Merge lp:~elmo/apparmor-profiles/sflphone into lp:apparmor-profiles

[James Troup]

Add a profile for sflphone (GNOME client).

[Jamie Strandboge (jdstrand)]

On 01/15/2014 06:46 PM, James Troup wrote:
> James Troup has proposed merging lp:~elmo/apparmor-profiles/sflphone into lp:apparmor-profiles.
>
> Requested reviews:
> AppArmor Developers (apparmor-dev)
>
> For more details, see:
> https://code.launchpad.net/~elmo/apparmor-profiles/sflphone/+merge/201870
>
> Add a profile for sflphone (GNOME client).
>
ACK. Note that there is an ibus abvstraction, but it grants write access which
might not be what you want.

Merged

--
Jamie Strandboge http://www.ubuntu.com/

=== added file 'ubuntu/13.10/usr.bin.sflphone-client-gnome'
--- ubuntu/13.10/usr.bin.sflphone-client-gnome	1970-01-01 00:00:00 +0000
+++ ubuntu/13.10/usr.bin.sflphone-client-gnome	2014-01-16 00:48:26 +0000
@@ -0,0 +1,33 @@
+# Last Modified: Thu Jan 16 00:15:04 2014
+# Author: James Troup <[e-mail]>
+
+# This profile currently makes no provision for two features of
+# sflphone:
+#   1) recording
+#   2) command execution via hooks
+
+#include <tunables/global>
+
+/usr/bin/sflphone-client-gnome {
+  #include <abstractions/X>
+  #include <abstractions/base>
+  #include <abstractions/dbus-session>
+  #include <abstractions/fonts>
+  #include <abstractions/freedesktop.org>
+  #include <abstractions/gnome>
+
+  network inet dgram,
+
+  owner @{HOME}/.config/gtk-3.0/bookmarks r,
+  owner @{HOME}/.config/ibus/bus/* r,
+
+  owner @{HOME}/.config/dconf/user r,
+  owner /{,var/}run/user/*/dconf/          w,
+  owner /{,var/}run/user/*/dconf/user      rw,
+
+  /usr/share/glib-2.0/schemas/gschemas.compiled r,
+  /usr/share/javascript/mathjax/fonts/** r,
+
+  /usr/bin/sflphone-client-gnome mr,
+  /usr/share/sflphone/** r,
+}