apparmor profile skype4

# Last Modified: Sun Jun 24 14:57:04 2012
# Last Modified: Mon Oct 26 13:29:13 2009
# REPOSITORY: http://apparmor.test.opensuse.org/backend/api draglor 53
# Additional profiling based on work by Андрей Калинин, LP: #226624
#include <tunables/global>
/usr/bin/skype {
  #include <abstractions/audio>
  #include <abstractions/base>
  #include <abstractions/fonts>
  #include <abstractions/freedesktop.org>
  #include <abstractions/kde>
  #include <abstractions/gnome>
  #include <abstractions/dbus-session>
  #include <abstractions/nameservice>
  #include <abstractions/nvidia>
  #include <abstractions/user-tmp>
  #include <abstractions/X>

  # are these needed?
  /proc/*/cmdline r,
  /dev/video* mrw,
  /dev/ r,
  /var/cache/libx11/compose/* r,
  /dev/shm/pulse* rwm,

  # should this be in a separate KDE abstraction?
  @{HOME}/.kde/share/config/kioslaverc r,

  # Shared data:
  /usr/share/fonts/** mr,
  /usr/share/skype/** mr,
  /usr/share/ca-certificates/** mr,

  # Libraries:
  /usr/lib/pango/*.so mr,

  # System information
  /sys/devices/system/cpu/ r,
  /sys/devices/system/cpu/** r,

  /usr/bin/skype mr,
  /usr/share/skype/** kr,
  /usr/share/skype/sounds/*.wav kr,
  /etc/ssl/certs/ r,
  /etc/ssl/certs/** r,
  /etc/xdg/Trolltech.conf kr,

  @{HOME}/.Skype/   rw,
  @{HOME}/.Skype/** krw,
  @{HOME}/.config/* kr,

  # Shouldn't look there sweetie!!!
  deny @{HOME}/.mozilla/ r,
  deny @{HOME}/.mozilla/*/ r,
  deny @{HOME}/.mozilla/*/*/ r,
  deny @{HOME}/.mozilla/*/*/bookmarkbackups/ r,
  deny @{HOME}/.mozilla/*/*/chrome/ r,
  deny @{HOME}/.mozilla/*/*/extensions/ r,
  deny @{HOME}/.mozilla/*/*/prefs.js r,
  deny /etc/passwd r,
}