Current Dir: /snap/core22/2955/etc/apparmor.d/abstractions/
[DIR] apparmor_api [ delete | rename ]
[DIR] ubuntu-browsers.d [ delete | rename ]
[FILE] apache2-common [ edit | delete | rename ]
[FILE] aspell [ edit | delete | rename ]
[FILE] audio [ edit | delete | rename ]
[FILE] authentication [ edit | delete | rename ]
[FILE] base [ edit | delete | rename ]
[FILE] bash [ edit | delete | rename ]
[FILE] consoles [ edit | delete | rename ]
[FILE] crypto [ edit | delete | rename ]
[FILE] cups-client [ edit | delete | rename ]
[FILE] dbus [ edit | delete | rename ]
[FILE] dbus-accessibility [ edit | delete | rename ]
[FILE] dbus-accessibility-strict [ edit | delete | rename ]
[FILE] dbus-network-manager-strict [ edit | delete | rename ]
[FILE] dbus-session [ edit | delete | rename ]
[FILE] dbus-session-strict [ edit | delete | rename ]
[FILE] dbus-strict [ edit | delete | rename ]
[FILE] dconf [ edit | delete | rename ]
[FILE] dovecot-common [ edit | delete | rename ]
[FILE] dri-common [ edit | delete | rename ]
[FILE] dri-enumerate [ edit | delete | rename ]
[FILE] enchant [ edit | delete | rename ]
[FILE] exo-open [ edit | delete | rename ]
[FILE] fcitx [ edit | delete | rename ]
[FILE] fcitx-strict [ edit | delete | rename ]
[FILE] fonts [ edit | delete | rename ]
[FILE] freedesktop.org [ edit | delete | rename ]
[FILE] gio-open [ edit | delete | rename ]
[FILE] gnome [ edit | delete | rename ]
[FILE] gnupg [ edit | delete | rename ]
[FILE] gtk [ edit | delete | rename ]
[FILE] gvfs-open [ edit | delete | rename ]
[FILE] hosts_access [ edit | delete | rename ]
[FILE] ibus [ edit | delete | rename ]
[FILE] kde [ edit | delete | rename ]
[FILE] kde-globals-write [ edit | delete | rename ]
[FILE] kde-icon-cache-write [ edit | delete | rename ]
[FILE] kde-language-write [ edit | delete | rename ]
[FILE] kde-open5 [ edit | delete | rename ]
[FILE] kerberosclient [ edit | delete | rename ]
[FILE] ldapclient [ edit | delete | rename ]
[FILE] libpam-systemd [ edit | delete | rename ]
[FILE] likewise [ edit | delete | rename ]
[FILE] mdns [ edit | delete | rename ]
[FILE] mesa [ edit | delete | rename ]
[FILE] mir [ edit | delete | rename ]
[FILE] mozc [ edit | delete | rename ]
[FILE] mysql [ edit | delete | rename ]
[FILE] nameservice [ edit | delete | rename ]
[FILE] nis [ edit | delete | rename ]
[FILE] nss-systemd [ edit | delete | rename ]
[FILE] nvidia [ edit | delete | rename ]
[FILE] opencl [ edit | delete | rename ]
[FILE] opencl-common [ edit | delete | rename ]
[FILE] opencl-intel [ edit | delete | rename ]
[FILE] opencl-mesa [ edit | delete | rename ]
[FILE] opencl-nvidia [ edit | delete | rename ]
[FILE] opencl-pocl [ edit | delete | rename ]
[FILE] openssl [ edit | delete | rename ]
[FILE] orbit2 [ edit | delete | rename ]
[FILE] p11-kit [ edit | delete | rename ]
[FILE] perl [ edit | delete | rename ]
[FILE] php [ edit | delete | rename ]
[FILE] php-worker [ edit | delete | rename ]
[FILE] php5 [ edit | delete | rename ]
[FILE] postfix-common [ edit | delete | rename ]
[FILE] private-files [ edit | delete | rename ]
[FILE] private-files-strict [ edit | delete | rename ]
[FILE] python [ edit | delete | rename ]
[FILE] qt5 [ edit | delete | rename ]
[FILE] qt5-compose-cache-write [ edit | delete | rename ]
[FILE] qt5-settings-write [ edit | delete | rename ]
[FILE] recent-documents-write [ edit | delete | rename ]
