D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
etc
/
apparmor.d
/
abstractions
/
Filename :
transmission-common
back
Copy
# vim:ft=apparmor # LOGPROF-SUGGEST: no # Author: Daniel Richard G. <skunk@iSKUNK.ORG> abi <abi/5.0>, include <abstractions/base> include <abstractions/freedesktop.org> include <abstractions/nameservice> include <abstractions/openssl> network inet dgram, network inet6 dgram, network netlink dgram, network inet stream, network inet6 stream, dbus (send) bus=session path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=ListActivatableNames peer=(name=org.freedesktop.DBus, label=unconfined), dbus (bind) bus=session name=com.transmissionbt.{t,T}ransmission, dbus (bind) bus=session name=com.transmissionbt.transmission_*, dbus (receive) bus=session path=/ca/desrt/dconf/Writer/user interface=ca.desrt.dconf.Writer member=Notify, dbus (send) bus=session path=/ca/desrt/dconf/Writer/user interface=ca.desrt.dconf.Writer member=Change peer=(name=ca.desrt.dconf), dbus (receive) bus=accessibility path=/org/a11y/atspi/accessible/root interface=org.freedesktop.DBus.Properties member=Set, dbus (send) bus=accessibility path=/org/a11y/atspi/accessible/root interface=org.a11y.atspi.Socket member=Embed peer=(name=org.a11y.atspi.Registry), dbus (send) bus=accessibility path=/org/a11y/atspi/registry interface=org.a11y.atspi.Registry member=GetRegisteredEvents peer=(name=org.a11y.atspi.Registry), dbus (send) bus=accessibility path=/org/a11y/atspi/registry/deviceeventcontroller interface=org.a11y.atspi.DeviceEventController member={GetDeviceEventListeners,GetKeystrokeListeners} peer=(name=org.a11y.atspi.Registry), dbus (send) bus={accessibility,session} path=/org/freedesktop/DBus interface=org.freedesktop.DBus member={AddMatch,GetNameOwner,Hello,ReleaseName,RemoveMatch,RequestName,StartServiceByName} peer=(name=org.freedesktop.DBus), dbus (send) bus=session interface=org.freedesktop.DBus.Introspectable path=/StatusNotifierWatcher member=Introspect peer=(name=org.kde.StatusNotifierWatcher), dbus (send) bus=session interface=org.freedesktop.DBus.Properties path=/StatusNotifierWatcher member=Get peer=(name=org.kde.StatusNotifierWatcher), dbus (send) bus=session interface=org.freedesktop.DBus.Properties path=/org/a11y/bus member=Get peer=(name=org.a11y.Bus), dbus (send) bus=system interface=org.freedesktop.DBus.Properties path=/org/freedesktop/hostname1 member=GetAll, dbus (send) bus=session interface=org.freedesktop.Notifications path=/org/freedesktop/Notifications member={GetCapabilities,Notify}, dbus (send) bus=session path=/org/gtk/Private/RemoteVolumeMonitor interface=org.gtk.Private.RemoteVolumeMonitor member={IsSupported,List}, dbus (send) bus=session path=/org/gtk/vfs/Daemon interface=org.gtk.vfs.Daemon member={GetConnection,ListMonitorImplementations}, dbus (send) bus=session path=/org/gtk/vfs/mount/[1-9]* interface=org.gtk.vfs.Mount member={CreateFileMonitor,Enumerate,QueryInfo}, dbus (receive) bus=session path=/org/gtk/vfs/mounttracker interface=org.gtk.vfs.MountTracker member=Mounted, dbus (send) bus=session path=/org/gtk/vfs/mounttracker interface=org.gtk.vfs.MountTracker member={ListMountableInfo,ListMounts2,LookupMount}, dbus (send) bus=session path=/org/freedesktop/portal/desktop interface=org.freedesktop.DBus.Properties member=Get peer=(name=org.freedesktop.portal.Desktop), dbus (send) bus=session interface=org.freedesktop.portal.Settings member=ReadAll, dbus (send) bus=session interface=org.freedesktop.portal.Inhibit member=CreateMonitor, dbus (send) bus=session interface=org.a11y.Bus member=GetAddress peer=(name=org.a11y.Bus), @{PROC}/sys/kernel/random/uuid r, owner @{PROC}/@{pid}/mountinfo r, owner @{PROC}/@{pid}/mounts r, owner @{run}/user/@{uid}/gvfsd/socket-* rw, @{etc_ro}/fstab r, @{system_share_dirs}/hwdata/** r, @{system_share_dirs}/lxqt/** r, owner /tmp/tr_session_id_* rwk, # allow a top-level directory listing @{HOME}/ r, owner @{HOME}/.cache/transmission/ w, owner @{HOME}/.cache/transmission/** rw, owner @{HOME}/.config/transmission/ w, owner @{HOME}/.config/transmission/** rw, owner @{HOME}/.config/lxqt/lxqt.conf r, owner @{HOME}/@{XDG_DOWNLOAD_DIR}/ r, owner @{HOME}/@{XDG_DOWNLOAD_DIR}/** rw, # gst-plugin-scanner related accesses /usr/lib/@{multiarch}/gstreamer1.0/gstreamer-1.0/gst-plugin-scanner mrix, owner @{HOME}/.cache/gstreamer-1.0/{,*} rw, # gst-plugin-scanner tries to probe various things including display devices # etc so allow those that are harmless but deny the rest /dev/{,urandom,null} r, /sys/ r, /sys/{bus,class}/ r, /sys/class/drm/ r, deny /dev/dri/{,**} r, /dev/pts/[0-9]* rw, # exclude these for now deny /usr/share/thumbnailers/ r, deny @{HOME}/.local/share/gvfs-metadata/** r, deny @{HOME}/.config/lxqt/** rw, include if exists <abstractions/transmission-common.d>