You can roll your own. Or I can make one and try to link it, but it may or may not work exactly right (depending on which directory your music is in).
EDIT: Just made one for Rhythmbox. I tested it and it seems to work for almost everything. I am assuming that your music folder (where your MP3's are stored) is somewhere in your /home directory. If you want to edit the music files (that is write to them) from within rhythmbox you may have to give your music directory write access (by appending "w" to the profile). Other than that it seems fully functional.
Drop the profile into /etc/apparmor.d and name it "usr.bin.rhythmbox". Then set it to enforce mode and restart rhythmbox.
Code:
# Last Modified: Mon Apr 30 11:58:21 2012
#include <tunables/global>
/usr/bin/rhythmbox {
#include <abstractions/audio>
#include <abstractions/base>
#include <abstractions/dbus-session>
#include <abstractions/evince>
#include <abstractions/nameservice>
#include <abstractions/python>
/dev/sr0 rw,
/etc/apt/apt.conf.d/ r,
/etc/apt/apt.conf.d/* r,
/etc/lsb-release r,
/home/*/** r,
/home/*/.cache/dconf/user rw,
/home/*/.cache/rhythmbox/** rwk,
/home/*/.local/share/rhythmbox/** rwk,
/home/*/.local/share/webkit/icondatabase/* rwk,
/home/*/.pulse-cookie rwk,
/home/*/.config/ibus/bus/ rw,
/proc/*/auxv r,
/proc/*/cmdline r,
/proc/*/mounts r,
/sys/bus/ r,
/sys/bus/usb/devices/ r,
/sys/class/ r,
/sys/class/usb/ r,
/sys/devices/** r,
owner /tmp/** lk,
/tmp/** mrw,
/usr/bin/gst-install rix,
/usr/bin/rhythmbox mr,
/usr/lib{,32,64}/** mrw,
/usr/lib/rhythmbox/rhythmbox-metadata rix,
owner /{run,dev}/shm/pulse-shm* k,
/{run,dev}/shm/pulse-shm* rw,
}
If you notice something doesn't work (like a plugin) then you may have to look at your logs (/var/log/syslog) and see what it is denying and then make changes accordingly.
Bookmarks