ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: etc / apparmor.d / abstractions

# vim:syntax=apparmor
#
# abstraction for allowing access to graphical browsers in Ubuntu
#
# Users of this abstraction need to #include the ubuntu-helpers abstraction
# in the toplevel profile. Eg:
# #include <abstractions/ubuntu-helpers>

/usr/bin/arora Cx -> sanitized_helper,
  /usr/bin/conkeror Cx -> sanitized_helper,
  /usr/bin/dillo Cx -> sanitized_helper,
  /usr/bin/Dooble Cx -> sanitized_helper,
  /usr/bin/epiphany Cx -> sanitized_helper,
  /usr/bin/epiphany-browser Cx -> sanitized_helper,
  /usr/bin/epiphany-webkit Cx -> sanitized_helper,
  /usr/lib/fennec-*/fennec Cx -> sanitized_helper,
  /usr/bin/galeon Cx -> sanitized_helper,
  /usr/bin/kazehakase Cx -> sanitized_helper,
  /usr/bin/konqueror Cx -> sanitized_helper,
  /usr/bin/midori Cx -> sanitized_helper,
  /usr/bin/netsurf Cx -> sanitized_helper,
  /usr/bin/prism Cx -> sanitized_helper,
  /usr/bin/rekonq Cx -> sanitized_helper,
  /usr/bin/seamonkey Cx -> sanitized_helper,
  /usr/bin/sensible-browser Pixr,

/usr/bin/chromium{,-browser} Cx -> sanitized_helper,
  /usr/lib{,64}/chromium{,-browser}/chromium{,-browser} Cx -> sanitized_helper,

# this should cover all firefox browsers and versions (including shiretoko
  # and abrowser)
  /usr/bin/firefox Cxr -> sanitized_helper,
  /usr/lib{,64}/firefox*/firefox* Cx -> sanitized_helper,

# Iceweasel
  /usr/bin/iceweasel Cxr -> sanitized_helper,
  /usr/lib/iceweasel/iceweasel Cx -> sanitized_helper,

# some unpackaged, but popular browsers
  /usr/lib/icecat-*/icecat Cx -> sanitized_helper,
  /usr/bin/opera Cx -> sanitized_helper,
  /opt/google/chrome{,-beta,-unstable}/google-chrome{,-beta,-unstable} Cx -> sanitized_helper,

[+] ..
[-] qt5-compose-cache-write [edit]
[-] dri-common [edit]
[-] private-files-strict [edit]
[-] ubuntu-console-browsers [edit]
[-] user-manpages [edit]
[-] perl [edit]
[-] user-mail [edit]
[-] opencl [edit]
[-] opencl-pocl [edit]
[-] p11-kit [edit]
[-] vulkan [edit]
[-] qt5 [edit]
[-] kde [edit]
[+] ubuntu-browsers.d
[-] user-write [edit]
[-] dbus-accessibility-strict [edit]
[-] ubuntu-unity7-messaging [edit]
[-] dbus-session-strict [edit]
[-] svn-repositories [edit]
[-] postfix-common [edit]
[-] dri-enumerate [edit]
[-] ubuntu-console-email [edit]
[-] recent-documents-write [edit]
[-] gnome [edit]
[-] xad [edit]
[-] xdg-desktop [edit]
[-] kde-language-write [edit]
[-] dconf [edit]
[-] ruby [edit]
[-] samba [edit]
[-] consoles [edit]
[-] mdns [edit]
[-] kde-globals-write [edit]
[-] authentication [edit]
[-] winbind [edit]
[-] ubuntu-email [edit]
[-] ubuntu-bittorrent-clients [edit]
[-] mysql [edit]
[-] gnupg [edit]
[-] freedesktop.org [edit]
[-] dbus-session [edit]
[-] fonts [edit]
[-] dbus-accessibility [edit]
[-] likewise [edit]
[-] aspell [edit]
[-] cups-client [edit]
[-] wutmp [edit]
[-] mozc [edit]
[-] ubuntu-unity7-launcher [edit]
[-] libpam-systemd [edit]
[-] ubuntu-gnome-terminal [edit]
[-] opencl-common [edit]
[-] ibus [edit]
[-] ubuntu-media-players [edit]
[-] qt5-settings-write [edit]
[-] opencl-nvidia [edit]
[-] X [edit]
[-] opencl-mesa [edit]
[-] apache2-common [edit]
[-] enchant [edit]
[-] opencl-intel [edit]
[-] fcitx-strict [edit]
[-] python [edit]
[-] nameservice [edit]
[-] ssl_certs [edit]
[-] bash [edit]
[-] php5 [edit]
[-] dbus [edit]
[-] php [edit]
[-] ldapclient [edit]
[-] user-tmp [edit]
[-] wayland [edit]
[-] smbpass [edit]
[-] audio [edit]
[-] fcitx [edit]
[-] mesa [edit]
[-] web-data [edit]
[-] nis [edit]
[+] apparmor_api
[-] base [edit]
[-] ubuntu-unity7-base [edit]
[-] ubuntu-helpers [edit]
[-] dovecot-common [edit]
[-] private-files [edit]
[-] kde-icon-cache-write [edit]
[-] nvidia [edit]
[-] ubuntu-xterm [edit]
[-] dbus-strict [edit]
[-] ubuntu-feed-readers [edit]
[-] openssl [edit]
[-] orbit2 [edit]
[-] kerberosclient [edit]
[-] user-download [edit]
[-] ubuntu-browsers [edit]
[-] ssl_keys [edit]
[-] video [edit]
[-] mir [edit]
[-] ubuntu-konsole [edit]