# Last Modified: Wed Sep  5 21:05:15 2012
#include <tunables/global>

/usr/bin/VBox flags=(complain) {
  #include <abstractions/apache2-common>
  #include <abstractions/base>
  #include <abstractions/ubuntu-konsole>

  capability setgid,
  capability setuid,
  capability dac_override,
  capability sys_ptrace,

  /bin/ps mr,
  /etc/nsswitch.conf r,
  /etc/passwd r,
  /proc/ r,
  /proc/*/stat r,
  /proc/*/status r,
  /proc/sys/kernel/pid_max r,
  /proc/tty/drivers r,
  /proc/uptime r,
  /proc/version r,

  /usr/lib/virtualbox/VBoxTestOGL rix,
  /dev/dri/card0 rw,

  /bin/uname mr,

  /bin/lsmod mr,
  /proc/modules r,

  /bin/which rix,
  /dev/ati/* rw,

  /bin/cat rix,
  /bin/dash rix,
  /bin/grep rix,
  /bin/lsmod rix,
  /bin/ps rix,
  /bin/rm rix,
  /bin/uname rix,
  /dev/ r,
  /dev/nvidia0 rw,
  /dev/nvidiactl rw,
  /dev/tty rw,
  /dev/vboxdrv rw,
  /dev/vboxnetctl rw,
  /dev/vboxusb/ r,
  /etc/fonts/** r,
  /etc/xdg/Trolltech.conf rk,
  /home/*/.ICEauthority r,
  /home/*/.VirtualBox/ r,
  /home/*/.VirtualBox/** rw,
  /home/*/.Xauthority r,
  /home/*/.cache/dconf/user rw,
  /home/*/.config/Trolltech.conf rwk,
  /home/*/.config/dconf/user r,
  /home/*/.local/share/** r,
  /home/*/.nv/** rw,
  /home/*/.nvidia/** w,
  "/home/*/VirtualBox VMs/**" rw,
  /home/*/backtrack_4_r2/** r,
  /home/*/backtrack_5/** r,
  /home/*/virtualbox_image/** r,
  /proc/ r,
  /proc/*/cmdline r,
  /proc/*/status r,
  /proc/*/task/ r,
  /proc/interrupts r,
  /proc/modules r,
  /sys/block/ r,
  /sys/bus/usb/devices/ r,
  /sys/devices/** r,
  /sys/devices/virtual/** r,
  /tmp/** mrwk,
  /usr/bin/VBox r,
  /usr/bin/basename rix,
  /usr/bin/mawk rix,
  /usr/bin/whoami rix,
  /usr/lib/virtualbox/** rix,
  /usr/lib/virtualbox/VBoxSVC rix,
  /usr/lib/virtualbox/VBoxXPCOMIPCD rix,
  /usr/lib/virtualbox/VirtualBox rix,
  /usr/lib{,32,64}/** mr,
  /usr/local/share/fonts/ r,
  /usr/share/fonts/ r,
  /usr/share/fonts/** r,
  /usr/share/glib-2.0/schemas/gschemas.compiled r,
  /usr/share/icons/ r,
  /usr/share/icons/** r,
  /usr/share/mime/** r,
  /usr/share/pixmaps/ r,
  /usr/share/qt4/** r,
  /usr/share/themes/** r,
  /usr/share/virtualbox/** r,
  /var/cache/fontconfig/** r,

  /usr/bin/basename mr,

  /usr/bin/mawk mr,

  /etc/nsswitch.conf r,
  /etc/passwd r,
  /usr/bin/whoami mr,

}