aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/apparmor/apparmor.d/abstractions/exo-open
diff options
context:
space:
mode:
authorLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
committerLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
commit83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch)
tree19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/apparmor/apparmor.d/abstractions/exo-open
parent51d43498b07dc97d795947964534f0903cd05db5 (diff)
downloadbin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz
bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/exo-open')
-rw-r--r--straper/db/public/apparmor/apparmor.d/abstractions/exo-open69
1 files changed, 0 insertions, 69 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/exo-open b/straper/db/public/apparmor/apparmor.d/abstractions/exo-open
deleted file mode 100644
index a6b50c4..0000000
--- a/straper/db/public/apparmor/apparmor.d/abstractions/exo-open
+++ /dev/null
@@ -1,69 +0,0 @@
-# vim:syntax=apparmor
-
- abi <abi/4.0>,
-
-# This abstraction is designed to be used in a child profile to limit what
-# confined application can invoke via exo-open helper.
-#
-# NOTE: most likely you want to use xdg-open abstraction instead for better
-# portability across desktop environments, unless you are sure that confined
-# application only uses /usr/bin/exo-open directly.
-#
-# Usage example:
-#
-# ```
-# profile foo /usr/bin/foo {
-# ...
-# /usr/bin/exo-open rPx -> foo//exo-open,
-# ...
-# } # end of main profile
-#
-# # out-of-line child profile
-# profile foo//exo-open {
-# include <abstractions/exo-open>
-#
-# # needed for ubuntu-* abstractions
-# include <abstractions/ubuntu-helpers>
-#
-# # Only allow to handle http[s]: and mailto: links
-# include <abstractions/ubuntu-browsers>
-# include <abstractions/ubuntu-email>
-#
-# # Add if accessibility access is considered as required
-# # (for message box in case exo-open fails)
-# include <abstractions/dbus-accessibility>
-#
-# # < add additional allowed applications here >
-# }
-
- include <abstractions/X>
- include <abstractions/audio> # for alert messages
- include <abstractions/base>
- include <abstractions/dbus-session-strict>
- include <abstractions/gnome>
-
- # Main executables
-
- /usr/bin/exo-open rix,
- /usr/lib{32,64,/@{multiarch}}/xfce4/exo-[0-9]/exo-helper-[0-9] ix,
-
- # Other executables
-
- /{,usr/}bin/which rix,
-
- # System files
-
- /etc/xdg/{,xdg-*/}xfce4/helpers.rc r,
- /etc/xfce4/defaults.list r, # TODO: move into xfce4 abstraction?
- /usr/share/sounds/freedesktop/** r, # for message box alert sound
- /usr/share/xfce4/helpers/*.desktop r,
- /usr/share/{xfce{,4},xubuntu}/applications/{,*.list} r,
-
- # User files
-
- owner @{PROC}/@{pid}/fd/ r,
- owner @{HOME}/.config/xfce4/helpers.rc r,
- owner @{HOME}/.local/share/xfce4/helpers/*.desktop r,
-
- # Include additions to the abstraction
- include if exists <abstractions/exo-open.d>