From: Tomas Mudrunka <tomas.mudrunka@gmail.com>
Date: Wed, 18 Jan 2012 13:05:12 +0000 (+0100)
Subject: makepkg profile for safe AUR + firefox tweaks
X-Git-Url: http://git.harvie.cz/?p=mirrors%2FAppArmor-Profiles.git;a=commitdiff_plain;h=8b70385ed01b89002fd8bbf82d8a14a75fa5a908

makepkg profile for safe AUR + firefox tweaks
---

diff --git a/usr.bin.makepkg b/usr.bin.makepkg
new file mode 100644
index 0000000..b8f1be0
--- /dev/null
+++ b/usr.bin.makepkg
@@ -0,0 +1,18 @@
+# Last Modified: Wed Jan 18 13:58:35 2012
+# This profile is made for users that are building
+# AUR packages from untrusted PKGBUILDs often
+
+#include <tunables/global>
+
+/usr/bin/makepkg {
+  #include <abstractions/base>
+  #include <abstractions/bash>
+  #include <abstractions/consoles>
+
+  /** rix,
+  /etc/** r,
+  /home/*/.ccache/** rwix,
+  /home/*/{Temp,Work/PKGBUILDs}/** rw,
+  /tmp/** rwkix,
+
+}
diff --git a/usr.lib.firefox.firefox b/usr.lib.firefox.firefox
index c838714..a96b6d3 100644
--- a/usr.lib.firefox.firefox
+++ b/usr.lib.firefox.firefox
@@ -1,4 +1,4 @@
-# Last Modified: Wed Jan 18 13:31:46 2012
+# Last Modified: Wed Jan 18 13:50:50 2012
 #include <tunables/global>
 
 /usr/lib/firefox/firefox {
@@ -23,8 +23,11 @@
   /home/*/.macromedia/** rw,
   /home/*/.mozilla/**/ r,
   /home/*/.mozilla/firefox/** mrwk,
+  /home/*/Desktop/ r,
   /home/*/Desktop/** rwk,
+  /home/*/Downloads/ r,
   /home/*/Downloads/** rwk,
+  /home/*/Temp/ r,
   /home/*/Temp/** rwk,
   /opt/java/** r,
   /opt/kde/share/** r,