Current Dir: /snap/core22/2955/etc/apparmor.d/abstractions/
[DIR] apparmor_api [ delete | rename ]
[DIR] ubuntu-browsers.d [ delete | rename ]
[FILE] apache2-common [ edit | delete | rename ]
[FILE] aspell [ edit | delete | rename ]
[FILE] audio [ edit | delete | rename ]
[FILE] authentication [ edit | delete | rename ]
[FILE] base [ edit | delete | rename ]
[FILE] bash [ edit | delete | rename ]
[FILE] consoles [ edit | delete | rename ]
[FILE] crypto [ edit | delete | rename ]
[FILE] cups-client [ edit | delete | rename ]
[FILE] dbus [ edit | delete | rename ]
[FILE] dbus-accessibility [ edit | delete | rename ]
[FILE] dbus-accessibility-strict [ edit | delete | rename ]
[FILE] dbus-network-manager-strict [ edit | delete | rename ]
[FILE] dbus-session [ edit | delete | rename ]
[FILE] dbus-session-strict [ edit | delete | rename ]
[FILE] dbus-strict [ edit | delete | rename ]
[FILE] dconf [ edit | delete | rename ]
[FILE] dovecot-common [ edit | delete | rename ]
[FILE] dri-common [ edit | delete | rename ]
[FILE] dri-enumerate [ edit | delete | rename ]
[FILE] enchant [ edit | delete | rename ]
[FILE] exo-open [ edit | delete | rename ]
[FILE] fcitx [ edit | delete | rename ]
[FILE] fcitx-strict [ edit | delete | rename ]
[FILE] fonts [ edit | delete | rename ]
[FILE] freedesktop.org [ edit | delete | rename ]
[FILE] gio-open [ edit | delete | rename ]
[FILE] gnome [ edit | delete | rename ]
[FILE] gnupg [ edit | delete | rename ]
[FILE] gtk [ edit | delete | rename ]
[FILE] gvfs-open [ edit | delete | rename ]
[FILE] hosts_access [ edit | delete | rename ]
[FILE] ibus [ edit | delete | rename ]
[FILE] kde [ edit | delete | rename ]
[FILE] kde-globals-write [ edit | delete | rename ]
[FILE] kde-icon-cache-write [ edit | delete | rename ]
[FILE] kde-language-write [ edit | delete | rename ]
[FILE] kde-open5 [ edit | delete | rename ]
[FILE] kerberosclient [ edit | delete | rename ]
[FILE] ldapclient [ edit | delete | rename ]
[FILE] libpam-systemd [ edit | delete | rename ]
[FILE] likewise [ edit | delete | rename ]
[FILE] mdns [ edit | delete | rename ]
[FILE] mesa [ edit | delete | rename ]
[FILE] mir [ edit | delete | rename ]
[FILE] mozc [ edit | delete | rename ]
[FILE] mysql [ edit | delete | rename ]
[FILE] nameservice [ edit | delete | rename ]
[FILE] nis [ edit | delete | rename ]
[FILE] nss-systemd [ edit | delete | rename ]
[FILE] nvidia [ edit | delete | rename ]
[FILE] opencl [ edit | delete | rename ]
[FILE] opencl-common [ edit | delete | rename ]
[FILE] opencl-intel [ edit | delete | rename ]
[FILE] opencl-mesa [ edit | delete | rename ]
[FILE] opencl-nvidia [ edit | delete | rename ]
[FILE] opencl-pocl [ edit | delete | rename ]
[FILE] openssl [ edit | delete | rename ]
[FILE] orbit2 [ edit | delete | rename ]
[FILE] p11-kit [ edit | delete | rename ]
[FILE] perl [ edit | delete | rename ]
[FILE] php [ edit | delete | rename ]
[FILE] php-worker [ edit | delete | rename ]
[FILE] php5 [ edit | delete | rename ]
[FILE] postfix-common [ edit | delete | rename ]
[FILE] private-files [ edit | delete | rename ]
[FILE] private-files-strict [ edit | delete | rename ]
[FILE] python [ edit | delete | rename ]
[FILE] qt5 [ edit | delete | rename ]
[FILE] qt5-compose-cache-write [ edit | delete | rename ]
[FILE] qt5-settings-write [ edit | delete | rename ]
[FILE] recent-documents-write [ edit | delete | rename ]
[FILE] ruby [ edit | delete | rename ]
[FILE] samba [ edit | delete | rename ]
[FILE] smbpass [ edit | delete | rename ]
[FILE] snap_browsers [ edit | delete | rename ]
[FILE] ssl_certs [ edit | delete | rename ]
[FILE] ssl_keys [ edit | delete | rename ]
[FILE] svn-repositories [ edit | delete | rename ]
[FILE] ubuntu-bittorrent-clients [ edit | delete | rename ]
[FILE] ubuntu-browsers [ edit | delete | rename ]
[FILE] ubuntu-console-browsers [ edit | delete | rename ]
[FILE] ubuntu-console-email [ edit | delete | rename ]
[FILE] ubuntu-email [ edit | delete | rename ]
[FILE] ubuntu-feed-readers [ edit | delete | rename ]
[FILE] ubuntu-gnome-terminal [ edit | delete | rename ]
[FILE] ubuntu-helpers [ edit | delete | rename ]
[FILE] ubuntu-konsole [ edit | delete | rename ]
[FILE] ubuntu-media-players [ edit | delete | rename ]
[FILE] ubuntu-unity7-base [ edit | delete | rename ]
[FILE] ubuntu-unity7-launcher [ edit | delete | rename ]
[FILE] ubuntu-unity7-messaging [ edit | delete | rename ]
[FILE] ubuntu-xterm [ edit | delete | rename ]
[FILE] user-download [ edit | delete | rename ]
[FILE] user-mail [ edit | delete | rename ]
[FILE] user-manpages [ edit | delete | rename ]
[FILE] user-tmp [ edit | delete | rename ]
[FILE] user-write [ edit | delete | rename ]
[FILE] video [ edit | delete | rename ]
[FILE] vulkan [ edit | delete | rename ]
[FILE] wayland [ edit | delete | rename ]
[FILE] web-data [ edit | delete | rename ]
[FILE] winbind [ edit | delete | rename ]
[FILE] wutmp [ edit | delete | rename ]
[FILE] X [ edit | delete | rename ]
[FILE] xad [ edit | delete | rename ]
[FILE] xdg-desktop [ edit | delete | rename ]
[FILE] xdg-open [ edit | delete | rename ]
