| Distribution | Name | Profile | Created At | Changelog | View Count | Username | |||
| opensuse10.3 | /usr/bin/fvwm | #include <tunables/global> /usr/bin/fvwm flags=(complain) { #include <abstractions/base> /usr/bin/fvwm mr, } | about 1 year ago | argh, switch things back to complain for a while | 64 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/xrdb | #include <tunables/global> /usr/bin/xrdb flags=(complain) { #include <abstractions/X> #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /etc/X11/Xresources r, /home/*/.Xauthority r, /home/*/.Xdefaults r, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /usr/bin/cpp-4.2 ixr, /usr/bin/xrdb mr, /usr/lib/gcc/i586-suse-linux/4.2.1/cc1 ixr, /usr/lib/gcc/i586-suse-linux/4.2.1/collect2 ixr, /var/lib/gdm/* r, } | about 1 year ago | argh, switch things back to complain for a while | 72 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/xdpyinfo | #include <tunables/global> /usr/bin/xdpyinfo flags=(complain) { #include <abstractions/X> #include <abstractions/base> /home/*/.Xauthority r, /usr/bin/xdpyinfo mr, } | about 1 year ago | few more changes to get gnome session working elsewhere | 88 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/evolution-data-server/evolution-data-server-1.12 | #include <tunables/global> /usr/lib/evolution-data-server/evolution-data-server-1.12 flags=(complain) { #include <abstractions/base> #include <abstractions/gnome> #include <abstractions/nameservice> /etc/gnome-vfs-2.0/modules/ r, /home/*/.evolution/**.db rw, /home/*/.evolution/**.ics rw, /home/*/.evolution/**.ics~ rw, /home/*/.evolution/addressbook/local/system/addressbook.db.summary r, /home/*/.gnome2_private/ w, /proc/stat r, /tmp/orbit-*/bonobo-activation-register.lock klrw, /usr/lib/evolution-data-server/evolution-data-server-1.12 mr, } | about 1 year ago | argh, switch things back to complain for a while | 57 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/xsetroot | #include <tunables/global> /usr/bin/xsetroot flags=(complain) { #include <abstractions/X> #include <abstractions/base> #include <abstractions/freedesktop.org> /usr/bin/xsetroot mr, /var/lib/gdm/* r, } | about 1 year ago | argh, switch things back to complain for a while | 52 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/nautilus-cd-burner/mapping-daemon | #include <tunables/global> /usr/lib/nautilus-cd-burner/mapping-daemon flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> /tmp/mapping-* w, /tmp/virtual-*/ w, /usr/lib/nautilus-cd-burner/mapping-daemon mr, } | about 1 year ago | argh, switch things back to complain for a while | 66 | jmichael | Edit | History | |
| opensuse10.3 | /sbin/checkproc | #include <tunables/global> /sbin/checkproc flags=(complain) { #include <abstractions/base> capability dac_override, capability sys_ptrace, /dev/blog w, /home/*/.gnupg/agent.pid r, /proc/ r, /proc/*/stat r, /proc/*/statm r, /sbin/checkproc mr, /usr/bin/gpg-agent r, /usr/sbin/NetworkManager r, /usr/sbin/NetworkManagerDispatcher r, /usr/sbin/automount r, /usr/sbin/dhcdbd r, /usr/sbin/ntpd r, /var/run/NetworkManager.pid r, /var/run/NetworkManagerDispatcher.pid r, /var/run/dhcdbd.pid r, } | about 1 year ago | few more profile changes | 57 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/gdm/gdmgreeter | #include <tunables/global> /usr/lib/gdm/gdmgreeter flags=(complain) { #include <abstractions/base> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/nameservice> /etc/gdm/locale.alias r, /proc/meminfo r, /usr/bin/fvwm Px, /usr/bin/gnome Px, /usr/bin/twm Px, /usr/lib/gdm/gdmgreeter mr, /usr/share/gdm/BuiltInSessions/ r, /usr/share/gdm/BuiltInSessions/*.desktop r, /usr/share/gdm/themes/GDM-SuSE/*.desktop r, /usr/share/gdm/themes/GDM-SuSE/*.png r, /usr/share/gdm/themes/GDM-SuSE/*.svg r, /usr/share/gdm/themes/GDM-SuSE/*.xml r, /usr/share/xsessions/ r, /usr/share/xsessions/*.desktop r, /var/cache/libx11/compose/* r, /var/lib/gdm/* r, /var/lib/gdm/.fontconfig/* r, /var/run/gdm_socket w, } | about 1 year ago | few extra changes | 50 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/file-roller | #include <tunables/global> /usr/bin/file-roller flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /bin/bash ixr, /bin/cpio ixr, /bin/gzip ixr, /bin/tar ixr, /etc/gnome-vfs-2.0/modules/ r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.esd_auth r, /home/*/.fontconfig/* r, /home/*/.gnome2/main rw, /home/*/.gnome2_private/ w, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /home/*/.recently-used.xbel rw, /home/*/.recently-used.xbel.* rw, /home/*/Desktop/** rw, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /usr/bin/ar ixr, /usr/bin/bzip2 ixr, /usr/bin/file-roller mr, /usr/bin/isoinfo ixr, /usr/bin/rpm2cpio ixr, /usr/bin/uncompress ixr, /usr/bin/unzip ixr, /usr/share/file-roller/icons/ r, /usr/share/file-roller/icons/** r, /usr/share/mime/**.xml r, /var/cache/libx11/compose/* r, } | about 1 year ago | argh, switch things back to complain for a while | 66 | jmichael | Edit | History | |
| opensuse10.3 | /usr/sbin/sabayon-apply | #include <tunables/global> /usr/sbin/sabayon-apply flags=(complain) { #include <abstractions/X> #include <abstractions/base> #include <abstractions/nameservice> #include <abstractions/python> /etc/xml/catalog r, /etc/xml/suse-catalog.xml r, /home/*/.Xauthority r, /proc/meminfo r, /usr/bin/env ixr, /usr/bin/python2.5 ixr, /usr/sbin/sabayon-apply mr, } | about 1 year ago | few more changes to get gnome session working elsewhere | 88 | jmichael | Edit | History | |
| opensuse10.3 | /etc/X11/xdm/sys.xsession | #include <tunables/global> /etc/X11/xdm/sys.xsession flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/user-tmp> capability sys_ptrace, /bin/bash ixr, /etc/X11/xdm/sys.xsession mr, /etc/X11/xinit/xinitrc r, /etc/X11/xinit/xinitrc.common r, /etc/X11/xinit/xinitrc.d/ r, /etc/X11/xinit/xinitrc.d/sabayon-xinitrc.sh Px, /home/*/.gnupg/agent.info rw, /home/*/.gnupg/agent.pid rw, /proc/ r, /proc/*/stat r, /proc/*/statm r, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /sbin/checkproc ixr, /usr/bin/dbus-launch Px, /usr/bin/gpg-agent Pxr, /usr/bin/ssh-agent ixr, /usr/lib/ssh/x11-ssh-askpass Px, } | about 1 year ago | let xsession run sabayon-xinitrc | 42 | jmichael | Edit | History | |
| opensuse10.3 | /sbin/dhclient-script | #include <tunables/global> /sbin/dhclient-script flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/nameservice> #include <abstractions/user-tmp> capability sys_ptrace, /bin/bash ixr, /bin/cat ixr, /bin/chmod ixr, /bin/dbus-send Px, /bin/egrep ixr, /bin/grep ixr, /bin/mv ixr, /bin/sed ixr, /bin/sleep Px, /bin/uname Px, /etc/resolv.conf rw, /etc/resolv.conf.saved.by.dhclient w, /etc/sysconfig/network/config r, /etc/sysconfig/network/dhcp r, /proc/ r, /proc/*/cmdline r, /proc/*/mounts r, /proc/*/stat r, /proc/meminfo r, /sbin/dhclient-script mr, /sbin/ifconfig Px, /sbin/killall5 ixr, /sbin/route Px, /tmp/ w, /usr/bin/env ixr, /usr/bin/expr ixr, } | about 1 year ago | argh, switch things back to complain for a while | 61 | jmichael | Edit | History | |
| opensuse10.3 | /bin/dbus-send | #include <tunables/global> /bin/dbus-send flags=(complain) { #include <abstractions/base> /bin/dbus-send mr, /var/run/dbus/system_bus_socket w, } | about 1 year ago | argh, switch things back to complain for a while | 53 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/control-center-2.0/gnome-settings-daemon | #include <tunables/global> /usr/lib/control-center-2.0/gnome-settings-daemon flags=(complain) { #include <abstractions/audio> #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /bin/bash ixr, /etc/gnome-vfs-2.0/modules/ r, /etc/opt/kde3/share/applications/ r, /etc/opt/kde3/share/applications/mimeinfo.cache r, /etc/sound/events/ r, /etc/sound/events/gnome-2.soundlist r, /etc/sound/events/gtk-events-2.soundlist r, /etc/sysconfig/ r, /home/*/ r, /home/*/.Xauthority r, /home/*/.Xdefaults r, /home/*/.esd_auth r, /home/*/.gnome2/share/ rw, /home/*/.gnome2/share/cursor-fonts/ rw, /home/*/.gnome2/share/cursor-fonts/* rw, /home/*/.gnome2/share/fonts/ rw, /home/*/.gnome2/share/fonts/fonts.dir rw, /home/*/.gnome2_private/ w, /home/*/.gstreamer-0.10/ w, /home/*/.gstreamer-0.10/registry.i686.xml rw, /home/*/.gstreamer-0.10/registry.i686.xml.tmp* rw, /home/*/.gtkrc-1.2-gnome2 rw, /home/*/.gtkrc-1.2-gnome2.new rw, /home/*/.icons/ r, /home/*/.local/share/applications/ r, /home/*/.local/share/applications/defaults.list r, /home/*/.local/share/applications/mimeinfo.cache r, /home/*/.local/share/icons/ r, /home/*/.local/share/mime/aliases r, /home/*/.local/share/mime/globs r, /home/*/.local/share/mime/magic r, /home/*/.local/share/mime/subclasses r, /home/jesse/.gnome2/share/fonts/** rw, /opt/kde3/share/applications/ r, /opt/kde3/share/applications/mimeinfo.cache r, /proc/meminfo r, /usr/bin/gnome-screensaver Px, /usr/bin/mkfontdir ixr, /usr/bin/mkfontscale ixr, /usr/bin/xrdb Px, /usr/bin/xscreensaver Px, /usr/lib/control-center-2.0/gnome-settings-daemon mr, /usr/lib/control-center-2.0/novell-sysconfig-proxy-helper Px, /usr/lib/nautilus-cd-burner/mapping-daemon Pxmr, /usr/share/applications/ r, /usr/share/applications/mimeinfo.cache r, /usr/share/gdm/applications/ r, /usr/share/gnome-control-center/** r, /var/cache/gnome-vfs/defaults.list r, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 52 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome-session | #include <tunables/global> /usr/bin/gnome-session flags=(complain) { #include <abstractions/audio> #include <abstractions/base> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /etc/gai.conf r, /etc/gnome-vfs-2.0/modules/ r, /etc/sound/events/gnome-2.soundlist