Jigen:
Here are the abstraction files as they appear on my machine.
First up is "private-files":
Code:
# vim:syntax=apparmor
# privacy-violations contains rules for common files that you want to explicity
# deny access
# privacy violations (don't audit files under $HOME otherwise get a
# lot of false positives when reading contents of directories)
deny @{HOME}/.*history mrwkl,
deny @{HOME}/.fetchmail* mrwkl,
deny @{HOME}/.viminfo* mrwkl,
deny @{HOME}/.*~ mrwkl,
deny @{HOME}/.*.swp mrwkl,
deny @{HOME}/.*~1~ mrwkl,
deny @{HOME}/.*.bak mrwkl,
# special attention to (potentially) executable files
audit deny @{HOME}/bin/** wl,
deny @{HOME}/.bash* mrk,
audit deny @{HOME}/.bash* wl,
deny @{HOME}/.profile* mrk,
audit deny @{HOME}/.profile* wl,
deny @{HOME}/.*rc mrk,
audit deny @{HOME}/.*rc wl,
ubuntu-email:
Code:
#
# abstraction for allowing graphical email clients in Ubuntu
#
/usr/bin/anjal Ux,
/usr/bin/balsa Ux,
/usr/bin/claws-mail Ux,
/usr/bin/evolution Ux,
/usr/lib/GNUstep/Applications/GNUMail.app/GNUMail Ux,
/usr/bin/kmail Ux,
/usr/bin/mailody Ux,
/usr/bin/modest Ux,
/usr/bin/seamonkey Ux,
/usr/bin/sylpheed Ux,
/usr/bin/tkrat Ux,
/usr/lib/thunderbird/thunderbird Ux,
ubuntu-console-email
Code:
#
# abstraction for allowing console email clients in Ubuntu. These will
# typically also need a terminal, so when using this abstraction, should also
# do something like:
#
# #include <abstractions/ubuntu-gnome-terminal>
#
/usr/bin/alpine Ux,
/usr/bin/citadel Ux,
/usr/bin/cone Ux,
/usr/bin/elmo Ux,
/usr/bin/mutt Ux,
ubuntu-gnome-terminal
Code:
#
# for allowing access to gnome-terminal
#
#include <abstractions/gnome>
# do not use ux or Ux here. Use at a minimum ix
/usr/bin/gnome-terminal ix,
Add these to abstractions then put the FF profile back to how it was at default, and you should be set.
Bookmarks