Commit | Line | Data |
---|---|---|
9ae06543 | 1 | # Last Modified: Wed Jan 18 13:31:46 2012 |
92bc3717 | 2 | #include <tunables/global> |
3 | ||
4 | /usr/lib/firefox/firefox { | |
5 | #include <abstractions/audio> | |
6 | #include <abstractions/gnome> | |
7 | #include <abstractions/nameservice> | |
8 | #include <abstractions/ubuntu-browsers.d/plugins-common> | |
9 | ||
10 | ||
11 | deny /dev/tty rw, | |
12 | ||
9ae06543 | 13 | / r, |
92bc3717 | 14 | /bin/ps r, |
15 | /etc/** r, | |
9ae06543 | 16 | /home/*/ r, |
92bc3717 | 17 | /home/*/.Xauthority r, |
18 | /home/*/.adobe/**/ rw, | |
19 | /home/*/.asoundrc.asoundconf r, | |
20 | /home/*/.icons/** r, | |
21 | /home/*/.local/share/ r, | |
22 | /home/*/.local/share/**/ r, | |
23 | /home/*/.macromedia/** rw, | |
24 | /home/*/.mozilla/**/ r, | |
25 | /home/*/.mozilla/firefox/** mrwk, | |
9ae06543 TM |
26 | /home/*/Desktop/** rwk, |
27 | /home/*/Downloads/** rwk, | |
28 | /home/*/Temp/** rwk, | |
92bc3717 | 29 | /opt/java/** r, |
30 | /opt/kde/share/** r, | |
31 | /proc/** r, | |
32 | /sys/devices/system/cpu/ r, | |
33 | /sys/devices/system/cpu/* r, | |
34 | owner /tmp/** rlk, | |
35 | /tmp/** w, | |
36 | /usr/lib/firefox/plugin-container rix, | |
37 | /usr/share/ r, | |
38 | /usr/share/** r, | |
39 | /var/db/nscd/* r, | |
40 | ||
41 | } |