sysui/desktop/apparmor/program.oosplash

   1 # ------------------------------------------------------------------
   2 #
   3 #    Copyright (C) 2016 Canonical Ltd.
   4 #    Copyright (C) 2018 Software in the Public Interest, Inc.
   5 #
   6 #    This Source Code Form is subject to the terms of the Mozilla Public
   7 #    License, v. 2.0. If a copy of the MPL was not distributed with this
   8 #    file, You can obtain one at http://mozilla.org/MPL/2.0/.
   9 #
  10 #    Author: Bryan Quigley <bryan.quigley@canonical.com>
  11 #            Rene Engelhard <rene@debian.org>
  12 #
  13 # ------------------------------------------------------------------
  14
  15 #include <tunables/global>
  16
  17 profile libreoffice-oopslash INSTDIR-program/oosplash {
  18   #include <abstractions/base>
  19   #include <abstractions/X>
  20
  21   /etc/libreoffice/                     r,
  22   /etc/libreoffice/**                   r,
  23   /etc/passwd                           r,
  24   /etc/nsswitch.conf                    r,
  25   /run/nscd/passwd                      r,
  26   /sys/devices/{virtual,pci[0-9]*}/**/queue/rotational  r, # for isRotational() in desktop/unx/source/pagein.c
  27   /usr/lib{,32,64}/ure/bin/javaldx      rmpux,
  28   /usr/share/libreoffice/program/*      r,
  29   INSTDIR-program/**                    r,
  30   INSTDIR-program/soffice.bin rmpx,
  31   INSTDIR-program/javaldx rmpux,
  32   owner @{HOME}/.Xauthority             r,
  33   owner @{HOME}/.config/libreoffice{,dev}/?/user/uno_packages/cache/log.txt rw,
  34   unix peer=(addr=@/tmp/.ICE-unix/* label=unconfined),
  35   unix peer=(addr=@/tmp/.X11-unix/* label=unconfined),
  36 }