aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/apparmor/apparmor.d/abstractions/gio-open
diff options
context:
space:
mode:
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/gio-open')
-rw-r--r--straper/db/public/apparmor/apparmor.d/abstractions/gio-open59
1 files changed, 0 insertions, 59 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/gio-open b/straper/db/public/apparmor/apparmor.d/abstractions/gio-open
deleted file mode 100644
index f211717..0000000
--- a/straper/db/public/apparmor/apparmor.d/abstractions/gio-open
+++ /dev/null
@@ -1,59 +0,0 @@
-# vim:syntax=apparmor
-
- abi <abi/4.0>,
-
-# This abstraction is designed to be used in a child profile to limit what
-# confined application can invoke via gio helper.
-#
-# NOTE: most likely you want to use xdg-open abstraction instead for better
-# portability across desktop environments, unless you are sure that confined
-# application only uses /usr/bin/gio directly.
-#
-# Usage example:
-#
-# ```
-# profile foo /usr/bin/foo {
-# ...
-# /usr/bin/gio rPx -> foo//gio-open,
-# ...
-# } # end of main profile
-#
-# # out-of-line child profile
-# profile foo//gio-open {
-# include <abstractions/gio-open>
-#
-# # needed for ubuntu-* abstractions
-# include <abstractions/ubuntu-helpers>
-#
-# # Only allow to handle http[s]: and mailto: links
-# include <abstractions/ubuntu-browsers>
-# include <abstractions/ubuntu-email>
-#
-# # < add additional allowed applications here >
-# }
-
- include <abstractions/base>
- include <abstractions/dbus-session-strict>
-
- # Main executables
-
- /usr/bin/gio rix,
- /usr/bin/gio-launch-desktop ix, # for OpenSUSE
- /usr/lib/@{multiarch}/glib-[0-9]*/gio-launch-desktop ix,
-
- # System files
-
- /etc/gnome/defaults.list r,
- /usr/share/mime/* r,
- /usr/share/{,*/}applications/{,**} r,
- /var/cache/gio-[0-9]*.[0-9]*/gnome-mimeapps.list r,
- /var/lib/snapd/desktop/applications/{,**} r,
-
- # User files
-
- owner @{HOME}/.config/mimeapps.list r,
- owner @{HOME}/.local/share/applications/{,*.desktop} r,
- owner @{PROC}/@{pid}/fd/ r,
-
- # Include additions to the abstraction
- include if exists <abstractions/gio-open.d>