Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- # Last Modified: Tue Jun 24 05:59:42 2014
- #include <tunables/global>
- /usr/bin/skype {
- #include <abstractions/audio>
- #include <abstractions/consoles>
- #include <abstractions/dbus-session>
- #include <abstractions/gnome>
- #include <abstractions/kde>
- #include <abstractions/nameservice>
- #include <abstractions/video>
- #include <abstractions/ssl_certs>
- #include <abstractions/fonts>
- deny /sys/devices/virtual/dmi/** r,
- deny owner @{HOME}/docker** r,
- deny owner @{HOME}/.mozilla/ r,
- deny owner @{HOME}/.mozilla/** r,
- /dev/ r,
- /dev/video[0-9]* mrw,
- /dev/pts/* rw,
- /etc/asound.conf r,
- /etc/machine-id r,
- /etc/xdg/Trolltech.conf rk,
- /etc/xdg/sni-qt.conf r,
- /sys/devices/pci*/*/usb[0-9]*/*/{idVendor,idProduct,speed} r,
- /sys/devices/system/cpu/ r,
- /sys/devices/system/cpu/cpu[0-9]*/cpufreq/scaling_{cur_freq,max_freq} r,
- /opt/skype/skype pix,
- /opt/skype/** kmr,
- /usr/bin/kde4-config mrPUx,
- /usr/bin/skype mrix,
- /usr/bin/xdg-open mrPUx,
- /usr/lib{,32}/libv4l/v4l2convert.so r,
- /usr/lib{,32}/skype/skype mrix,
- /usr/share/icons/*/index.theme r,
- /usr/share/nvidia/nvidia-application-profiles-*-rc r,
- /usr/share/skype/** r,
- /{run,dev}/shm/pulse-shm* mrw,
- owner @{HOME}/.Xauthority r,
- owner @{HOME}/.cache/fontconfig/* r,
- owner @{HOME}/.kde/** r,
- owner @{HOME}/.Skype/ rwk,
- owner @{HOME}/.Skype/** rwk,
- owner @{HOME}/.config/Skype/ r,
- owner @{HOME}/.config/Skype/** rwk,
- owner @{HOME}/.config/Trolltech.conf r,
- owner @{HOME}/.config/fontconfig/fonts.conf r,
- owner @{HOME}/.config/gtk-3.0/bookmarks r,
- owner @{HOME}/.config/oxygen-gtk/argb-apps.conf r,
- owner @{HOME}/.config/pulse/cookie r,
- owner @{HOME}/.icons/** r,
- owner @{HOME}/.kde4/share/config/gtkrc-2.0 r,
- owner @{HOME}/.kde4/share/config/kdeglobals r,
- owner @{HOME}/.kde4/share/config/oxygenrc r,
- @{PROC}/*/net/route r,
- @{PROC}/[0-9]*/net/arp r,
- @{PROC}/sys/kernel/{ostype,osrelease} r,
- @{PROC}/sys/vm/overcommit_memory r,
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement