# Last Modified: Sun Aug 17 18:19:16 2014
#include <tunables/global>

/usr/lib64/firefox/plugin-container {
  #include <abstractions/audio>
  #include <abstractions/base>
  #include <abstractions/bash>
  #include <abstractions/fonts>

  network inet dgram,
  network inet stream,
  network inet6 dgram,

  /bin/bash rix,
  /bin/ps Cx,
  /dev/ r,
  /dev/tty rw,
  /etc/gai.conf r,
  /etc/gtk-2.0/gtkrc r,
  /etc/kde4/share/config/kdeglobals r,
  /etc/kde4/share/config/oxygenrc r,
  /etc/kde4rc r,
  /etc/machine-id r,
  /etc/mailcap r,
  /etc/mime.types r,
  /etc/passwd r,
  /home/*/.Xauthority r,
  /home/*/.adobe/Flash_Player/AssetCache/ r,
  /home/*/.config/fontconfig/fonts.conf r,
  /home/*/.config/oxygen-gtk/argb-apps.conf rw,
  /home/*/.fonts/ r,
  /home/*/.fonts/*/ r,
  /home/*/.gtkrc-2.0 r,
  /home/*/.icons/tuxresize_cb/cursors/* r,
  /home/*/.kde4/share/config/gtkrc-2.0 r,
  /home/*/.kde4/share/config/kdeglobals r,
  /home/*/.kde4/share/config/oxygenrc r,
  /home/*/.macromedia/Flash_Player/#SharedObjects/ r,
  /home/*/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/*/ w,
  /home/*/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/*/settings.* rw,
  /home/*/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sol rw,
  /home/*/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/settings.sxx rw,
  /home/*/.mailcap r,
  /home/*/.mime.types r,
  /home/*/.mozilla/firefox/*/cert8.db r,
  /home/*/.mozilla/firefox/*/key3.db r,
  /home/*/.mozilla/firefox/*/prefs.js r,
  /home/*/.mozilla/firefox/profiles.ini r,
  /home/*/.mozilla/firefox/xp6np1kb.default/secmod.db r,
  /home/*/cache/fontconfig/* r,
  /home/*/.adobe/Flash_Player/cert8.db rw,
  /home/*/.adobe/Flash_Player/key3.db rw,
  /home/*/.cache/fontconfig/*.cache-4 r,
  /home/*/.config/ibus/bus/d2f223773c984c89331a62fa493ee8fd-unix-0 r,
  /home/*/.config/user-dirs.dirs r,
  /home/*/.kde4/share/config/kioslaverc r,
  /home/*/.macromedia/Flash_Player/macromedia.com/support/flashplayer/sys/*/settings.sol w,
  /home/*/.mozilla/firefox/xp6np1kb.default/adblockplus/elemhide.css r,
  /tmp/ r,
  /tmp/Flash* rw,
  /opt/kde3/share/fonts/ r,
  /proc/*/cmdline r,
  /proc/*/fd/ r,
  /proc/*/status r,
  /proc/meminfo r,
  /run/nscd/db* r,
  /sys/devices/system/cpu/present r,
  /usr/X11R6/lib64/libGL.so.* mr,
  /usr/bin/grep rix,
  /usr/bin/kde4-config rCx,
  /usr/lib64/firefox/plugin-container mr,
  /usr/lib64/gstreamer-0.10/gst-plugin-scanner Cx,
  /usr/lib64/gtk-2.0/2.10.0/immodules/im-ibus.so mr,
  /usr/lib64/pango/1.8.0/modules/pango-basic-fc.so mr,
  /usr/share/cantarell-fonts/conf.avail/31-cantarell.conf r,
  /usr/share/fonts-config/conf.avail/*.conf r,
  /usr/share/ghostscript/fonts/ r,
  /usr/share/icons/*/index.theme r,
  /usr/share/icons/oxygen/**.png r,
  /usr/share/icu/51.2/icudt51l.dat r,
  /usr/share/themes/oxygen-gtk/gtk-2.0/argb-apps.conf r,
  /usr/share/themes/oxygen-gtk/gtk-2.0/gtkrc r,
  /usr/share/themes/oxygen-gtk/gtk-2.0/icons4 r,
  /usr/share/themes/oxygen-gtk/gtk-2.0/kdeglobals r,
  /usr/share/themes/oxygen-gtk/gtk-2.0/oxygenrc r,
  /var/cache/fontconfig/*.cache-4 r,
  /var/run/nscd/db* r,
  /var/run/nscd/group r,
  /var/tmp/ r,


  profile /bin/ps {
    #include <abstractions/base>

    capability sys_ptrace,

    /bin/ps mr,
    /dev/tty r,
    /proc/ r,
    /proc/*/cmdline r,
    /proc/*/stat r,
    /proc/*/status r,
    /proc/meminfo r,
    /proc/sys/kernel/pid_max r,
    /proc/tty/drivers r,
    /proc/uptime r,

  }

  profile /usr/bin/kde4-config {
    #include <abstractions/base>
    #include <abstractions/kde>

    /etc/kde4/share/config/kdeglobals r,
    /home/*/.kde4/share/config/kdeglobals r,
    /usr/bin/kde4-config mr,
    /usr/share/icu/51.2/icudt51l.dat r,
    /usr/share/icu/52.1/icudt52l.dat r,

  }

  profile /usr/lib64/gstreamer-0.10/gst-plugin-scanner {
    #include <abstractions/base>

    /usr/lib64/gstreamer-0.10/gst-plugin-scanner mr,

  }
}