r, /etc/sound/events/gtk-events-2.soundlist r, /etc/xdg/autostart/ r, /etc/xdg/autostart/*.desktop r, /home/*/ w, /home/*/.ICEauthority rw, /home/*/.ICEauthority-c w, /home/*/.ICEauthority-l lw, /home/*/.Xauthority r, /home/*/.config/autostart/ r, /home/*/.esd_auth rw, /home/*/.fontconfig/* lrw, /home/*/.fonts/ r, /home/*/.gnome2/ w, /home/*/.gnome2/accels/ w, /home/*/.gnome2/session r, /home/*/.gnome2_private/ w, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /proc/meminfo r, /usr/bin/beagled Px, /usr/bin/bug-buddy ixr, /usr/bin/compiz Px, /usr/bin/esd Px, /usr/bin/ggreeter Px, /usr/bin/gnome-at-visual Px, /usr/bin/gnome-cups-icon Px, /usr/bin/gnome-keyring-daemon Px, /usr/bin/gnome-panel Px, /usr/bin/gnome-power-manager Px, /usr/bin/gnome-session mr, /usr/bin/gnome-terminal Px, /usr/bin/gnome-volume-manager Px, /usr/bin/gnome-wm Px, /usr/bin/nautilus Px, /usr/bin/nm-applet Px, /usr/bin/opensuse-updater-gnome-applet Px, /usr/lib/GConf/2/gconf-sanity-check-2 Px, /usr/share/dist/splash/dist-splash.png r, /usr/share/gnome/autostart/ r, /usr/share/gnome/autostart/*.desktop r, /usr/share/gnome/default.session r, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 53 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome-cups-icon | #include <tunables/global> /usr/bin/gnome-cups-icon flags=(complain) { #include <abstractions/base> #include <abstractions/gnome> #include <abstractions/nameservice> /etc/gnome-vfs-2.0/modules/ r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.cups/lpoptions r, /home/*/.gnome2_private/ w, /tmp/orbit-*/bonobo-activation-register.lock klrw, /usr/bin/bug-buddy ixr, /usr/bin/gnome-cups-icon mr, /var/run/cups/cups.sock w, /var/run/nscd/services r, } | about 1 year ago | some bug-buddy rules and other misc updates | 63 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnomesu | #include <tunables/global> /usr/bin/gnomesu flags=(complain) { #include <abstractions/base> /usr/bin/gnomesu mr, } | about 1 year ago | argh, switch things back to complain for a while | 62 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome-terminal | #include <tunables/global> /usr/bin/gnome-terminal flags=(complain) { #include <abstractions/base> #include <abstractions/consoles> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> capability sys_ptrace, /bin/bash Ux, /dev/ptmx rw, /etc/gnome-vfs-2.0/modules/ r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.esd_auth r, /home/*/.fontconfig/* r, /home/*/.gnome2_private/ w, /proc/meminfo r, /tmp/orbit-*/bonobo-activation-register.lock klrw, /usr/bin/bug-buddy ixr, /usr/bin/gnome-terminal mr, /usr/lib/vte/gnome-pty-helper Px, /usr/share/terminfo/** r, /usr/share/vte/termcap/* r, /var/cache/libx11/compose/* r, } | about 1 year ago | misc update | 49 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/zypper | #include <tunables/global> /usr/bin/zypper flags=(complain) { #include <abstractions/authentication> #include <abstractions/base> #include <abstractions/consoles> #include <abstractions/nameservice> #include <abstractions/user-tmp> capability fsetid, capability ipc_lock, /bin/cp ixr, /bin/rpm Ux, /etc/rpm/ r, /etc/rpm/macros.* r, /etc/sysconfig/proxy r, /etc/sysconfig/storage r, /etc/zypp/repos.d/ r, /etc/zypp/repos.d/*.repo r, /etc/zypp/zypp.conf r, /proc/*/mounts r, /proc/cpuinfo r, /proc/meminfo r, /proc/stat r, /sys/bus/ r, /usr/bin/gpg2 ixr, /usr/bin/zypper mr, /usr/share/zypp/schema/** r, /var/adm/mount/** rw, /var/cache/zypp/ r, /var/cache/zypp/raw/** rw, /var/cache/zypp/zypp.db krw, /var/cache/zypp/zypp.db-journal w, /var/lib/rpm/ w, /var/lib/rpm/Basenames r, /var/lib/rpm/Name r, /var/lib/rpm/Packages kr, /var/lib/zypp/db/languages/ r, /var/lib/zypp/db/patches/ r, /var/lib/zypp/db/patterns/ r, /var/lib/zypp/db/patterns/* r, /var/lib/zypp/db/products/ r, /var/lib/zypp/db/products/* r, /var/lib/zypp/db/selections/ r, /var/log/zypper.log w, /var/run/zypp.pid krw, /var/tmp/ rw, } | about 1 year ago | more updates | 54 | jmichael | Edit | History | |
| opensuse10.3 | /bin/hostname | #include <tunables/global> /bin/hostname flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> capability sys_admin, /bin/hostname mr, } | about 1 year ago | argh, switch things back to complain for a while | 54 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome-appearance-properties | #include <tunables/global> /usr/bin/gnome-appearance-properties flags=(complain) { #include <abstractions/base> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /etc/gnome-vfs-2.0/modules/ r, /etc/mtab r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.beagle/socket w, /home/*/.esd_auth r, /home/*/.fontconfig/* lrw, /home/*/.gnome2/backgrounds.xml rw, /home/*/.gnome2_private/ w, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /home/*/.recently-used.xbel rw, /home/*/.recently-used.xbel.* rw, /home/*/.themes/ r, /home/*/.thumbnails/** rw, /usr/bin/gnome-appearance-properties mr, /usr/share/ghostscript/fonts/ r, /usr/share/gnome-background-properties/ r, /usr/share/gnome-background-properties/*.xml r, /usr/share/gnome-control-center/glade/appearance.glade r, /usr/share/gnome-control-center/pixmaps/*.png r, /usr/share/gnome/wm-properties/ r, /usr/share/gnome/wm-properties/*.desktop r, /usr/share/mime/**.xml r, /usr/share/themes/ r, } | about 1 year ago | gnome appearance properties profile and eog updates | 71 | jmichael | Edit | History | |
| opensuse10.3 | /etc/sysconfig/network/scripts/SuSEfirewall2 | #include <tunables/global> /etc/sysconfig/network/scripts/SuSEfirewall2 flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /etc/sysconfig/network/config r, /etc/sysconfig/network/ifcfg-* r, /etc/sysconfig/network/scripts/SuSEfirewall2 mr, /proc/meminfo r, } | about 1 year ago | argh, switch things back to complain for a while | 59 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome-open | #include <tunables/global> /usr/bin/gnome-open flags=(complain) { #include <abstractions/base> /usr/bin/gnome-open mr, } | about 1 year ago | argh, switch things back to complain for a while | 61 | jmichael | Edit | History | |
| opensuse10.3 | /usr/sbin/gdm | #include <tunables/global> /usr/sbin/gdm flags=(complain) { #include <abstractions/authentication> #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/dbus> #include <abstractions/gnome> #include <abstractions/nameservice> capability audit_control, capability chown, capability dac_override, capability fsetid, capability kill, capability setgid, capability setuid, capability sys_tty_config, /bin/bash ixr, /dev/tty* rw, /etc/environment r, /etc/gdm/Init/Default Pxr, /etc/gdm/PostLogin/Default Pxr, /etc/gdm/PostSession/Default Pxr, /etc/gdm/PreSession/Default Pxr, /etc/gdm/Xsession Px, /etc/gdm/custom.conf r, /home/*/.Xauthority w, /home/*/.Xauthority-c w, /home/*/.Xauthority-l lw, /home/*/.dmrc rw, /home/*/.dmrc.* rw, /home/*/.xsession-errors w, /proc/*/fd/ r, /proc/*/loginuid w, /proc/meminfo r, /sbin/runlevel Px, /usr/bin/Xgl Px, /usr/lib/gdm/gdmgreeter Px, /usr/sbin/gdm mr, /usr/share/gdm/defaults.conf r, /usr/share/xsessions/*.desktop r, /var/lib/gdm/ w, /var/lib/gdm/* w, /var/lib/gdm/.gdmfifo rw, /var/log/gdm/* lw, /var/log/wtmp kw, /var/run/.resmgr_socket w, /var/run/gdm.pid w, /var/run/gdm_socket w, /var/run/utmp krw, } | about 1 year ago | few extra changes | 48 | jmichael | Edit | History | |
| opensuse10.3 | /usr/sbin/NetworkManagerDispatcher | #include <tunables/global> /usr/sbin/NetworkManagerDispatcher flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/dbus> /bin/bash ixr, /etc/NetworkManager/dispatcher.d/ r, /etc/NetworkManager/dispatcher.d/autofs Px, /etc/NetworkManager/dispatcher.d/netcontrol_global_hooks Px, /etc/NetworkManager/dispatcher.d/netcontrol_services Px, /etc/NetworkManager/dispatcher.d/nfs Px, /etc/NetworkManager/dispatcher.d/privoxy Px, /proc/meminfo r, /usr/sbin/NetworkManagerDispatcher mr, /var/run/NetworkManagerDispatcher.pid w, } | about 1 year ago | argh, switch things back to complain for a while | 71 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/firefox/firefox-bin | #include <tunables/global> /usr/lib/firefox/firefox-bin flags=(complain) { #include <abstractions/audio> #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/dbus> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /bin/bash ixr, /bin/grep ixr, /bin/netstat Px, /bin/ps Px, /etc/gai.conf r, /etc/gnome-vfs-2.0/modules/ r, /etc/mailcap r, /etc/mime.types r, /etc/mtab r, /etc/opt/kde3/share/applications/ r, /etc/opt/kde3/share/applications/mimeinfo.cache r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.adobe/Flash_Player/** r, /home/*/.beagle/socket w, /home/*/.bookmarks.html rw, /home/*/.config/gtk-2.0/gtkfilechooser.ini rw, /home/*/.config/gtk-2.0/gtkfilechooser.ini.* rw, /home/*/.esd_auth r, /home/*/.fontconfig/* r, /home/*/.gnome2_private/ w, /home/*/.icons/ r, /home/*/.local/share/applications/ r, /home/*/.local/share/applications/*.desktop r, /home/*/.local/share/applications/defaults.list r, /home/*/.local/share/applications/mimeinfo.cache r, /home/*/.local/share/icons/ r, /home/*/.macromedia/Flash_Player/** r, /home/*/.mailcap r, /home/*/.mozilla/firefox/** rw, /home/*/.mozilla/firefox/*/.parentlock krw, /home/*/.mozilla/firefox/*/urlclassifier2.sqlite krw, /home/*/.mozilla/plugins/ r, /home/*/.mozilla/plugins/libflashplayer.so mr, /home/*/.recently-used.xbel r, /home/*/Desktop/ r, /home/*/Desktop/** rw, /home/*/Documents/** rw, /opt/kde3/bin/gwenview Px, /opt/kde3/share/applications/ r, /opt/kde3/share/applications/mimeinfo.cache r, /proc/*/maps r, /proc/cpuinfo r, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /usr/bin/acroread Px, /usr/bin/eog Px, /usr/bin/evince Px, /usr/bin/file-roller Px, /usr/bin/gimp-remote-2.2 Px, /usr/bin/gvim-normal ixr, /usr/bin/mplayer Px, /usr/lib/Acrobat7/Browser/intellinux/*.so mr, /usr/lib/firefox/firefox-bin ixr, /usr/lib/firefox/firefox.sh Px, /usr/share/applications/ r, /usr/share/applications/*.desktop r, /usr/share/applications/mimeinfo.cache r, /usr/share/dist/icons/suse-help.svg r, /usr/share/gdm/applications/ r, /usr/share/mime/**.xml r, /var/cache/gnome-vfs/defaults.list r, /var/cache/libx11/compose/* r, } | about 1 year ago | allow -d gdb option for firefox plus other misc updates | 43 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/firefox/firefox.sh | #include <tunables/global> /usr/lib/firefox/firefox.sh flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/user-tmp> /bin/basename Px, /bin/bash ixr, /bin/grep ixr, /bin/mktemp ixr, /etc/magic r, /home/*/.gdbinit r, /home/*/.inputrc r, /proc/*/auxv r, /proc/*/mem r, /proc/*/status r, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /usr/bin/file ixr, /usr/bin/gdb ixr, /usr/lib/firefox/firefox-bin Pxr, /usr/lib/firefox/firefox.sh mr, /usr/share/misc/magic.mgc r, } | about 1 year ago | allow -d gdb option for firefox plus other misc updates | 57 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome-power-manager | #include <tunables/global> /usr/bin/gnome-power-manager flags=(complain) { #include <abstractions/base> #include <abstractions/dbus> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /etc/gnome-vfs-2.0/modules/ r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.esd_auth r, /home/*/.fontconfig/* r, /home/*/.gnome2/gnome-power-manager/ w, /home/*/.gnome2/gnome-power-manager/* rw, /home/*/.gnome2_private/ w, /home/*/.gstreamer-0.10/registry.i686.xml rw, /home/*/.gstreamer-0.10/registry.i686.xml.tmp* rw, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /proc/stat r, /usr/bin/bug-buddy ixr, /usr/bin/gnome-power-manager mr, /usr/lib/nautilus-cd-burner/mapping-daemon Px, /usr/share/gnome-power-manager/*.glade r, /usr/share/gnome-power-manager/icons/ r, /usr/share/gnome-power-manager/icons/** r, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 41 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/gnome-main-menu/main-menu | #include <tunables/global> /usr/lib/gnome-main-menu/main-menu flags=(complain) { #include <abstractions/base> #include <abstractions/dbus> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /etc/gnome-vfs-2.0/modules/ r, /etc/mtab r, /etc/opt/kde3/share/applications/ r, /etc/opt/kde3/share/applications/mimeinfo.cache r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/ r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.config/ w, /home/*/.config/gnome-main-menu/ w, /home/*/.config/gnome-main-menu/showable_files_migrated w, /home/*/.esd_auth r, /home/*/.fontconfig/* r, /home/*/.gnome2_private/ w, /home/*/.icons/ r, /home/*/.local/share/applications/ r, /home/*/.local/share/applications/*.desktop r, /home/*/.local/share/applications/defaults.list r, /home/*/.local/share/applications/mimeinfo.cache r, /home/*/.local/share/icons/ r, /home/*/.local/share/mime/aliases r, /home/*/.local/share/mime/globs r, /home/*/.local/share/mime/magic r, /home/*/.local/share/mime/subclasses r, /home/*/.recently-used.xbel r, /home/*/.recently-used.xbel.* rw, /home/*/.thumbnails/ w, /home/*/.thumbnails/** rw, /home/*/Desktop/** r, /home/*/Documents/* rw, /opt/kde3/share/applications/ r, /opt/kde3/share/applications/mimeinfo.cache r, /proc/*/mounts r, /proc/meminfo r, /proc/net/dev r, /proc/partitions r, /proc/stat r, /sys/block/**/stat r, /sys/devices/**/net/*/statistics/* r, /tmp/orbit-*/bonobo-activation-register.lock klrw, /usr/bin/beagle-search Px, /usr/bin/bug-buddy ixr, /usr/bin/evince-thumbnailer Px, /usr/bin/gnome-screensaver-command Px, /usr/bin/gsf-office-thumbnailer Px, /usr/bin/package-manager Px, /usr/bin/totem-video-thumbnailer Px, /usr/lib/gnome-main-menu/main-menu mr, /usr/share/applications/ r, /usr/share/applications/**.desktop r, /usr/share/applications/mimeinfo.cache r, /usr/share/f-spot/icons/**.png r, /usr/share/gdm/applications/ r, /usr/share/gnome-2.0/ui/*.xml r, /usr/share/gnome-main-menu/ r, /usr/share/gnome-main-menu/*.glade r, /usr/share/gnome-main-menu/*.xbel r, /usr/share/gnome-main-menu/empty.ods r, /usr/share/mime/**.xml r, /var/cache/gnome-vfs/defaults.list r, /var/cache/libx11/compose/* r, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 56 | jmichael | Edit | History | |
| opensuse10.3 | /etc/gdm/PostSession/Default | #include <tunables/global> /etc/gdm/PostSession/Default flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> capability setgid, capability setuid, /bin/bash ixr, /etc/gdm/PostSession/Default mr, /proc/meminfo r, } | about 1 year ago | argh, switch things back to complain for a while | 66 | jmichael | Edit | History | |
| opensuse10.3 | /sbin/portmap | #include <tunables/global> /sbin/portmap flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> #include <abstractions/nis> capability net_bind_service, capability setgid, capability setuid, /sbin/portmap mr, /var/run/portmap_mapping rw, } | about 1 year ago | argh, switch things back to complain for a while | 49 | jmichael | Edit | History | |
| opensuse10.3 | /etc/gdm/Init/Default | #include <tunables/global> /etc/gdm/Init/Default flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /bin/uname Px, /etc/gdm/Init/Default mr, /proc/meminfo r, /usr/bin/setxkbmap Px, /usr/bin/xmodmap Px, /usr/bin/xrdb Px, } | about 1 year ago | argh, switch things back to complain for a while | 49 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/f-spot | #include <tunables/global> /usr/bin/f-spot flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/dbus> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /bin/bash ixr, /etc/gnome-vfs-2.0/modules/ r, /etc/mono/2.0/machine.config r, /etc/mono/config r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.esd_auth r, /home/*/.fontconfig/* r, /home/*/.gnome2/f-spot/** rw, /home/*/.gnome2/f-spot/photos.db krw, /home/*/.gnome2_private/ w, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /home/*/.thumbnails/** r, /home/*/.wapi/shared_data-* mrw, /home/*/.wapi/shared_fileshare-* mrw, /home/*/Photos/** r, /proc/*/maps r, /proc/meminfo r, /proc/stat r, /proc/sys/kernel/ngroups_max r, /proc/uptime r, /usr/bin/f-spot mr, /usr/bin/mono ixr, /usr/lib/f-spot/*.dll mr, /usr/lib/f-spot/f-spot.exe mr, /usr/lib/mono/2.0/mscorlib.dll mr, /usr/lib/mono/gac/**.dll mr, /usr/share/f-spot/icons/ r, /usr/share/f-spot/icons/** r, /usr/share/fonts/** mr, /var/cache/libx11/compose/* mr, } | about 1 year ago | argh, switch things back to complain for a while | 46 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/numlockx | #include <tunables/global> /usr/bin/numlockx flags=(complain) { #include <abstractions/X> #include <abstractions/base> /home/*/.Xauthority r, /usr/bin/numlockx mr, } | about 1 year ago | few more changes to get gnome session working elsewhere | 75 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gconftool-2 | #include <tunables/global> /usr/bin/gconftool-2 flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> #include <abstractions/user-tmp> capability kill, capability sys_ptrace, /etc/gconf/gconf.xml.defaults/ r, /etc/gconf/gconf.xml.defaults/.testing.writeability w, /etc/gconf/gconf.xml.schemas/ r, /etc/gconf/gconf.xml.schemas/** rw, /etc/gconf/schema-install-source r, /etc/gconf/schemas/**.schemas r, /etc/gconf/schemas/*.entries r, /proc/ r, /proc/*/cmdline r, /proc/*/stat r, /usr/bin/gconftool-2 mr, /usr/bin/killall ixr, /usr/lib/GConf/2/gconfd-2 Px, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 48 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gtk-window-decorator | #include <tunables/global> /usr/bin/gtk-window-decorator flags=(complain) { #include <abstractions/base> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/nameservice> /home/*/.Xauthority r, /home/*/.fontconfig/* r, /proc/meminfo r, /usr/bin/bug-buddy ixr, /usr/bin/gtk-window-decorator mr, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 57 | jmichael | Edit | History | |
| opensuse10.3 | /sbin/unix2_chkpwd | #include <tunables/global> /sbin/unix2_chkpwd flags=(complain) { #include <abstractions/authentication> #include <abstractions/base> #include <abstractions/nameservice> /sbin/unix2_chkpwd mr, } | about 1 year ago | argh, switch things back to complain for a while | 54 | jmichael | Edit | History | |
| opensuse10.3 | /bin/sleep | #include <tunables/global> /bin/sleep flags=(complain) { #include <abstractions/base> /bin/sleep mr, } | about 1 year ago | argh, switch things back to complain for a while | 45 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/beagle-search | #include <tunables/global> /usr/bin/beagle-search flags=(complain) { #include <abstractions/base> #include <abstractions/bash> /bin/bash ix, /usr/bin/beagle-search mr, } | about 1 year ago | few more profile tweaks | 69 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/gnome-vfs-2.0/gnome-vfs-daemon | #include <tunables/global> /usr/lib/gnome-vfs-2.0/gnome-vfs-daemon flags=(complain) { #include <abstractions/base> #include <abstractions/dbus> #include <abstractions/gnome> #include <abstractions/nameservice> /etc/ r, /etc/fstab r, /etc/gnome-vfs-2.0/modules/ r, /etc/mtab r, /proc/*/mounts r, /usr/lib/gnome-vfs-2.0/gnome-vfs-daemon mr, } | about 1 year ago | argh, switch things back to complain for a while | 57 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gimp-remote-2.2 | #include <tunables/global> /usr/bin/gimp-remote-2.2 flags=(complain) { #include <abstractions/base> /usr/bin/gimp-remote-2.2 mr, } | about 1 year ago | argh, switch things back to complain for a while | 45 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/ggreeter | #include <tunables/global> /usr/bin/ggreeter flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/gnome> #include <abstractions/nameservice> /bin/bash ixr, /etc/mono/config r, /home/*/.Xauthority r, /home/*/.wapi/shared_data-* mrw, /home/*/.wapi/shared_fileshare-* mrw, /proc/*/maps r, /proc/meminfo r, /proc/stat r, /proc/sys/kernel/ngroups_max r, /usr/bin/bug-buddy ixr, /usr/bin/ggreeter mr, /usr/bin/mono ixr, /usr/lib/ggreeter/ggreeter.exe mr, /usr/lib/mono/2.0/mscorlib.dll mr, /usr/lib/mono/gac/**.dll mr, } | about 1 year ago | add a couple bug-buddy executions | 62 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/vte/gnome-pty-helper | #include <tunables/global> /usr/lib/vte/gnome-pty-helper flags=(complain) { #include <abstractions/base> #include <abstractions/consoles> #include <abstractions/nameservice> /dev/ptmx rw, /usr/lib/vte/gnome-pty-helper mr, /var/log/wtmp kw, /var/run/utmp krw, } | about 1 year ago | argh, switch things back to complain for a while | 60 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/beagled | #include <tunables/global> /usr/bin/beagled flags=(complain) { #include <abstractions/X> #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/nameservice> #include <abstractions/user-tmp> /bin/bash ixr, /bin/ps Px, /bin/sleep Px, /etc/fstab r, /etc/mono/2.0/machine.config r, /etc/mono/config r, /home/** rw, /home/*/.beagle/Indexes/**.db krw, /home/*/.beagle/TextCache/TextCache.db krw, /home/*/.wapi/shared_data-* mrw, /home/*/.wapi/shared_fileshare-* mrw, /proc/*/maps r, /proc/*/status r, /proc/acpi/ac_adapter/AC/state r, /proc/loadavg r, /proc/meminfo r, /proc/stat r, /proc/sys/fs/inotify/max_queued_events r, /proc/sys/fs/inotify/max_user_instances r, /proc/sys/fs/inotify/max_user_watches r, /proc/sys/kernel/ngroups_max r, /proc/uptime r, /tmp/orbit-*/bonobo-activation-register.lock klrw, /usr/bin/beagled mr, /usr/bin/mono ixr, /usr/bin/totem-video-indexer Px, /usr/lib/beagle/*.dll mr, /usr/lib/beagle/Backends/*.dll mr, /usr/lib/beagle/BeagleDaemon.exe mr, /usr/lib/beagle/Filters/*.dll mr, /usr/lib/beagle/beagled-index-helper Px, /usr/lib/mono/2.0/mscorlib.dll mr, /usr/lib/mono/gac/**.dll mr, /var/cache/beagle/indexes/ r, /var/cache/beagle/indexes/applications/Locks/ r, /var/cache/beagle/indexes/applications/fingerprint r, /var/cache/beagle/indexes/applications/version r, /var/cache/beagle/indexes/documentation/Locks/ r, /var/cache/beagle/indexes/documentation/fingerprint r, /var/cache/beagle/indexes/documentation/version r, /var/tmp/ rw, } | about 1 year ago | argh, switch things back to complain for a while | 76 | jmichael | Edit | History | |
| opensuse10.3 | /sbin/modprobe | #include <tunables/global> /sbin/modprobe flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/nameservice> capability net_raw, capability sys_module, /bin/bash ixr, /bin/true ixr, /etc/modprobe.conf r, /etc/modprobe.conf.local r, /etc/modprobe.d/ r, /etc/modprobe.d/* r, /lib/modules/**.ko krw, /lib/modules/*/modules.alias r, /lib/modules/*/modules.dep r, /proc/meminfo r, /proc/modules r, /sbin/modprobe ixr, } | about 1 year ago | argh, switch things back to complain for a while | 63 | jmichael | Edit | History | |
| opensuse10.3 | /usr/sbin/zypp-checkpatches-wrapper | #include <tunables/global> /usr/sbin/zypp-checkpatches-wrapper flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> capability setgid, capability setuid, /usr/bin/zypper Px, /usr/sbin/zypp-checkpatches-wrapper mr, } | about 1 year ago | few extra changes | 43 | jmichael | Edit | History | |
| opensuse10.3 | /etc/gdm/Xsession | #include <tunables/global> /etc/gdm/Xsession flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /etc/X11/xdm/Xsession Px, /etc/gdm/Xsession mr, /proc/meminfo r, } | about 1 year ago | argh, switch things back to complain for a while | 61 | jmichael | Edit | History | |
| opensuse10.3 | /etc/sysconfig/network/scripts/ifup-services | #include <tunables/global> /etc/sysconfig/network/scripts/ifup-services flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /etc/sysconfig/network/config r, /etc/sysconfig/network/scripts/functions r, /etc/sysconfig/network/scripts/functions.common r, /etc/sysconfig/network/scripts/ifup-services mr, /proc/meminfo r, } | about 1 year ago | argh, switch things back to complain for a while | 49 | jmichael | Edit | History | |
| opensuse10.3 | /usr/sbin/iwconfig | #include <tunables/global> /usr/sbin/iwconfig flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> capability net_admin, /proc/net/dev r, /usr/sbin/iwconfig mr, } | about 1 year ago | argh, switch things back to complain for a while | 66 | jmichael | Edit | History | |
| opensuse10.3 | /sbin/ifconfig | #include <tunables/global> /sbin/ifconfig flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> capability net_admin, capability sys_module, /proc/net/ r, /proc/net/* r, /sbin/ifconfig mr, } | about 1 year ago | few minor changes | 43 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/dbus-launch | #include <tunables/global> /usr/bin/dbus-launch flags=(complain) { #include <abstractions/X> #include <abstractions/base> /bin/dbus-daemon Px, /home/*/.Xauthority r, /usr/bin/dbus-launch mr, /usr/bin/gnome Px, } | about 1 year ago | argh, switch things back to complain for a while | 49 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome-screensaver-preferences | #include <tunables/global> /usr/bin/gnome-screensaver-preferences flags=(complain) { #include <abstractions/base> /usr/bin/gnome-screensaver-preferences mr, } | about 1 year ago | argh, switch things back to complain for a while | 64 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome-screensaver | #include <tunables/global> /usr/bin/gnome-screensaver flags=(complain) { #include <abstractions/base> #include <abstractions/dbus> #include <abstractions/gnome> #include <abstractions/nameservice> /dev/dri/card* rw, /etc/opt/kde3/share/applications/ r, /etc/xdg/menus/gnome-screensavers.menu r, /home/*/.Xauthority r, /home/*/.local/share/applications/ r, /home/*/.local/share/applications/*.desktop r, /opt/kde3/share/applications/ r, /opt/kde3/share/applications/**.desktop r, /opt/kde3/share/applications/kde/ r, /opt/kde3/share/desktop-directories/ r, /opt/kde3/share/desktop-directories/*.directory r, /proc/meminfo r, /usr/bin/gnome-screensaver mr, /usr/lib/dri/*.so mr, /usr/lib/gnome-screensaver/gnome-screensaver-dialog Px, /usr/lib/gnome-screensaver/gnome-screensaver-gl-helper Px, /usr/lib/gnome-screensaver/gnome-screensaver/* ix, /usr/lib/xscreensaver/* ix, /usr/share/applications/ r, /usr/share/applications/** r, /usr/share/desktop-directories/ r, /usr/share/desktop-directories/*.directory r, /usr/share/gdm/applications/ r, /usr/share/gdm/applications/*.desktop r, } | about 1 year ago | allow dri module loading for gl screensavers | 47 | jmichael | Edit | History | |
| opensuse10.3 | /sbin/ip | #include <tunables/global> /sbin/ip flags=(complain) { #include <abstractions/base> capability sys_module, /etc/iproute2/rt_scopes r, /proc/net/ r, /proc/net/unix r, /sbin/ip mr, } | about 1 year ago | argh, switch things back to complain for a while | 79 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/bonobo/bonobo-activation-server | #include <tunables/global> /usr/lib/bonobo/bonobo-activation-server flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> #include <abstractions/user-tmp> /etc/bonobo-activation/bonobo-activation-config.xml r, /usr/bin/tomboy-panel Px, /usr/lib/bonobo/bonobo-activation-server mr, /usr/lib/gnome-main-menu/main-menu Px, /usr/lib/gnome-panel/mixer_applet2 Px, } | about 1 year ago | few more profile tweaks | 89 | jmichael | Edit | History | |
| opensuse10.3 | /bin/ps | #include <tunables/global> /bin/ps flags=(complain) { #include <abstractions/base> #include <abstractions/consoles> #include <abstractions/nameservice> capability dac_override, capability sys_admin, capability sys_ptrace, /bin/ps mr, /proc/ r, /proc/*/attr/current r, /proc/*/cmdline r, /proc/*/stat r, /proc/*/status r, /proc/meminfo r, /proc/stat r, /proc/sys/kernel/pid_max r, /proc/tty/drivers r, /proc/uptime r, } | about 1 year ago | argh, switch things back to complain for a while | 58 | jmichael | Edit | History | |
