From 425fd1ea6bcd6c82c2e0ea73dcbbd84fa487dd35 Mon Sep 17 00:00:00 2001
From: Claude <longneck@scratchbook.ch>
Date: Wed, 27 Aug 2014 12:45:07 +0200
Subject: [PATCH] +ssl-abstractions, -proc +tmp

---
 contrib/apparmor/usr.bin.qutebrowser | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/contrib/apparmor/usr.bin.qutebrowser b/contrib/apparmor/usr.bin.qutebrowser
index 1315f7b4c..ab5abcdcc 100644
--- a/contrib/apparmor/usr.bin.qutebrowser
+++ b/contrib/apparmor/usr.bin.qutebrowser
@@ -7,6 +7,8 @@
 
     #include <abstractions/base>
     #include <abstractions/nameservice>
+    #include <abstractions/openssl>
+    #include <abstractions/ssl_certs>
     #include <abstractions/audio>
     #include <abstractions/fonts>
     #include <abstractions/kde>
@@ -15,21 +17,17 @@
 
     capability dac_override,
 
-    /etc/ssl/openssl.cnf r,
-    /etc/ssl/certs/ r,
-
     /usr/bin/ r,
     /usr/bin/qutebrowser rix,
     /usr/bin/python3.? r,
 
-    /proc/** r,
-
     /usr/lib/python3/ mr,
     /usr/lib/python3/** mr,
     /usr/lib/python3.?/ r,
     /usr/lib/python3.?/** mr,
     /usr/local/lib/python3.?/** r,
-    /usr/share/ca-certificates/** r,
+
+    /tmp/* krw,
 
     @{HOME}/.config/qutebrowser/** krw,
     @{HOME}/.local/share/qutebrowser/** krw,