[all variants] Share your AppArmor Profiles

[bodhi.zazen]

In order to promote awareness and learning of AppArmor I thought it migh help if we shared our profiles. Hopefully they can be reviewed by experts and help others learn the syntax of an AppArmor Profile.

Here is my Firefox Profile

Firefox version 3.0.4
Ubuntu 9.04 Alpha

# Last Modified: Thu Dec 11 21:08:14 2008 #include <tunables/global> /usr/lib/firefox-3.0.4/firefox.sh { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/gnome> #include <abstractions/nameservice> #include <abstractions/user-tmp> network dgram, network stream, /bin/dash rix, /bin/grep rix, /bin/ps rix, /usr/bin/basename rix, /usr/lib/firefox-3.0.4/firefox mrix, /usr/lib/gamin/gam_server mrix, /dev/shm/ r, owner /dev/shm/pulse-* rw, /etc/ r, /etc/firefox-3.0/pref/ r, /etc/firefox-3.0/pref/* r, /etc/gre.d/ r, /etc/gre.d/1.9.0.4.system.conf r, /etc/mime.types r, /etc/pulse/client.conf r, /etc/sound/events/gtk-events-2.soundlist r, /etc/xulrunner-1.9/system-greprefs.js r, owner /home/** rw, owner /home/*/.adobe/ rw, owner /home/*/.adobe/** rw, owner /home/*/.config/gtk-2.0/** rwk, owner /home/*/.macromedia/ w, owner /home/*/.macromedia/** rw, owner /home/*/.mozilla/** rwk, owner /home/*/.pulse-cookie rwk, owner /home/*/.pulse/ w, owner /home/*/{Desktop,Documents,Downloads}/ rw, owner /home/*/{Desktop,Documents,Downloads}/** rw, owner /proc/*/maps r, /proc/*/mounts/* r, owner /proc/*/stat r, /proc/version r, /usr/local/share/** r, /usr/share/** r, /var/lib/dbus/machine-id r, }

Enjoy (and try not to abuse my poor quality profile too much).