# vim:syntax=apparmor # # abstraction for allowing access to media players in Ubuntu # # Users of this abstraction need to #include the ubuntu-helpers abstraction # in the toplevel profile. Eg: # #include /usr/bin/amarok Cxr -> sanitized_helper, /usr/bin/audacious2 Cxr -> sanitized_helper, /usr/bin/audacity Cxr -> sanitized_helper, /usr/bin/bangarang Cxr -> sanitized_helper, /usr/bin/banshee Cxr -> sanitized_helper, /usr/bin/banshee-1 Cxr -> sanitized_helper, /usr/bin/decibel Cxr -> sanitized_helper, /usr/bin/dragon Cxr -> sanitized_helper, /usr/bin/esperanza Cxr -> sanitized_helper, /usr/bin/exaile Cxr -> sanitized_helper, /usr/bin/freevo Cxr -> sanitized_helper, /usr/bin/gmerlin Cxr -> sanitized_helper, /usr/bin/gxmms Cxr -> sanitized_helper, /usr/bin/gxmms2 Cxr -> sanitized_helper, /usr/bin/hornsey Cxr -> sanitized_helper, /usr/bin/jlgui Cxr -> sanitized_helper, /usr/bin/juk Cxr -> sanitized_helper, /usr/bin/kaffeine Cxr -> sanitized_helper, /usr/bin/listen Cxr -> sanitized_helper, /usr/share/minirok/minirok.py Cxr -> sanitized_helper, # mplayer /etc/mplayerplug-in.conf r, /usr/bin/gmplayer Cxr -> sanitized_helper, /usr/bin/gnome-mplayer Cxr -> sanitized_helper, /usr/bin/kmplayer Cxr -> sanitized_helper, /usr/bin/mplayer Cxr -> sanitized_helper, /usr/bin/smplayer Cxr -> sanitized_helper, /usr/bin/muine Cxr -> sanitized_helper, /usr/bin/potamus Cxr -> sanitized_helper, /usr/bin/promoe Cxr -> sanitized_helper, /usr/bin/qmmp Cxr -> sanitized_helper, /usr/bin/quodlibet Cxr -> sanitized_helper, /usr/bin/rhythmbox Cxr -> sanitized_helper, /usr/bin/strange-quark Cxr -> sanitized_helper, /usr/bin/swfdec-player Cxr -> sanitized_helper, /usr/bin/timidity Cxr -> sanitized_helper, /usr/lib/totem/** ixr, /usr/bin/totem-gstreamer Cxr -> sanitized_helper, /usr/bin/totem-xine Cxr -> sanitized_helper, /usr/bin/totem Cxr -> sanitized_helper, /usr/bin/vlc Cxr -> sanitized_helper, /usr/bin/xfmedia Cxr -> sanitized_helper, /usr/bin/xmms Cxr -> sanitized_helper, # gnash /usr/bin/gtk-gnash ixr, /etc/gnashrc r, /etc/gnashpluginrc r, owner @{HOME}/.gnash/ rw, owner @{HOME}/.gnash/** rw,