| opensuse10.3 | /bin/dbus-daemon | #include <tunables/global> /bin/dbus-daemon flags=(complain) { #include <abstractions/base> #include <abstractions/dbus> #include <abstractions/nameservice> capability dac_override, capability setgid, capability setuid, /bin/dbus-daemon mr, /etc/dbus-1/session.conf r, /etc/dbus-1/system.conf r, /etc/dbus-1/system.d/ r, /etc/dbus-1/system.d/*.conf r, /usr/bin/helix-dbus-server Px, /usr/lib/control-center-2.0/gnome-settings-daemon Px, /usr/lib/gnome-vfs-2.0/gnome-vfs-daemon Px, /usr/lib/notification-daemon-1.0/notification-daemon Px, /usr/share/dbus-1/services/ r, /usr/share/dbus-1/services/*.service r, /var/run/dbus/pid w, } | about 1 year ago | argh, switch things back to complain for a while | 60 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/totem-video-thumbnailer | #include <tunables/global> /usr/bin/totem-video-thumbnailer flags=(complain) { #include <abstractions/base> #include <abstractions/gnome> #include <abstractions/nameservice> /etc/gnome-vfs-2.0/modules/ r, /home/*/.gstreamer-0.10/registry.i686.xml r, /home/*/Desktop/** r, /usr/bin/totem-video-thumbnailer mr, } | about 1 year ago | argh, switch things back to complain for a while | 72 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/beagle/beagled-index-helper | #include <tunables/global> /usr/lib/beagle/beagled-index-helper flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/nameservice> #include <abstractions/user-tmp> /bin/bash ixr, /etc/mono/2.0/machine.config r, /etc/mono/config r, /home/*/ rw, /home/*/.beagle/** krw, /home/*/.local/share/mime/mime.cache mr, /home/*/.wapi/shared_data-* mrw, /home/*/.wapi/shared_fileshare-* mrw, /home/*/Desktop/* r, /proc/*/maps r, /proc/*/status r, /proc/meminfo r, /proc/stat r, /proc/sys/kernel/ngroups_max r, /usr/bin/mono ixr, /usr/bin/totem-video-indexer Px, /usr/lib/beagle/*.dll mr, /usr/lib/beagle/Filters/*.dll mr, /usr/lib/beagle/IndexHelper.exe mr, /usr/lib/beagle/beagled-index-helper mr, /usr/lib/mono/2.0/mscorlib.dll mr, /usr/lib/mono/gac/**.dll mr, /usr/share/mime/mime.cache mr, /var/tmp/ rw, } | about 1 year ago | argh, switch things back to complain for a while | 81 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/manpath | #include <tunables/global> /usr/bin/manpath flags=(complain) { #include <abstractions/base> /etc/manpath.config r, /usr/bin/manpath mr, } | about 1 year ago | argh, switch things back to complain for a while | 53 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gsf-office-thumbnailer | #include <tunables/global> /usr/bin/gsf-office-thumbnailer flags=(complain) { #include <abstractions/base> /home/*/Documents/** r, /usr/bin/gsf-office-thumbnailer mr, } | about 1 year ago | few more profile tweaks | 80 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome-keyring-daemon | #include <tunables/global> /usr/bin/gnome-keyring-daemon flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> capability sys_ptrace, /home/*/.gnome2/keyrings/ r, /home/*/.gnome2/keyrings/.keyring* rw, /home/*/.gnome2/keyrings/default.keyring rw, /tmp/keyring-*/ w, /tmp/keyring-*/socket w, /usr/bin/gnome-keyring-daemon mr, /usr/lib/gnome-keyring-1/gnome-keyring-ask Px, } | about 1 year ago | argh, switch things back to complain for a while | 56 | jmichael | Edit | History | |
| opensuse10.3 | /sbin/dhclient | #include <tunables/global> /sbin/dhclient flags=(complain) { #include <abstractions/base> capability net_bind_service, capability net_raw, network inet dgram, network packet packet, /etc/dhclient.conf r, /etc/resolv.conf w, /etc/resolv.conf.saved.by.dhclient rw, /proc/net/dev r, /sbin/dhclient mr, /sbin/dhclient-script Px, /var/lib/dhcp/dhclient-*.leases rw, /var/lib/dhcp/dhclient.leases rw, /var/run/dhclient-*.pid rw, /var/run/dhclient.pid rw, /var/run/nscd/services r, /var/run/nscd/socket w, } | about 1 year ago | allow -d gdb option for firefox plus other misc updates | 42 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/gnome-screensaver/gnome-screensaver-dialog | #include <tunables/global> /usr/lib/gnome-screensaver/gnome-screensaver-dialog flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/dbus> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /bin/bash ixr, /home/*/.Xauthority r, /home/*/.fontconfig/* lrw, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /sbin/unix2_chkpwd Px, /usr/bin/gdmflexiserver Px, /usr/bin/hal-find-by-property Pxmr, /usr/lib/gnome-screensaver/gnome-screensaver-dialog mr, /usr/share/fonts/ r, /usr/share/ghostscript/fonts/ r, /usr/share/gnome-screensaver/*.glade r, } | about 1 year ago | more updates | 50 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/eog | #include <tunables/global> /usr/bin/eog flags=(complain) { #include <abstractions/X> #include <abstractions/base> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> #include <abstractions/user-tmp> /etc/gnome-vfs-2.0/modules/ r, /etc/mtab r, /etc/opt/kde3/share/applications/ r, /etc/opt/kde3/share/applications/mimeinfo.cache r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/.esd_auth r, /home/*/.fontconfig/* r, /home/*/.gnome2/accels/eog rw, /home/*/.gnome2_private/ w, /home/*/.icons/ r, /home/*/.local/share/applications/ r, /home/*/.local/share/applications/*.desktop r, /home/*/.local/share/applications/defaults.list r, /home/*/.local/share/applications/mimeinfo.cache r, /home/*/.local/share/icons/ r, /home/*/.recently-used.xbel rw, /home/*/.recently-used.xbel.* rw, /home/*/.thumbnails/** rw, /home/*/Desktop/** r, /opt/kde3/share/applications/ r, /opt/kde3/share/applications/mimeinfo.cache r, /usr/bin/eog mr, /usr/share/applications/ r, /usr/share/applications/*.desktop r, /usr/share/applications/mimeinfo.cache r, /usr/share/eog/** r, /usr/share/gdm/applications/ r, /var/cache/gnome-vfs/defaults.list r, /var/cache/libx11/compose/* r, } | about 1 year ago | flesh out the eog profile a little | 57 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome-wm | #include <tunables/global> /usr/bin/gnome-wm flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /bin/grep ixr, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /usr/bin/compiz Px, /usr/bin/gnome-wm mr, /usr/bin/xdpyinfo Px, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 45 | jmichael | Edit | History | |
| opensuse10.3 | /bin/uname | #include <tunables/global> /bin/uname flags=(complain) { #include <abstractions/base> /bin/uname mr, /proc/cpuinfo r, } | about 1 year ago | argh, switch things back to complain for a while | 63 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/GConf/2/gconf-sanity-check-2 | #include <tunables/global> /usr/lib/GConf/2/gconf-sanity-check-2 flags=(complain) { #include <abstractions/X> #include <abstractions/base> #include <abstractions/nameservice> #include <abstractions/user-tmp> /home/*/.Xauthority r, /tmp/gconf-test-locking-file-* klrw, /usr/lib/GConf/2/gconf-sanity-check-2 mr, } | about 1 year ago | argh, switch things back to complain for a while | 53 | jmichael | Edit | History | |
| opensuse10.3 | /usr/sbin/dhcdbd | #include <tunables/global> /usr/sbin/dhcdbd flags=(complain) { #include <abstractions/base> #include <abstractions/dbus> /etc/HOSTNAME r, /etc/sysconfig/network/dhcp r, /sbin/dhclient Px, /usr/sbin/dhcdbd mr, /var/run/dhcdbd.pid w, } | about 1 year ago | argh, switch things back to complain for a while | 71 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/Xgl | #include <tunables/global> /usr/bin/Xgl flags=(complain) { #include <abstractions/X> #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/fonts> #include <abstractions/freedesktop.org> #include <abstractions/user-tmp> capability dac_override, capability ipc_owner, capability setgid, capability setuid, capability sys_admin, /bin/bash ixr, /dev/dri/card* rw, /etc/sysconfig/displaymanager r, /home/*/.gnome2/share/cursor-fonts/fonts.dir r, /home/*/.gnome2/share/fonts/fonts.dir r, /home/jesse/.gnome2/share/fonts/** r, /proc/meminfo r, /usr/bin/Xgl mr, /usr/bin/Xorg Px, /usr/bin/xkbcomp Px, /usr/lib/dri/*.so mr, /var/lib/gdm/* r, /var/lib/xkb/compiled/*.xkm rw, /var/log/Xgl.*.log rw, /var/log/Xgl.*.log.old w, /var/log/gdm/*.log w, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 43 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/compiz | #include <tunables/global> /usr/bin/compiz flags=(complain) { #include <abstractions/X> #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/freedesktop.org> #include <abstractions/nameservice> #include <abstractions/user-tmp> /bin/bash ixr, /home/*/ r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /usr/bin/compiz ixmr, /usr/bin/gtk-window-decorator Px, /usr/share/compiz/*.png r, /usr/share/compiz/*.xml r, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 55 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/twm | #include <tunables/global> /usr/bin/twm flags=(complain) { #include <abstractions/base> /usr/bin/twm mr, } | about 1 year ago | argh, switch things back to complain for a while | 63 | jmichael | Edit | History | |
| opensuse10.3 | /etc/NetworkManager/dispatcher.d/netcontrol_global_hooks | #include <tunables/global> /etc/NetworkManager/dispatcher.d/netcontrol_global_hooks flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /etc/NetworkManager/dispatcher.d/netcontrol_global_hooks mr, /etc/sysconfig/network/config r, /etc/sysconfig/network/if-down.d/ r, /etc/sysconfig/network/if-up.d/ r, /etc/sysconfig/network/scripts/50-ntp Px, /etc/sysconfig/network/scripts/SuSEfirewall2 Px, /etc/sysconfig/network/scripts/dhcpcd-hook-samba Px, /etc/sysconfig/network/scripts/functions r, /etc/sysconfig/network/scripts/functions.common r, /proc/meminfo r, } | about 1 year ago | argh, switch things back to complain for a while | 86 | jmichael | Edit | History | |
| opensuse10.3 | /bin/netstat | #include <tunables/global> /bin/netstat flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> capability dac_override, capability sys_ptrace, /bin/netstat mr, /proc/ r, /proc/*/cmdline r, /proc/*/fd/ r, /proc/net/ r, /proc/net/* r, } | about 1 year ago | argh, switch things back to complain for a while | 66 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/hal-find-by-property | #include <tunables/global> /usr/bin/hal-find-by-property flags=(complain) { #include <abstractions/base> #include <abstractions/dbus> /usr/bin/hal-find-by-property mr, } | about 1 year ago | argh, switch things back to complain for a while | 60 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/printenv | #include <tunables/global> /usr/bin/printenv flags=(complain) { #include <abstractions/base> /usr/bin/printenv mr, } | about 1 year ago | few more changes to get gnome session working elsewhere | 84 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/helix-dbus-server | #include <tunables/global> /usr/bin/helix-dbus-server flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /proc/meminfo r, /usr/bin/helix-dbus-server mr, /usr/lib/helix-dbus-server/helix-dbus-server.bin px, } | about 1 year ago | argh, switch things back to complain for a while | 46 | jmichael | Edit | History | |
