   @{HOME}/.torbrowser/** mrwk,
22   @{HOME}/.torbrowser/gnupg_homedir/* l,
23   @{HOME}/.torbrowser/tbb/{stable,alpha}/{i686,x86_64}/tor-browser_*/start-tor-browser ux,
24   @{PROC}/ r,
25   @{PROC}/@{pid}/{cmdline,mountinfo,stat,status} r,
26   @{PROC}/@{pid}/task/** r,
27   @{PROC}/sys/kernel/pid_max r,
28   @{PROC}/tty/drivers r,
29   @{PROC}/uptime r,
30   /usr/bin/ r,
31   /usr/bin/{gpg,wmctrl,dirname,expr,file,getconf,id,dash,grep,ps} rix,
32   /usr/bin/torbrowser-launcher rux,
33   /usr/share/file/magic.mgc r,
34   /usr/share/file/magic/ r,
35   /usr/share/themes/** r,
36   /usr/share/torbrowser-launcher/** r,
37
38   /usr/share/glib-2.0/schemas/gschemas.compiled r,
39   owner /{,var/}run/user/*/dconf/user rw,
40
41 }