Current Dir: /snap/core22/2955/etc/apparmor.d/abstractions/ubuntu-browsers.d/

[FILE] chromium-browser [ edit | delete | rename ]
[FILE] java [ edit | delete | rename ]
[FILE] kde [ edit | delete | rename ]
[FILE] mailto [ edit | delete | rename ]
[FILE] multimedia [ edit | delete | rename ]
[FILE] plugins-common [ edit | delete | rename ]
[FILE] productivity [ edit | delete | rename ]
[FILE] text-editors [ edit | delete | rename ]
[FILE] ubuntu-integration [ edit | delete | rename ]
[FILE] ubuntu-integration-xul [ edit | delete | rename ]
[FILE] user-files [ edit | delete | rename ]

Viewing: /snap/core22/2955/etc/apparmor.d/abstractions/ubuntu-browsers.d/user-files

# vim:syntax=apparmor

  abi <abi/3.0>,

  # Allow read to all files user has DAC access to and write access to all
  # files owned by the user in $HOME.
  @{HOME}/ r,
  @{HOME}/** r,
  owner @{HOME}/** w,

  # Do not allow read and/or write to particularly sensitive/problematic files
  include <abstractions/private-files>
  audit deny @{HOME}/.ssh/{,**} mrwkl,
  audit deny @{HOME}/.gnome2_private/{,**} mrwkl,
  audit deny @{HOME}/.kde{,4}/{,share/,share/apps/} w,
  audit deny @{HOME}/.kde{,4}/share/apps/kwallet/{,**} mrwkl,
  audit deny @{HOME}/.local/share/kwalletd/{,**} mrwkl,

  # Comment this out if using gpg plugin/addons
  audit deny @{HOME}/.gnupg/{,**} mrwkl,

  # Allow read to all files user has DAC access to and write for files the user
  # owns on removable media and filesystems.
  /media/** r,
  /mnt/** r,
  /srv/** r,
  /net/** r,
  owner /media/** w,
  owner /mnt/** w,
  owner /srv/** w,
  owner /net/** w,

Upload File: