badba640 |
1 | # Last Modified: Thu Jan 19 19:56:19 2012 |
92bc3717 |
2 | # ------------------------------------------------------------------ |
3 | # |
4 | # Copyright (C) 2002-2005 Novell/SUSE |
5 | # |
6 | # This program is free software; you can redistribute it and/or |
7 | # modify it under the terms of version 2 of the GNU General Public |
8 | # License published by the Free Software Foundation. |
9 | # |
10 | # ------------------------------------------------------------------ |
11 | |
12 | #include <tunables/global> |
13 | |
14 | /usr/bin/pidgin { |
15 | #include <abstractions/audio> |
16 | #include <abstractions/base> |
17 | #include <abstractions/bash> |
18 | #include <abstractions/consoles> |
19 | #include <abstractions/gnome> |
20 | #include <abstractions/kde> |
21 | #include <abstractions/nameservice> |
22 | #include <abstractions/perl> |
23 | #include <abstractions/user-tmp> |
24 | |
25 | deny capability sys_ptrace, |
26 | |
27 | |
28 | deny /usr/share/enchant/enchant.ordering r, |
29 | |
30 | /bin/bash rix, |
31 | /dev/random r, |
32 | /etc/esd.conf r, |
33 | /etc/pango/pango.modules r, |
34 | /etc/pango/pango64.modules r, |
35 | /home/** mrwk, |
36 | /home/harvie/private/dotfiles/.purple/answerscripts px, |
37 | /opt/MozillaFirefox/bin/firefox.sh Px, |
38 | /opt/kde/share/** r, |
39 | /opt/kde3/bin/kde-config mrix, |
badba640 |
40 | /sys/devices/system/cpu/* r, |
92bc3717 |
41 | owner /tmp/** rwlk, |
42 | /tmp/** m, |
43 | /usr/X11R6/lib/Acrobat*/Resource/Font/* r, |
44 | /usr/X11R6/lib/Acrobat*/Resource/Font/PFM/* r, |
45 | /usr/bin/pidgin mrix, |
46 | /usr/bin/purple-remote r, |
47 | /usr/lib/GConf/2/gconfd-2 Px, |
48 | /usr/lib/ao/plugins-* r, |
49 | /usr/lib/aspell-** mr, |
50 | /usr/lib/jvm/java-*/jre/lib/fonts/** r, |
51 | /usr/lib/ooo-*/share/fonts/** r, |
52 | /usr/lib/tcl*/encoding/* r, |
53 | /usr/lib64/ao/plugins-* r, |
54 | /usr/lib64/aspell-* r, |
55 | /usr/lib{,32,64}/** mr, |
56 | /usr/share/*/ r, |
57 | /usr/share/alsa/alsa.conf r, |
58 | /usr/share/icons r, |
59 | /usr/share/icons/** r, |
60 | /usr/share/pixmaps r, |
61 | /usr/share/pixmaps/pidgin/** r, |
62 | /usr/share/sounds/pidgin/* r, |
63 | /usr/share/tcl/tcl*/encoding/* r, |
64 | /usr/share/themes/** r, |
65 | /var/db/nscd/* r, |
66 | /{,var/}run/.resmgr_socket w, |
67 | @{HOME}/.fonts r, |
68 | @{HOME}/.gnome2/nautilus-sendto/* rw, |
69 | @{HOME}/.gtk_qt_engine_rc r, |
70 | @{HOME}/.icons/** r, |
71 | @{HOME}/.kde/share/config/gtkrc-* r, |
72 | @{HOME}/.mcop/random-seed rw, |
73 | @{HOME}/.mcoprc r, |
74 | @{HOME}/.purple r, |
75 | @{HOME}/.purple/** rwl, |
76 | @{HOME}/.themes/** r, |
77 | @{HOME}/private/dotfiles/.purple r, |
78 | @{HOME}/private/dotfiles/.purple/** rwl, |
79 | @{PROC}/*/cmdline r, |
80 | |
81 | } |