~ubuntu-branches/ubuntu/wily/apparmor-easyprof-ubuntu/wily

« back to all changes in this revision

Viewing changes to data/templates/ubuntu/1.1/ubuntu-webapp

  • Committer: Package Import Robot
  • Author(s): Jamie Strandboge
  • Date: 2014-09-26 15:21:37 UTC
  • Revision ID: package-import@ubuntu.com-20140926152137-pqgyh6mazdd58oi2
* ubuntu/calendar: add missing rule for org.freedesktop.DBus.Introspectable
  on path /com/canonical/indicator/datetime/AlarmProperties (LP: #1374623)
* ubuntu/1.[12]/ubuntu-{sdk,webapp}: remove no longer needed rule for
  /{,run/}shm/shm/WK2SharedMemory.[0-9]* (LP: #1197060)
* ubuntu/microphone:
  - add temporary write access to /{run,dev}/shm/shmfd-* for QAudioRecorder
    (LP: #1370218)
  - explicitly deny read on /dev/
* ubuntu/1.1/webview: allow dbus send to RequestName on org.freedesktop.DBus
  webapp-container needs corresponding 'bind' call on
  org.freedesktop.Application, which we block elsewhere. webapp-container
  shouldn't be doing this under confinement, but we allow this rule in
  content_exchange, so just allow it to avoid confusion. (LP: #1357371)

Show diffs side-by-side

added added

removed removed

Lines of Context:
381
381
  # Application writable dirs
382
382
  #
383
383
 
384
 
  # FIXME: LP: #1197060
385
 
  owner /{,run/}shm/WK2SharedMemory.[0-9]* rwk,
386
 
 
387
384
  # Allow writes to various (application-specific) XDG directories
388
385
  owner @{HOME}/.cache/@{APP_PKGNAME}/                  rw,      # subdir of XDG_CACHE_HOME
389
386
  owner @{HOME}/.cache/@{APP_PKGNAME}/**                mrwkl,