Skip to content

Instantly share code, notes, and snippets.

@yltsrc
Created May 5, 2010 13:43
Show Gist options
  • Save yltsrc/390782 to your computer and use it in GitHub Desktop.
Save yltsrc/390782 to your computer and use it in GitHub Desktop.
cat /etc/apparmor.d/usr.bin.skype
# Last Modified: Sat 19 Dec 2009 23:50:49 GMT 2009
#include <tunables/global>
/usr/bin/skype {
#include <abstractions/audio>
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/gnome>
#include <abstractions/kde>
#include <abstractions/nameservice>
#include <abstractions/python>
network dgram,
network stream,
deny /bin/bash r,
deny /etc/group m,
deny /etc/passwd m,
deny owner /home/anschneider/.mozilla/ r,
deny owner /home/gladiac/.mozilla/ r,
deny /proc/*/net/route r,
deny /sys/devices/system/cpu/ r,
deny /usr/bin/dbus-launch x,
deny /usr/bin/kfmclient x,
deny /usr/bin/xdg-open x,
deny /usr/lib64/firefox/firefox.sh x,
/dev/video* mrw,
/dev/ r,
/home/*/.ICEauthority r,
/home/*/.Skype rw,
/home/*/.Skype/ rw,
/home/*/.Skype/** rwk,
/home/*/.Xauthority r,
/home/*/.asoundrc r,
owner /home/*/.config/Polyester/Style.conf rk,
/home/*/.config/Trolltech.conf rwk,
owner /home/*/.fontconfig/ w,
owner /home/*/.fontconfig/* mrw,
/home/*/.fonts.conf r,
/home/*/.icons/** r,
owner /home/*/.kde*/share/config/kdeglobals rk,
owner /home/*/.kde/share/config/kioslaverc r,
/home/*/.qt/* rw,
/home/*/Downloads/* rw,
/proc/interrupts r,
/usr/bin/skype mr,
/usr/bin/python2.6 rmix,
/usr/bin/skype-notify rmix,
/usr/lib/qt4/plugins/iconengines/ r,
/usr/lib/qt4/plugins/imageformats/ r,
/usr/lib/qt4/plugins/inputmethods/ r,
/usr/lib64/jvm/java*/jre/lib/fonts/** mr,
/usr/share/X11/XKeysymDB r,
/usr/share/X11/locale/** r,
/usr/share/locale-langpack/** rm,
/usr/share/desktop-data/qtrc r,
/usr/share/fonts/** mr,
/usr/share/ghostscript/fonts/** mr,
/usr/share/icons/** mr,
/usr/share/skype/lang/* mr,
/usr/share/skype/sound/* r,
/usr/share/skype/sounds/* rk,
/var/lib/dbus/machine-id r,
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment