~ubuntu-branches/ubuntu/wily/apparmor/wily

« back to all changes in this revision

Viewing changes to profiles/apparmor.d/abstractions/ubuntu-browsers.d/user-files

• browse files at revision 6
• compare with another revision
• download diff
• download tarball
• view history from revision 6

Show diffs side-by-side

added

removed

profiles/apparmor.d/abstractions/ubuntu-browsers.d/user-files

 

1

# vim:syntax=apparmor

 

2

 

 

3

  # Allow read to all files user has DAC access to and write access to all

 

4

  # files owned by the user in $HOME.

 

5

  @{HOME}/ r,

 

6

  @{HOME}/** r,

 

7

  owner @{HOME}/** w,

 

8

  owner @{HOME}/Desktop/** r,

 

9

 

 

10

  # Do not allow read and/or write to particularly sensitive/problematic files

 

11

  #include <abstractions/private-files>

 

12

  audit deny @{HOME}/.ssh/** mrwkl,

 

13

  audit deny @{HOME}/.gnome2_private/** mrwkl,

 

14

 

 

15

  # Comment this out if using gpg plugin/addons

 

16

  audit deny @{HOME}/.gnupg/** mrwkl,

 

17

 

 

18

  # Allow read to all files user has DAC access to and write for files the user

 

19

  # owns on removable media and filesystems.

 

20

  /media/** r,

 

21

  /mnt/** r,

 

22

  /srv/** r,

 

23

  /net/** r,

 

24

  owner /media/** w,

 

25

  owner /mnt/** w,

 

26

  owner /srv/** w,

 

27

  owner /net/** w,

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1