Viewing: /snap/core22/2955/etc/apparmor.d/abstractions/gnome
# vim:syntax=apparmor
# ------------------------------------------------------------------
#
# Copyright (C) 2002-2009 Novell/SUSE
# Copyright (C) 2009-2011 Canonical Ltd.
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
abi <abi/3.0>,
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/X>
include <abstractions/freedesktop.org>
include <abstractions/xdg-desktop>
include <abstractions/user-tmp>
include <abstractions/wayland>
# systemwide gtk defaults
/etc/gnome/gtkrc* r,
/etc/gtk/* r,
/usr/lib{,32,64}/gtk/** mr,
/usr/lib/@{multiarch}/gtk/** mr,
/usr/lib{,32,64}/gtk-[0-9]*/** mr,
/usr/lib/@{multiarch}/gtk-[0-9]*/** mr,
/usr/share/themes/ r,
/usr/share/themes/** r,
/usr/share/gtk-3.0/settings.ini r,
# communitheme snap
/snap/communitheme/*/share/themes/ r,
/snap/communitheme/*/share/themes/** r,
# for gnome 1 applications
/etc/orbitrc r,
# gtk-2 needed some new rights
/etc/fonts/* r,
/etc/gtk-*/* r,
/etc/pango/* r,
/usr/lib{,32,64}/pango/** mr,
/usr/lib{,32,64}/gtk-*/** mr,
/usr/lib{,32,64}/gdk-pixbuf-*/** mr,
/usr/lib/@{multiarch}/pango/** mr,
/usr/lib/@{multiarch}/gtk-*/** mr,
/usr/lib/@{multiarch}/gdk-pixbuf-*/** mr,
# per-user gtk configuration
owner @{HOME}/.config/gtk-3.0/ w,
owner @{HOME}/.config/gtk-3.0/* r,
owner @{HOME}/.gnome/Gnome r,
owner @{HOME}/.gtk r,
owner @{HOME}/.gtkrc r,
owner @{HOME}/.gtkrc-2.0 r,
owner @{HOME}/.gtk-bookmarks r,
owner @{HOME}/.themes/ r,
owner @{HOME}/.themes/** r,
owner @{user_share_dirs}/themes/ r,
owner @{user_share_dirs}/themes/** r,
# for gtk file dialog
owner @{HOME}/.config/gtk-2.0/ w,
owner @{HOME}/.config/gtk-2.0/** r,
owner @{HOME}/.config/gtk-2.0/gtkfilechooser.ini* rw,
# from evolution-mail
owner @{HOME}/.gconfd/lock/* r,
owner @{HOME}/.gnome/application-info r,
# per-user font business
owner @{HOME}/.fonts.cache-* rwl,
# GtkComposeTable
owner @{HOME}/.cache/gtk-3.0/** r,
# icon caches
/var/cache/**/icon-theme.cache r,
/usr/share/**/icon-theme.cache r,
# GLib schemas
/usr/{local/,}share/glib-[0-9]*/schemas/ r,
/usr/{local/,}share/glib-[0-9]*/schemas/** r,
# gnome VFS modules
/etc/gnome-vfs-2.0/modules/ r,
/etc/gnome-vfs-2.0/modules/* r,
/usr/lib/gnome-vfs-2.0/modules/*.so mr,
/usr/lib/@{multiarch}/gnome-vfs-2.0/modules/*.so mr,
# gvfs
/usr/share/gvfs/remote-volume-monitors/ r,
/usr/share/gvfs/remote-volume-monitors/* r,
@{PROC}/@{pid}/mounts r,
@{run}/mount/utab r,
# printing
/etc/papersize r,
/etc/cups/lpoptions r,
/usr/share/cups/charmaps/** r,
# holds MIT-MAGIC-COOKIE for gnome
owner @{run}/gdm/auth*/database r,
# mime-types
/etc/gnome/defaults.list r,
/etc/xdg/{,*-}mimeapps.list r,
/usr/share/gnome/applications/ r,
/usr/share/gnome/applications/mimeinfo.cache r,
# Allow connecting to the GNOME vfs socket (still need corresponding DBus
# rules)
unix (send, receive, connect)
type=stream
peer=(addr="@/dbus-vfs-daemon/socket-*"),
# Include additions to the abstraction
include if exists <abstractions/gnome.d>