[FILE] ruby [ edit | delete | rename ]
[FILE] samba [ edit | delete | rename ]
[FILE] smbpass [ edit | delete | rename ]
[FILE] snap_browsers [ edit | delete | rename ]
[FILE] ssl_certs [ edit | delete | rename ]
[FILE] ssl_keys [ edit | delete | rename ]
[FILE] svn-repositories [ edit | delete | rename ]
[FILE] ubuntu-bittorrent-clients [ edit | delete | rename ]
[FILE] ubuntu-browsers [ edit | delete | rename ]
[FILE] ubuntu-console-browsers [ edit | delete | rename ]
[FILE] ubuntu-console-email [ edit | delete | rename ]
[FILE] ubuntu-email [ edit | delete | rename ]
[FILE] ubuntu-feed-readers [ edit | delete | rename ]
[FILE] ubuntu-gnome-terminal [ edit | delete | rename ]
[FILE] ubuntu-helpers [ edit | delete | rename ]
[FILE] ubuntu-konsole [ edit | delete | rename ]
[FILE] ubuntu-media-players [ edit | delete | rename ]
[FILE] ubuntu-unity7-base [ edit | delete | rename ]
[FILE] ubuntu-unity7-launcher [ edit | delete | rename ]
[FILE] ubuntu-unity7-messaging [ edit | delete | rename ]
[FILE] ubuntu-xterm [ edit | delete | rename ]
[FILE] user-download [ edit | delete | rename ]
[FILE] user-mail [ edit | delete | rename ]
[FILE] user-manpages [ edit | delete | rename ]
[FILE] user-tmp [ edit | delete | rename ]
[FILE] user-write [ edit | delete | rename ]
[FILE] video [ edit | delete | rename ]
[FILE] vulkan [ edit | delete | rename ]
[FILE] wayland [ edit | delete | rename ]
[FILE] web-data [ edit | delete | rename ]
[FILE] winbind [ edit | delete | rename ]
[FILE] wutmp [ edit | delete | rename ]
[FILE] X [ edit | delete | rename ]
[FILE] xad [ edit | delete | rename ]
[FILE] xdg-desktop [ edit | delete | rename ]
[FILE] xdg-open [ edit | delete | rename ]
Viewing: /snap/core22/2955/etc/apparmor.d/abstractions/private-files
# vim:syntax=apparmor
# privacy-violations contains rules for common files that you want to
# explicitly deny access
abi <abi/3.0>,
# privacy violations (don't audit files under $HOME otherwise get a
# lot of false positives when reading contents of directories)
deny @{HOME}/.*history mrwkl,
deny @{HOME}/.fetchmail* mrwkl,
deny @{HOME}/.mutt** mrwkl,
deny @{HOME}/.viminfo* mrwkl,
deny @{HOME}/.*~ mrwkl,
deny @{HOME}/.*.swp mrwkl,
deny @{HOME}/.*~1~ mrwkl,
deny @{HOME}/.*.bak mrwkl,
# special attention to (potentially) executable files
audit deny @{HOME}/bin/{,**} wl,
audit deny @{HOME}/.config/ w,
audit deny @{HOME}/.config/autostart/{,**} wl,
audit deny @{HOME}/.config/upstart/{,**} wl,
audit deny @{HOME}/.init/{,**} wl,
audit deny @{HOME}/.kde{,4}/ w,
audit deny @{HOME}/.kde{,4}/Autostart/{,**} wl,
audit deny @{HOME}/.kde{,4}/env/{,**} wl,
audit deny @{HOME}/.local/{,share/} w,
audit deny @{HOME}/.local/share/thumbnailers/{,**} wl,
audit deny @{HOME}/.pki/ w,
audit deny @{HOME}/.pki/nssdb/{,*.so{,.[0-9]*}} wl,
# don't allow reading/updating of run control files
deny @{HOME}/.*rc mrk,
audit deny @{HOME}/.*rc wl,
# bash
deny @{HOME}/.bash* mrk,
audit deny @{HOME}/.bash* wl,
deny @{HOME}/.inputrc mrk,
audit deny @{HOME}/.inputrc wl,
# sh/dash/csh/tcsh/pdksh/zsh
deny @{HOME}/.{,z}profile* mrk,
audit deny @{HOME}/.{,z}profile* wl,
deny @{HOME}/.{,z}log{in,out} mrk,
audit deny @{HOME}/.{,z}log{in,out} wl,
deny @{HOME}/.zshenv mrk,
audit deny @{HOME}/.zshenv wl,
# Include additions to the abstraction
include if exists <abstractions/private-files.d>