usr.lib.chromium.chromium

   1 # Last Modified: Thu Jan 26 18:14:59 2012
   2 # Author: Thomas Mudrunka
   3
   4 #include <tunables/global>
   5
   6 /usr/lib/chromium/chromium {
   7   #include <abstractions/audio>
   8   #include <abstractions/base>
   9   #include <abstractions/bash>
  10   #include <abstractions/fonts>
  11   #include <abstractions/freedesktop.org>
  12   #include <abstractions/gnome>
  13   #include <abstractions/nameservice>
  14   #include <abstractions/ubuntu-browsers>
  15   #include <abstractions/ubuntu-browsers.d/plugins-common>
  16   #include <abstractions/ubuntu-konsole>
  17
  18   capability dac_override,
  19   capability dac_read_search,
  20   capability setgid,
  21   capability setuid,
  22   capability sys_admin,
  23   capability sys_chroot,
  24   capability sys_ptrace,
  25
  26
  27
  28   /bin/ps mrix,
  29   /dev/shm/* rw,
  30   /etc/** r,
  31   /home/*/* rwk,
  32   /home/*/.adobe/** rw,
  33   /home/*/.cache/chromium/** rw,
  34   /home/*/.cups/* r,
  35   /home/*/.icons/** r,
  36   /home/*/.local/share/** r,
  37   /home/*/.macromedia/** rw,
  38   /home/*/.mozilla/** rwk,
  39   /home/*/.pki/** rwk,
  40   /home/*/.themes/** r,
  41   /home/*/Desktop/ r,
  42   /home/*/Desktop/* rw,
  43   /home/*/Downloads/ r,
  44   /home/*/Downloads/** rw,
  45   /home/*/Work/GIT/plugins/chrome-extensions/** r,
  46   /home/*/private/dotfiles/.config/chromium/** mrwk,
  47   /opt/java/** mr,
  48   /opt/kde/share/** r,
  49   /proc/ r,
  50   /proc/** rw,
  51   /sys/** r,
  52   owner /tmp/** lk,
  53   /tmp/** rw,
  54   /usr/bin/dbus-send rix,
  55   /usr/bin/gpg mrix,
  56   /usr/bin/xdg-open rix,
  57   /usr/bin/xdg-settings rix,
  58   /usr/lib/chromium/chromium rix,
  59   /usr/lib/chromium/chromium-sandbox rix,
  60   /usr/lib/chromium/nacl_helper_bootstrap rix,
  61   /usr/lib/lib*so* mr,
  62   /usr/lib/totem/totem-plugin-viewer rix,
  63   /var/db/nscd/* r,
  64   /var/tmp/* rw,
  65
  66 }