92bc3717 |
1 | # Last Modified: Wed Jan 18 14:47:08 2012 |
2 | #include <tunables/global> |
3 | |
4 | /usr/lib/firefox/firefox { |
5 | #include <abstractions/audio> |
6 | #include <abstractions/gnome> |
7 | #include <abstractions/nameservice> |
8 | #include <abstractions/ubuntu-browsers.d/plugins-common> |
9 | |
10 | |
11 | deny /dev/tty rw, |
12 | |
13 | /bin/ps r, |
14 | /etc/** r, |
15 | /home/*/.Xauthority r, |
16 | /home/*/.adobe/**/ rw, |
17 | /home/*/.asoundrc.asoundconf r, |
18 | /home/*/.icons/** r, |
19 | /home/*/.local/share/ r, |
20 | /home/*/.local/share/**/ r, |
21 | /home/*/.macromedia/** rw, |
22 | /home/*/.mozilla/**/ r, |
23 | /home/*/.mozilla/firefox/** mrwk, |
24 | /opt/java/** r, |
25 | /opt/kde/share/** r, |
26 | /proc/** r, |
27 | /sys/devices/system/cpu/ r, |
28 | /sys/devices/system/cpu/* r, |
29 | owner /tmp/** rlk, |
30 | /tmp/** w, |
31 | /usr/lib/firefox/plugin-container rix, |
32 | /usr/share/ r, |
33 | /usr/share/** r, |
34 | /var/db/nscd/* r, |
35 | |
36 | } |