1 files changed, 43 insertions, 0 deletions

diff --git a/contrib/apparmor/gnunet-fs-gtk b/contrib/apparmor/gnunet-fs-gtk
new file mode 100644
index 000000000..0ffb0b38b
--- /dev/null
+++ b/contrib/apparmor/gnunet-fs-gtk
@@ -0,0 +1,43 @@
+# Last Modified: Wed Aug  5 10:53:37 2015
+#include <tunables/global>
+#include <tunables/gnunet>
+
+profile @{GNUNET_PREFIX}/bin/gnunet-fs-gtk {
+  #include <abstractions/gnome>
+  #include <abstractions/kde>
+  #include <abstractions/dconf>
+  #include <abstractions/gnunet-gtk>
+  #include <abstractions/user-download>
+
+#  /dev/shm/LE-* rw,  
+
+  owner @{HOME}/.config/gtk-*/bookmarks r,
+  owner @{HOME}/.local/share/gnunet/fs/persistence/gnunet-fs-gtk/download-child/* rw,
+  owner @{HOME}/.local/share/gnunet/fs/persistence/gnunet-fs-gtk/download/ r,
+  owner @{HOME}/.local/share/gnunet/fs/persistence/gnunet-fs-gtk/download/* rw,
+  owner @{HOME}/.local/share/gnunet/fs/persistence/gnunet-fs-gtk/search/ r,
+  owner @{HOME}/.local/share/gnunet/fs/persistence/gnunet-fs-gtk/search/** rw,
+  owner @{HOME}/.local/share/gnunet/fs/persistence/gnunet-fs-gtk/publish-file/ ra,
+  owner @{HOME}/.local/share/gnunet/fs/persistence/gnunet-fs-gtk/publish-file/* rw,
+  owner @{HOME}/.local/share/gnunet/fs/persistence/gnunet-fs-gtk/publish/ ra,
+  owner @{HOME}/.local/share/gnunet/fs/persistence/gnunet-fs-gtk/publish/* rw,
+  
+  #Acces to files to share ? (lets create a gnunet directory in home)
+  owner @{HOME}/gnunet-fs/ r,
+
+  @{GNUNET_PREFIX}/bin/gnunet-fs-gtk mr,
+
+  @{GNUNET_PREFIX}/share/gnunet-gtk/* r,
+
+  /usr/share/glib-*/schemas/gschemas.compiled r,
+
+  #abstractions/dconf but we need write right here 
+  /run/user/*/dconf/user rw,
+ 
+  @{HOME}/.cache/thumbnails/normal/*.png r,
+
+  @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-helper-fs-publish Px,
+  
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/gnunet>
+}