From 39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2 Mon Sep 17 00:00:00 2001
From: Lukasz Kasprzak <lukasz.kasprzak@pm.me>
Date: Fri, 20 Mar 2026 19:16:32 +0100
Subject: feat: first fully successful run e2e on straper

---
 .../abstractions/ubuntu-browsers.d/multimedia      | 51 ++++++++++++++++++++++
 1 file changed, 51 insertions(+)
 create mode 100644 straper/db/public/apparmor/apparmor.d/abstractions/ubuntu-browsers.d/multimedia

(limited to 'straper/db/public/apparmor/apparmor.d/abstractions/ubuntu-browsers.d/multimedia')

diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/ubuntu-browsers.d/multimedia b/straper/db/public/apparmor/apparmor.d/abstractions/ubuntu-browsers.d/multimedia
new file mode 100644
index 0000000..37fae70
--- /dev/null
+++ b/straper/db/public/apparmor/apparmor.d/abstractions/ubuntu-browsers.d/multimedia
@@ -0,0 +1,51 @@
+# vim:syntax=apparmor
+# Users of this abstraction need to include the ubuntu-helpers abstraction
+# in the toplevel profile. Eg:
+#   include <abstractions/ubuntu-helpers>
+
+  abi <abi/4.0>,
+
+  include <abstractions/X>
+
+  # Pulseaudio
+  /usr/bin/pulseaudio Pixr,
+
+  # Image viewers
+  /usr/bin/eog Cxr -> sanitized_helper,
+  /usr/bin/gimp* Cxr -> sanitized_helper,
+  /usr/bin/shotwell Cxr -> sanitized_helper,
+  /usr/bin/digikam Cxr -> sanitized_helper,
+  /usr/bin/gwenview Cxr -> sanitized_helper,
+
+  include <abstractions/ubuntu-media-players>
+  owner @{HOME}/.adobe/ w,
+  owner @{HOME}/.adobe/** rw,
+  owner @{HOME}/.macromedia/ w,
+  owner @{HOME}/.macromedia/** rw,
+  /opt/real/RealPlayer/mozilla/nphelix.so rm,
+  /usr/bin/lpstat Cxr -> sanitized_helper,
+  /usr/bin/lpr Cxr -> sanitized_helper,
+
+  # Bittorrent clients
+  include <abstractions/ubuntu-bittorrent-clients>
+
+  # Archivers
+  /usr/bin/ark Cxr -> sanitized_helper,
+  /usr/bin/file-roller Cxr -> sanitized_helper,
+  /usr/bin/xarchiver Cxr -> sanitized_helper,
+  /usr/local/lib{,32,64}/*.so* mr,
+
+  # News feed readers
+  include <abstractions/ubuntu-feed-readers>
+
+  # If we allow the above, nvidia based systems will also need this
+  include <abstractions/nvidia>
+
+  # Virus scanners
+  /usr/bin/clamscan Cx -> sanitized_helper,
+
+  # gxine (LP: #1057642)
+  /var/lib/xine/gxine.desktop r,
+
+  # For WebRTC camera access (LP: #1665535)
+  /dev/video[0-9]* rw,
-- 
cgit v1.3