41 lines
878 B
Plaintext
41 lines
878 B
Plaintext
# AppArmor profile for qutebrowser
|
|
# Tested on Debian jessie
|
|
|
|
#include <tunables/global>
|
|
|
|
/usr/bin/qutebrowser {
|
|
|
|
#include <abstractions/base>
|
|
#include <abstractions/nameservice>
|
|
#include <abstractions/audio>
|
|
#include <abstractions/fonts>
|
|
#include <abstractions/kde>
|
|
#include <abstractions/user-download>
|
|
#include <abstractions/X>
|
|
|
|
capability dac_override,
|
|
|
|
/etc/ssl/openssl.cnf r,
|
|
/etc/ssl/certs/ r,
|
|
|
|
/usr/bin/ r,
|
|
/usr/bin/qutebrowser rix,
|
|
/usr/bin/python3.? r,
|
|
|
|
/proc/** r,
|
|
|
|
/usr/lib/python3/ mr,
|
|
/usr/lib/python3/** mr,
|
|
/usr/lib/python3.?/ r,
|
|
/usr/lib/python3.?/** mr,
|
|
/usr/local/lib/python3.?/** r,
|
|
/usr/share/ca-certificates/** r,
|
|
|
|
@{HOME}/.config/qutebrowser/** krw,
|
|
@{HOME}/.local/share/qutebrowser/** krw,
|
|
@{HOME}/.cache/qutebrowser/** krw,
|
|
@{HOME}/.gstreamer-0.10/* r,
|
|
|
|
}
|
|
|