| opensuse10.3 | /etc/gdm/PostLogin/Default | #include <tunables/global> /etc/gdm/PostLogin/Default flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /etc/gdm/PostLogin/Default mr, /proc/meminfo r, } | about 1 year ago | argh, switch things back to complain for a while | 76 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/setxkbmap | #include <tunables/global> /usr/bin/setxkbmap flags=(complain) { #include <abstractions/base> /usr/bin/setxkbmap mr, } | about 1 year ago | argh, switch things back to complain for a while | 67 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/ssh/x11-ssh-askpass | #include <tunables/global> /usr/lib/ssh/x11-ssh-askpass flags=(complain) { #include <abstractions/base> /usr/lib/ssh/x11-ssh-askpass mr, } | about 1 year ago | argh, switch things back to complain for a while | 46 | jmichael | Edit | History | |
| opensuse10.3 | /etc/gdm/PreSession/Default | #include <tunables/global> /etc/gdm/PreSession/Default flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> capability setgid, capability setuid, /bin/bash ixr, /bin/sed ixr, /etc/gdm/PreSession/Default mr, /usr/bin/gdmflexiserver Px, /usr/bin/xsetroot Px, } | about 1 year ago | argh, switch things back to complain for a while | 45 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/evince-thumbnailer | #include <tunables/global> /usr/bin/evince-thumbnailer flags=(complain) { #include <abstractions/base> #include <abstractions/gnome> #include <abstractions/nameservice> /etc/gnome-vfs-2.0/modules/ r, /etc/xpdfrc r, /etc/xpdfrc-cjk r, /etc/xpdfrc-cjk-auto r, /etc/xpdfrc-cjk.sjis r, /home/*/.fontconfig/* lrw, /home/*/Desktop/**.pdf r, /opt/kde3/share/fonts/ r, /proc/meminfo r, /usr/bin/evince-thumbnailer mr, /usr/share/ghostscript/fonts/ r, /usr/share/xpdf/** r, } | about 1 year ago | argh, switch things back to complain for a while | 78 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/ekiga | #include <tunables/global> /usr/bin/ekiga flags=(complain) { #include <abstractions/audio> #include <abstractions/base> #include <abstractions/dbus> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /dev/ r, /dev/** r, /etc/gnome-vfs-2.0/modules/ r, /etc/mtab r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.beagle/socket w, /home/*/.esd_auth r, /home/*/.fontconfig/* r, /home/*/.gnome2/gnomemeeting rw, /home/*/.gnome2_private/ w, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /home/*/.recently-used.xbel rw, /home/*/.recently-used.xbel.* rw, /proc/meminfo r, /proc/net/if_inet6 r, /tmp/orbit-*/bonobo-activation-register.lock klrw, /usr/bin/ekiga mr, /usr/lib/pwlib/devices/sound/*.so mr, /usr/lib/pwlib/devices/videoinput/*.so mr, /usr/share/mime/**.xml r, /var/cache/libx11/compose/* r, } | about 1 year ago | argh, switch things back to complain for a while | 55 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome-panel | #include <tunables/global> /usr/bin/gnome-panel flags=(complain) { #include <abstractions/base> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /etc/gnome-vfs-2.0/modules/ r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.esd_auth r, /home/*/.fontconfig/* r, /home/*/.gnome2_private/ w, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /proc/meminfo r, /tmp/orbit-*/bonobo-activation-register.lock klrw, /usr/bin/banshee Px, /usr/bin/bug-buddy ixr, /usr/bin/ekiga Px, /usr/bin/f-spot Px, /usr/bin/gnome-panel mr, /usr/bin/gnome-screensaver-command Px, /usr/bin/gnome-screensaver-preferences Px, /usr/bin/gnome-terminal Px, /usr/bin/gnomesu Px, /usr/bin/pidgin Px, /usr/lib/bonobo/bonobo-activation-server Px, /usr/lib/firefox/firefox.sh Px, /usr/share/applications/*.desktop r, /usr/share/f-spot/icons/**.png r, /usr/share/gnome-2.0/ui/*.xml r, /usr/share/gnome-panelrc r, /var/cache/libx11/compose/* r, /var/run/gdm_socket w, } | about 1 year ago | some bug-buddy rules and other misc updates | 46 | jmichael | Edit | History | |
| opensuse10.3 | /bin/basename | #include <tunables/global> /bin/basename flags=(complain) { #include <abstractions/base> /bin/basename mr, } | about 1 year ago | argh, switch things back to complain for a while | 72 | jmichael | Edit | History | |
| opensuse10.3 | /etc/X11/xinit/xinitrc.d/sabayon-xinitrc.sh | #include <tunables/global> /etc/X11/xinit/xinitrc.d/sabayon-xinitrc.sh flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /etc/X11/xinit/xinitrc.d/sabayon-xinitrc.sh mr, /proc/meminfo r, /usr/sbin/sabayon-apply Px, } | about 1 year ago | few more changes to get gnome session working elsewhere | 99 | jmichael | Edit | History | |
| opensuse10.3 | /etc/X11/xdm/Xsession | #include <tunables/global> /etc/X11/xdm/Xsession flags=(complain) { #include <abstractions/X> #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/nameservice> capability sys_ptrace, /bin/bash ixr, /bin/grep ixr, /bin/hostname Px, /bin/ls ixmr, /bin/uname Px, /etc/X11/Xresources r, /etc/X11/xdm/Xsession mr, /etc/X11/xdm/sys.xsession Px, /etc/X11/xinit/xinitrc.common r, /etc/opt/ r, /etc/shells r, /etc/sysconfig/console r, /etc/sysconfig/language r, /etc/sysconfig/mail r, /etc/sysconfig/news r, /etc/sysconfig/proxy r, /etc/sysconfig/suseconfig r, /etc/sysconfig/windowmanager r, /home/*/.Xdefaults r, /home/*/.bashrc r, /home/*/.profile r, /opt/ r, /proc/ r, /proc/*/cmdline r, /proc/*/mounts r, /proc/*/stat r, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /sbin/killall5 ixr, /usr/bin/dircolors ixmr, /usr/bin/manpath Px, /usr/bin/tty ixr, /usr/bin/xrdb Px, /usr/lib/jvm/java-1.5.0-sun-1.5.0_update12/jre/bin/java ixr, /var/log/Xorg.*.log r, } | about 1 year ago | argh, switch things back to complain for a while | 50 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/NetworkManager/nm-crash-logger | #include <tunables/global> /usr/lib/NetworkManager/nm-crash-logger flags=(complain) { #include <abstractions/base> /usr/lib/NetworkManager/nm-crash-logger mr, } | about 1 year ago | initial nm-crash-logger profile | 96 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/evince | #include <tunables/global> /usr/bin/evince flags=(complain) { #include <abstractions/base> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /etc/gnome-vfs-2.0/modules/ r, /etc/mtab r, /etc/sound/events/gtk-events-2.soundlist r, /etc/xpdfrc r, /etc/xpdfrc-cjk r, /etc/xpdfrc-cjk-auto r, /etc/xpdfrc-cjk.sjis r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.esd_auth r, /home/*/.fontconfig/* r, /home/*/.gnome2/accels/evince rw, /home/*/.gnome2/evince/ev-metadata.xml rw, /home/*/.gnome2_private/ w, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /home/*/.recently-used.xbel rw, /home/*/.recently-used.xbel.* rw, /home/*/Desktop/**.pdf r, /proc/meminfo r, /usr/bin/evince mr, /usr/share/evince/evince-toolbar.xml r, /usr/share/evince/evince-ui.xml r, /usr/share/evince/icons/ r, /usr/share/evince/icons/hicolor/** r, /usr/share/xpdf/** r, /var/cache/libx11/compose/* r, } | about 1 year ago | few extra changes | 56 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/Xorg | #include <tunables/global> /usr/bin/Xorg flags=(complain) { #include <abstractions/X> #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/fonts> #include <abstractions/nameservice> #include <abstractions/user-tmp> capability chown, capability dac_override, capability fsetid, capability ipc_owner, capability mknod, capability setgid, capability setuid, capability sys_admin, capability sys_rawio, capability sys_tty_config, /bin/bash ixr, /dev/agpgart rw, /dev/apm_bios rw, /dev/dri/ w, /dev/dri/card* rw, /dev/input/mice rw, /dev/mem mrw, /dev/tty* rw, /etc/X11/xorg.conf r, /home/*/.gnome2/share/cursor-fonts/fonts.dir r, /home/*/.gnome2/share/fonts/fonts.dir r, /proc/bus/pci/** rw, /proc/meminfo r, /proc/mtrr w, /proc/sys/kernel/modprobe r, /sbin/modprobe Px, /sys/bus/pci/devices/ r, /sys/devices/**/resource r, /sys/devices/**/rom rw, /usr/bin/Xorg mr, /usr/bin/xkbcomp Px, /usr/lib/xorg/modules/drivers/*.so mr, /usr/lib/xorg/modules/input/*.so mr, /var/lib/gdm/* r, /var/lib/xkb/compiled/*.xkm rw, /var/log/Xorg.*.log rw, /var/log/Xorg.*.log.old w, /var/log/gdm/*.log w, /var/run/acpid.socket w, } | about 1 year ago | argh, switch things back to complain for a while | 50 | jmichael | Edit | History | |
