8b70385e |
1 | # Last Modified: Wed Jan 18 13:50:50 2012 |
92bc3717 |
2 | #include <tunables/global> |
3 | |
4 | /usr/lib/firefox/firefox { |
5 | #include <abstractions/audio> |
6 | #include <abstractions/gnome> |
7 | #include <abstractions/nameservice> |
8 | #include <abstractions/ubuntu-browsers.d/plugins-common> |
9 | |
10 | |
11 | deny /dev/tty rw, |
12 | |
9ae06543 |
13 | / r, |
5a77cdbb |
14 | /bin/ps mrix, |
92bc3717 |
15 | /etc/** r, |
9ae06543 |
16 | /home/*/ r, |
92bc3717 |
17 | /home/*/.Xauthority r, |
18 | /home/*/.adobe/**/ rw, |
19 | /home/*/.asoundrc.asoundconf r, |
20 | /home/*/.icons/** r, |
21 | /home/*/.local/share/ r, |
22 | /home/*/.local/share/**/ r, |
23 | /home/*/.macromedia/** rw, |
24 | /home/*/.mozilla/**/ r, |
25 | /home/*/.mozilla/firefox/** mrwk, |
8b70385e |
26 | /home/*/Desktop/ r, |
9ae06543 |
27 | /home/*/Desktop/** rwk, |
8b70385e |
28 | /home/*/Downloads/ r, |
9ae06543 |
29 | /home/*/Downloads/** rwk, |
8b70385e |
30 | /home/*/Temp/ r, |
9ae06543 |
31 | /home/*/Temp/** rwk, |
92bc3717 |
32 | /opt/java/** r, |
33 | /opt/kde/share/** r, |
34 | /proc/** r, |
35 | /sys/devices/system/cpu/ r, |
36 | /sys/devices/system/cpu/* r, |
37 | owner /tmp/** rlk, |
38 | /tmp/** w, |
39 | /usr/lib/firefox/plugin-container rix, |
40 | /usr/share/ r, |
41 | /usr/share/** r, |
42 | /var/db/nscd/* r, |
43 | |
44 | } |