5adcf8d6 |
1 | # Last Modified: Wed Jan 18 15:27:42 2012 |
92bc3717 |
2 | # Author: Thomas Mudrunka |
3 | |
4 | #include <tunables/global> |
5 | |
6 | /usr/lib/chromium/chromium { |
7 | #include <abstractions/audio> |
8 | #include <abstractions/base> |
9 | #include <abstractions/fonts> |
10 | #include <abstractions/freedesktop.org> |
11 | #include <abstractions/gnome> |
12 | #include <abstractions/nameservice> |
13 | #include <abstractions/ubuntu-browsers> |
14 | #include <abstractions/ubuntu-browsers.d/plugins-common> |
15 | #include <abstractions/ubuntu-konsole> |
16 | |
17 | capability dac_override, |
18 | capability dac_read_search, |
19 | capability setgid, |
20 | capability setuid, |
21 | capability sys_admin, |
22 | capability sys_chroot, |
23 | capability sys_ptrace, |
24 | |
25 | |
26 | |
5a77cdbb |
27 | /bin/ps mrix, |
92bc3717 |
28 | /dev/shm/* rw, |
29 | /etc/** r, |
30 | /home/*/* r, |
31 | /home/*/.adobe/**/ rw, |
32 | /home/*/.cache/chromium/** rw, |
33 | /home/*/.cups/* r, |
34 | /home/*/.icons/** r, |
35 | /home/*/.macromedia/** rw, |
36 | /home/*/.mozilla/** r, |
37 | /home/*/.pki/** rwk, |
38 | /home/*/.themes/** r, |
39 | /home/*/Work/GIT/plugins/chrome-extensions/** r, |
40 | /home/*/private/dotfiles/.config/chromium/** rwk, |
5adcf8d6 |
41 | /opt/java/** mr, |
92bc3717 |
42 | /opt/kde/share/** r, |
43 | /proc/ r, |
44 | /proc/** rw, |
45 | /sys/** r, |
46 | /tmp/* r, |
47 | /usr/lib/chromium/chromium rix, |
48 | /usr/lib/chromium/chromium-sandbox rix, |
49 | /usr/lib/lib*so* mr, |
5adcf8d6 |
50 | /var/db/nscd/* r, |
92bc3717 |
51 | /var/tmp/* rw, |
52 | |
53 | } |