| opensuse10.3 | /usr/sbin/NetworkManager | #include <tunables/global> /usr/sbin/NetworkManager flags=(complain) { #include <abstractions/base> #include <abstractions/dbus> #include <abstractions/nameservice> capability net_admin, capability net_raw, capability sys_module, network packet packet, /etc/resolv.conf w, /etc/resolv.conf.tmp rw, /etc/sysconfig/network/ r, /etc/sysconfig/network/dhcp r, /proc/net/psched r, /sbin/ip Px, /usr/lib/NetworkManager/nm-crash-logger Px, /usr/sbin/NetworkManager mr, /usr/sbin/nscd Px, /usr/sbin/wpa_supplicant Px, /var/run/NetworkManager.pid w, /var/run/NetworkManager/wpa_ctrl_* w, /var/run/wpa_supplicant-global w, /var/run/wpa_supplicant/* w, } | about 1 year ago | argh, switch things back to complain for a while | 61 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/nautilus | #include <tunables/global> /usr/bin/nautilus flags=(complain) { #include <abstractions/base> #include <abstractions/consoles> #include <abstractions/dbus> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/nameservice> / r, /bin/mount Ux, /boot/ r, /dev/ r, /dev/ptmx rw, /etc/gnome-vfs-2.0/modules/ r, /etc/mtab r, /etc/opt/kde3/share/applications/ r, /etc/opt/kde3/share/applications/mimeinfo.cache r, /etc/opt/kde3/share/icons/ r, /etc/opt/kde3/share/icons/**/ r, /etc/sound/events/gtk-events-2.soundlist r, /home/ r, /home/** rw, /opt/kde3/bin/gwenview Px, /opt/kde3/share/applications/ r, /opt/kde3/share/applications/mimeinfo.cache r, /opt/kde3/share/icons/ r, /opt/kde3/share/icons/** r, /proc/*/mounts r, /proc/meminfo r, /tmp/orbit-*/bonobo-activation-register.lock klrw, /usr/bin/bug-buddy ixr, /usr/bin/eog Px, /usr/bin/evince Px, /usr/bin/evince-thumbnailer Px, /usr/bin/file-roller Px, /usr/bin/gnome-appearance-properties Px, /usr/bin/gnome-terminal Px, /usr/bin/mplayer Px, /usr/bin/nautilus mr, /usr/bin/net Px, /usr/bin/totem-video-thumbnailer Px, /usr/lib/nautilus-cd-burner/mapping-daemon Px, /usr/share/applications/ r, /usr/share/applications/*.desktop r, /usr/share/applications/mimeinfo.cache r, /usr/share/dist/icons/*.svg r, /usr/share/gdm/applications/ r, /usr/share/ghostscript/fonts/ r, /usr/share/mime/**.xml r, /usr/share/nautilus/ui/*.xml r, /var/cache/gnome-vfs/defaults.list r, /var/cache/libx11/compose/* r, } | about 1 year ago | let nautilus start gnome-terminal | 46 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/xmodmap | #include <tunables/global> /usr/bin/xmodmap flags=(complain) { #include <abstractions/X> #include <abstractions/base> /etc/X11/Xmodmap r, /usr/bin/xmodmap mr, /var/lib/gdm/* r, } | about 1 year ago | argh, switch things back to complain for a while | 62 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/package-manager | #include <tunables/global> /usr/bin/package-manager flags=(complain) { #include <abstractions/base> #include <abstractions/bash> /bin/bash ix, /usr/bin/package-manager mr, } | about 1 year ago | argh, switch things back to complain for a while | 65 | jmichael | Edit | History | |
| opensuse10.3 | /etc/init.d/ntp | #include <tunables/global> /etc/init.d/ntp flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/nameservice> #include <abstractions/nis> #include <abstractions/wutmp> capability kill, capability net_bind_service, capability setgid, capability setuid, capability sys_chroot, capability sys_ptrace, capability sys_time, capability sys_tty_config, /bin/bash ixr, /bin/cp ixr, /bin/rm ixr, /bin/stty ixr, /dev/blog w, /etc/gai.conf r, /etc/init.d/ntp ixr, /etc/ntp.conf r, /etc/rc.status r, /etc/sysconfig/ntp r, /proc/ r, /proc/*/stat r, /proc/*/statm r, /proc/meminfo r, /proc/net/if_inet6 r, /sbin/checkproc ixr, /sbin/killproc ixr, /sbin/startproc ixr, /usr/sbin/ntpd Pxmr, /usr/sbin/ntpdate Px, /var/lib/ntp/drift/ntp.drift r, /var/lib/ntp/etc/localtime w, /var/lib/ntp/var/run/ntp/ntpd.pid rw, /var/log/ntp a, /var/run/nscd/services r, } | about 1 year ago | argh, switch things back to complain for a while | 47 | jmichael | Edit | History | |
| opensuse10.3 | /usr/sbin/ntpdate | #include <tunables/global> /usr/sbin/ntpdate flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> capability net_bind_service, capability sys_nice, capability sys_time, /etc/gai.conf r, /proc/meminfo r, /usr/sbin/ntpdate mr, /var/run/nscd/services r, } | about 1 year ago | argh, switch things back to complain for a while | 54 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome-at-visual | #include <tunables/global> /usr/bin/gnome-at-visual flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/nameservice> #include <abstractions/user-tmp> /bin/basename Px, /bin/bash ixr, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /usr/bin/gconftool-2 Pxmr, /usr/bin/gnome-at-visual mr, } | about 1 year ago | argh, switch things back to complain for a while | 477 | jmichael | Edit | History | |
| opensuse10.3 | /etc/NetworkManager/dispatcher.d/netcontrol_services | #include <tunables/global> /etc/NetworkManager/dispatcher.d/netcontrol_services flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /bin/sed ixr, /etc/NetworkManager/dispatcher.d/netcontrol_services mr, /etc/sysconfig/network/config r, /etc/sysconfig/network/scripts/functions r, /etc/sysconfig/network/scripts/functions.common r, /etc/sysconfig/network/scripts/ifup-services Px, /proc/meminfo r, /usr/sbin/iwconfig Px, } | about 1 year ago | argh, switch things back to complain for a while | 50 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gimp-2.2 | #include <tunables/global> /usr/bin/gimp-2.2 { #include <abstractions/base> /usr/bin/gimp-2.2 mr, } | about 1 year ago | initial gimp profile | 54 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/net | #include <tunables/global> /usr/bin/net flags=(complain) { #include <abstractions/base> network inet dgram, /etc/samba/dhcp.conf r, /etc/samba/smb.conf r, /usr/bin/net mr, } | about 1 year ago | argh, switch things back to complain for a while | 49 | jmichael | Edit | History | |
| opensuse10.3 | /usr/sbin/wpa_supplicant | #include <tunables/global> /usr/sbin/wpa_supplicant flags=(complain) { #include <abstractions/base> capability net_admin, capability net_raw, capability sys_module, network inet dgram, network packet dgram, /proc/net/ r, /proc/net/unix r, /usr/sbin/wpa_supplicant mr, /var/run/NetworkManager/wpa_ctrl_* w, /var/run/wpa_supplicant-global w, /var/run/wpa_supplicant/ w, /var/run/wpa_supplicant/* w, } | about 1 year ago | argh, switch things back to complain for a while | 57 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/GConf/2/gconfd-2 | #include <tunables/global> /usr/lib/GConf/2/gconfd-2 flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> #include <abstractions/user-tmp> /etc/gconf/2/path r, /etc/gconf/gconf.xml.defaults/ r, /etc/gconf/gconf.xml.mandatory/ r, /etc/gconf/gconf.xml.schemas/ r, /etc/gconf/gconf.xml.schemas/** r, /home/*/.gconf/ rw, /home/*/.gconf/** rw, /home/*/.gconfd/ w, /home/*/.gconfd/saved_state rw, /home/*/.gconfd/saved_state.orig w, /home/*/.gconfd/saved_state.tmp rw, /tmp/gconfd-*/lock/* klrw, /usr/lib/GConf/2/gconfd-2 mr, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 54 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/acroread | #include <tunables/global> /usr/bin/acroread flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/nameservice> /bin/basename Px, /bin/bash ixr, /bin/cat ixr, /bin/grep ixr, /bin/ls ixmr, /bin/pwd ixr, /bin/sed ixr, /bin/uname Px, /home/*/.adobe/** w, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /sbin/ldconfig Px, /usr/bin/acroread mr, /usr/bin/dirname ixr, /usr/bin/expr ixr, /usr/bin/gconftool-2 Px, /usr/lib/Acrobat7/Reader/intellinux/bin/acroread Px, } | about 1 year ago | initial acroread profile | 53 | jmichael | Edit | History | |
| opensuse10.3 | /sbin/runlevel | #include <tunables/global> /sbin/runlevel flags=(complain) { #include <abstractions/base> /sbin/runlevel mr, /var/run/utmp krw, } | about 1 year ago | argh, switch things back to complain for a while | 56 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/esd | #include <tunables/global> /usr/bin/esd flags=(complain) { #include <abstractions/audio> #include <abstractions/base> #include <abstractions/nameservice> #include <abstractions/user-tmp> /proc/cpuinfo r, /usr/bin/esd mr, } | about 1 year ago | argh, switch things back to complain for a while | 54 | jmichael | Edit | History | |
| opensuse10.3 | /etc/sysconfig/network/scripts/dhcpcd-hook-samba | #include <tunables/global> /etc/sysconfig/network/scripts/dhcpcd-hook-samba flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /bin/gawk ixr, /etc/sysconfig/network/dhcp r, /etc/sysconfig/network/scripts/dhcpcd-hook-samba mr, /etc/sysconfig/network/scripts/dhcpcd-hook-samba-functions r, /proc/meminfo r, /var/lib/dhcp/dhclient-*.leases r, } | about 1 year ago | argh, switch things back to complain for a while | 53 | jmichael | Edit | History | |
| opensuse10.3 | /etc/init.d/privoxy | #include <tunables/global> /etc/init.d/privoxy flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/nameservice> capability kill, capability sys_ptrace, capability sys_tty_config, /bin/basename Px, /bin/bash ixr, /bin/cp ixr, /bin/rm ixr, /bin/stty ixr, /dev/blog w, /etc/init.d/privoxy ixr, /etc/rc.status r, /proc/*/stat r, /proc/*/statm r, /proc/meminfo r, /sbin/checkproc ixr, /sbin/killproc ixr, /usr/sbin/privoxy Pxr, /var/lib/privoxy/ r, /var/lib/privoxy/etc/* w, /var/lib/privoxy/lib/ r, /var/lib/privoxy/lib/lib*so* w, /var/run/privoxy.pid rw, } | about 1 year ago | argh, switch things back to complain for a while | 54 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/tomboy-panel | #include <tunables/global> /usr/bin/tomboy-panel flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/dbus> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /bin/bash ixr, /etc/gnome-vfs-2.0/modules/ r, /etc/mono/2.0/machine.config r, /etc/mono/config r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.esd_auth r, /home/*/.fontconfig/* r, /home/*/.gnome2_private/ w, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /home/*/.tomboy.log w, /home/*/.tomboy/ rw, /home/*/.tomboy/** rw, /home/*/.wapi/shared_data-* mrw, /home/*/.wapi/shared_fileshare-* mrw, /proc/*/maps r, /proc/meminfo r, /proc/stat r, /proc/sys/kernel/ngroups_max r, /proc/uptime r, /tmp/orbit-*/bonobo-activation-register.lock klrw, /usr/bin/bug-buddy ixr, /usr/bin/mono ixr, /usr/bin/tomboy-panel mr, /usr/lib/aspell-0.60/*.rws mr, /usr/lib/mono/2.0/mscorlib.dll mr, /usr/lib/mono/gac/**.dll mr, /usr/lib/tomboy/*.dll mr, /usr/lib/tomboy/Tomboy.exe mr, /usr/lib/tomboy/addins/*.dll mr, /usr/share/fonts/** mr, /var/cache/libx11/compose/* mr, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 51 | jmichael | Edit | History | |
