libextractor (967B)
1 # Last Modified: Mon Aug 31 18:30:49 2015 2 #include <tunables/global> 3 4 # vim:syntax=apparmor 5 6 7 profile libextractor { 8 #include <abstractions/base> 9 10 /dev/shm/LE-* r, 11 @{HOME}/.cache/gstreamer-1.0/registry.x86_64.bin r, 12 @{HOME}/.cache/gstreamer-1.0/registry.x86_64.bin.tmp* a, 13 @{PROC}/cmdline r, 14 @{PROC}/fd/ r, 15 /sys/devices/system/cpu/ r, 16 /usr/lib/gstreamer-1.0/gst-plugin-scanner rix, 17 # the GStreamer-based plugins (thumbnailgst, previewgst) load their 18 # decoders and encoders from here at run time 19 /usr/lib/gstreamer-1.0/*.so mr, 20 /usr/lib/@{multiarch}/gstreamer-1.0/*.so mr, 21 /usr/lib/@{multiarch}/gstreamer-1.0/gst-plugin-scanner rix, 22 # note that no network rule appears anywhere in this profile: the 23 # media plugins feed FFmpeg and GStreamer from a pipe and must never 24 # open a stream of their own 25 /usr/local/lib/libextractor/libextractor_*.so* mr, 26 /usr/local/lib/libextractor_common.so.* mr, 27 /usr/share/file/misc/magic.mgc r, 28 29 }