Current Dir: /snap/core22/2955/etc/apparmor.d/abstractions/ubuntu-browsers.d/
[FILE] chromium-browser [ edit | delete | rename ]
[FILE] java [ edit | delete | rename ]
[FILE] kde [ edit | delete | rename ]
[FILE] mailto [ edit | delete | rename ]
[FILE] multimedia [ edit | delete | rename ]
[FILE] plugins-common [ edit | delete | rename ]
[FILE] productivity [ edit | delete | rename ]
[FILE] text-editors [ edit | delete | rename ]
[FILE] ubuntu-integration [ edit | delete | rename ]
[FILE] ubuntu-integration-xul [ edit | delete | rename ]
[FILE] user-files [ edit | delete | rename ]
Viewing: /snap/core22/2955/etc/apparmor.d/abstractions/ubuntu-browsers.d/user-files
# vim:syntax=apparmor
abi <abi/3.0>,
# Allow read to all files user has DAC access to and write access to all
# files owned by the user in $HOME.
@{HOME}/ r,
@{HOME}/** r,
owner @{HOME}/** w,
# Do not allow read and/or write to particularly sensitive/problematic files
include <abstractions/private-files>
audit deny @{HOME}/.ssh/{,**} mrwkl,
audit deny @{HOME}/.gnome2_private/{,**} mrwkl,
audit deny @{HOME}/.kde{,4}/{,share/,share/apps/} w,
audit deny @{HOME}/.kde{,4}/share/apps/kwallet/{,**} mrwkl,
audit deny @{HOME}/.local/share/kwalletd/{,**} mrwkl,
# Comment this out if using gpg plugin/addons
audit deny @{HOME}/.gnupg/{,**} mrwkl,
# Allow read to all files user has DAC access to and write for files the user
# owns on removable media and filesystems.
/media/** r,
/mnt/** r,
/srv/** r,
/net/** r,
owner /media/** w,
owner /mnt/** w,
owner /srv/** w,
owner /net/** w,