| opensuse10.3 | /etc/NetworkManager/dispatcher.d/nfs | #include <tunables/global> /etc/NetworkManager/dispatcher.d/nfs flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /bin/ls ixmr, /etc/NetworkManager/dispatcher.d/nfs mr, /etc/init.d/rc5.d/ r, /proc/meminfo r, /sbin/runlevel Px, } | about 1 year ago | argh, switch things back to complain for a while | 54 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/gnome | #include <tunables/global> /usr/bin/gnome flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /bin/cp ixr, /bin/mkdir ixr, /bin/touch ixr, /home/*/.skel/ w, /home/*/.skel/* w, /home/*/Desktop/ w, /home/*/Desktop/GnomeOnlineHelp.desktop w, /home/*/Desktop/SuSE.desktop w, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /usr/bin/gconftool-2 Px, /usr/bin/gnome mr, /usr/bin/gnome-session Px, /usr/share/dist/desktop-files/*.desktop r, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 44 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/nm-applet | #include <tunables/global> /usr/bin/nm-applet flags=(complain) { #include <abstractions/base> #include <abstractions/dbus> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /etc/gnome-vfs-2.0/modules/ r, /etc/sound/events/gtk-events-2.soundlist r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.esd_auth r, /home/*/.fontconfig/* r, /home/*/.gnome2_private/ w, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /usr/bin/bug-buddy ixr, /usr/bin/nm-applet mr, /usr/share/nm-applet/*.glade r, } | about 1 year ago | some bug-buddy rules and other misc updates | 79 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/mplayer | #include <tunables/global> /usr/bin/mplayer flags=(complain) { #include <abstractions/X> #include <abstractions/audio> #include <abstractions/base> #include <abstractions/fonts> #include <abstractions/freedesktop.org> #include <abstractions/nameservice> /etc/mplayer/input.conf r, /etc/mplayer/mplayer.conf r, /home/*/.Xauthority r, /home/*/.mplayer/* rw, /home/*/Desktop/ r, /home/*/Desktop/** r, /home/*/Documents/ r, /home/*/Documents/** r, /opt/kde3/lib/lib*so* mr, /usr/bin/mplayer mr, /usr/lib/win32/*.dll mr, /usr/share/terminfo/** r, } | about 1 year ago | few extra changes | 49 | jmichael | Edit | History | |
| opensuse10.3 | /opt/kde3/bin/gwenview | #include <tunables/global> /opt/kde3/bin/gwenview flags=(complain) { #include <abstractions/authentication> #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> #include <abstractions/kde> #include <abstractions/nameservice> /bin/bash ixr, /etc/exports r, /etc/rpc r, /home/*/ r, /home/*/.DCOPserver_* r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.fontconfig/* r, /home/*/.kde/share/config/ w, /home/*/.kde/share/config/gwenviewrc* rw, /home/*/.kde/share/config/gwenviewrc.lock lw, /home/*/.kde/share/config/kdeglobals* rw, /home/*/.kde/share/config/kdeglobals.lock lw, /home/*/.kde/share/config/kioslaverc r, /home/*/.kde/share/config/knfsshare rw, /home/*/.qt/.qt_plugins_3.3rc.lock krw, /home/*/.qt/qt_plugins_3.3rc r, /home/*/Desktop/ r, /home/*/Desktop/** r, /opt/kde3/bin/gwenview mr, /opt/kde3/share/apps/gwenview/** r, /opt/kde3/share/config/ui/ui_standards.rc r, /opt/kde3/share/locale-bundle/**.mo r, /opt/kde3/share/mimelnk/magic r, /proc/meminfo r, /usr/share/desktop-data/qtrc r, /var/cache/libx11/compose/* r, } | about 1 year ago | argh, switch things back to complain for a while | 54 | jmichael | Edit | History | |
| opensuse10.3 | /sbin/route | #include <tunables/global> /sbin/route flags=(complain) { #include <abstractions/base> #include <abstractions/nameservice> capability net_admin, /proc/net/route r, /sbin/route mr, } | about 1 year ago | few minor changes | 35 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/gnome-keyring-1/gnome-keyring-ask | #include <tunables/global> /usr/lib/gnome-keyring-1/gnome-keyring-ask flags=(complain) { #include <abstractions/base> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /home/*/.Xauthority r, /home/*/.fontconfig/* r, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /proc/meminfo r, /usr/lib/gnome-keyring-1/gnome-keyring-ask mr, } | about 1 year ago | argh, switch things back to complain for a while | 50 | jmichael | Edit | History | |
| opensuse10.3 | /etc/NetworkManager/dispatcher.d/autofs | #include <tunables/global> /etc/NetworkManager/dispatcher.d/autofs flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /etc/NetworkManager/dispatcher.d/autofs mr, /proc/meminfo r, /sbin/chkconfig Px, } | about 1 year ago | argh, switch things back to complain for a while | 49 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/opensuse-updater-gnome-applet | #include <tunables/global> /usr/bin/opensuse-updater-gnome-applet flags=(complain) { #include <abstractions/base> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /home/*/.Xauthority r, /home/*/.fontconfig/* r, /home/*/.opensuse-updater-gnome rw, /proc/meminfo r, /usr/bin/bug-buddy ixr, /usr/bin/opensuse-updater-gnome-applet mr, /usr/sbin/zypp-checkpatches-wrapper Px, /usr/share/opensuse-updater-gnome/glade/*.glade r, /usr/share/opensuse-updater-gnome/images/** r, } | about 1 year ago | minor changes for 10.3 rc2 initial gnome launch | 87 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/pidgin | #include <tunables/global> /usr/bin/pidgin flags=(complain) { #include <abstractions/base> #include <abstractions/dbus> #include <abstractions/fonts> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /bin/netstat Px, /etc/gai.conf r, /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.fontconfig/* r, /home/*/.gstreamer-0.10/registry.i686.xml rw, /home/*/.gstreamer-0.10/registry.i686.xml.tmp* rw, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /home/*/.purple/ r, /home/*/.purple/** rw, /home/*/.purple/cap.db krw, /proc/meminfo r, /usr/bin/gconftool-2 Px, /usr/bin/gnome-open Px, /usr/bin/pidgin mr, /usr/lib/pidgin/*.so mr, /usr/lib/purple-2/*.so mr, /usr/share/tcl/tcl*/encoding/*.enc r, /var/cache/libx11/compose/* r, } | about 1 year ago | argh, switch things back to complain for a while | 63 | jmichael | Edit | History | |
| opensuse10.3 | /etc/NetworkManager/dispatcher.d/privoxy | #include <tunables/global> /etc/NetworkManager/dispatcher.d/privoxy flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /etc/NetworkManager/dispatcher.d/privoxy mr, /etc/init.d/privoxy Px, /proc/meminfo r, /sbin/chkconfig Px, } | about 1 year ago | argh, switch things back to complain for a while | 51 | jmichael | Edit | History | |
| opensuse10.3 | /usr/bin/metacity | #include <tunables/global> /usr/bin/metacity flags=(complain) { #include <abstractions/base> #include <abstractions/gnome> #include <abstractions/nameservice> /home/*/.ICEauthority r, /home/*/.Xauthority r, /home/*/.fontconfig/* r, /home/*/.metacity/sessions/* w, /proc/meminfo r, /usr/bin/bug-buddy ixr, /usr/bin/metacity mr, } | about 1 year ago | some bug-buddy rules and other misc updates | 70 | jmichael | Edit | History | |
| opensuse10.3 | /sbin/ldconfig | #include <tunables/global> /sbin/ldconfig flags=(complain) { #include <abstractions/base> /etc/ld.so.cache mrw, /etc/ld.so.cache~ rw, /etc/ld.so.conf r, /etc/ld.so.conf.d/ r, /etc/ld.so.conf.d/* r, /lib/ r, /opt/kde3/lib/ r, /sbin/ldconfig mr, /usr/X11R6/lib/ r, /usr/lib/ r, /usr/local/lib/ r, /var/cache/ldconfig/aux-cache rw, /var/cache/ldconfig/aux-cache~ rw, } | about 1 year ago | flesh out the ldconfig profile a little | 53 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/control-center-2.0/novell-sysconfig-proxy-helper | #include <tunables/global> /usr/lib/control-center-2.0/novell-sysconfig-proxy-helper flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ixr, /etc/sysconfig/proxy r, /proc/meminfo r, /proc/sys/kernel/ngroups_max r, /usr/lib/control-center-2.0/novell-sysconfig-proxy-helper mr, } | about 1 year ago | argh, switch things back to complain for a while | 73 | jmichael | Edit | History | |
| opensuse10.3 | /usr/lib/Acrobat7/Reader/intellinux/bin/acroread | #include <tunables/global> /usr/lib/Acrobat7/Reader/intellinux/bin/acroread flags=(complain) { #include <abstractions/base> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/nameservice> /etc/gnome-vfs-2.0/modules/ r, /etc/mtab r, /home/*/ r, /home/*/.Xauthority r, /home/*/.adobe/** krw, /home/*/.beagle/socket w, /home/*/.config/gtk-2.0/gtkfilechooser.ini rw, /home/*/.config/gtk-2.0/gtkfilechooser.ini.* rw, /home/*/.fontconfig/* mr, /home/*/.fonts/ r, /home/*/.icons/ r, /home/*/.local/share/icons/ r, /home/*/.recently-used.xbel r, /home/*/Desktop/ r, /home/*/Desktop/**.pdf w, /home/*/Desktop/*.desktop r, /proc/meminfo r, /usr/lib/Acrobat7/Reader/intellinux/bin/acroread mr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/Accessibility.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/AcroForm.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/Annots.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/DigSig.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/EFS.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/EScript.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/LegalPDF.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/MakeAccessible.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/PDDom.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/PPKLite.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/SOAP.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/SaveAsRTF.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/SearchFind.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/SendMail.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/Spelling.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/checkers.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/ewh.api ixr, /usr/lib/Acrobat7/Reader/intellinux/plug_ins/wwwlink.api ixr, /usr/lib/Acrobat7/Resource/** mr, /usr/share/dist/icons/suse-help.svg r, /usr/share/fonts/ r, /usr/share/fonts/** mr, /usr/share/mime/**.xml r, /var/cache/libx11/compose/* mr, } | about 1 year ago | initial acroread profile | 58 | jmichael | Edit | History | |