~bernd-sch/onehundredscopes/sshsearch

« back to all changes in this revision

Viewing changes to debian/opt.extras.ubuntu.com.unity-lens-sshsearch.unity-lens-sshsearch.py

  • Committer: Bernd Schlapsi
  • Date: 2012-01-21 07:52:54 UTC
  • mfrom: (22.1.4 sshsearch)
  • Revision ID: brot@gmx.info-20120121075254-uli2a28m3uy1vgmj
Merged Stéphane Graber's changes

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
#include <tunables/global>
 
2
 
 
3
/opt/extras.ubuntu.com/unity-lens-sshsearch/unity-lens-sshsearch.py {
 
4
  #include <abstractions/base>
 
5
  #include <abstractions/python>
 
6
  #include <abstractions/nameservice>
 
7
 
 
8
  deny /usr/share/gvfs/remote-volume-monitors/ r,
 
9
  deny /proc/*/fd/ r,
 
10
 
 
11
  # Allow the actual daemon to run
 
12
  /opt/extras.ubuntu.com/unity-lens-sshsearch/unity-lens-sshsearch.py r,
 
13
 
 
14
  # Allow the daemon to access the scopes
 
15
  /usr/share/unity/lenses/extras_unity_lens_sshsearch/ r,
 
16
 
 
17
  # Allow restricted access to ssh config and known hosts:
 
18
  @{HOME}/.ssh/config r,
 
19
  @{HOME}/.ssh/known_hosts r,
 
20
 
 
21
  # Allow the lens to start gnome-terminal
 
22
  /usr/bin/gnome-terminal Uxr,
 
23
 
 
24
  # Workaround for python2.7 on precise
 
25
  /usr/bin/python2.[4567] ix,
 
26
  /usr/include/python2.[4567]/pyconfig.h r,
 
27
}