Name	Size	Mode	Actions
apparmor_api/	-	0755	rm
ubuntu-browsers.d/	-	0755	rm
apache2-common	1119	0644	editdlrm
aspell	412	0644	editdlrm
audio	2063	0644	editdlrm
authentication	2194	0644	editdlrm
base	7093	0644	editdlrm
bash	1614	0644	editdlrm
consoles	903	0644	editdlrm
crypto	992	0644	editdlrm
cups-client	820	0644	editdlrm
dbus	694	0644	editdlrm
dbus-accessibility	745	0644	editdlrm
dbus-accessibility-strict	760	0644	editdlrm
dbus-network-manager-strict	1403	0644	editdlrm
dbus-session	747	0644	editdlrm
dbus-session-strict	1261	0644	editdlrm
dbus-strict	781	0644	editdlrm
dconf	344	0644	editdlrm
dovecot-common	675	0644	editdlrm
dri-common	542	0644	editdlrm
dri-enumerate	393	0644	editdlrm
enchant	2220	0644	editdlrm
exo-open	1921	0644	editdlrm
fcitx	558	0644	editdlrm
fcitx-strict	821	0644	editdlrm
fonts	2280	0644	editdlrm
freedesktop.org	1684	0644	editdlrm
gio-open	1546	0644	editdlrm
gnome	3815	0644	editdlrm
gnupg	459	0644	editdlrm
groff	1908	0644	editdlrm
gtk	1622	0644	editdlrm
gvfs-open	1180	0644	editdlrm
hosts_access	511	0644	editdlrm
ibus	992	0644	editdlrm
kde	3329	0644	editdlrm
kde-globals-write	413	0644	editdlrm
kde-icon-cache-write	256	0644	editdlrm
kde-language-write	575	0644	editdlrm
kde-open5	3666	0644	editdlrm
kerberosclient	1476	0644	editdlrm
ldapclient	856	0644	editdlrm
libpam-systemd	770	0644	editdlrm
likewise	595	0644	editdlrm
mdns	554	0644	editdlrm
mesa	1239	0644	editdlrm
mir	694	0644	editdlrm
mozc	573	0644	editdlrm
mysql	739	0644	editdlrm
nameservice	4563	0644	editdlrm
nis	625	0644	editdlrm
nss-systemd	1248	0644	editdlrm
nvidia	1113	0644	editdlrm
opencl	370	0644	editdlrm
opencl-common	516	0644	editdlrm
opencl-intel	673	0644	editdlrm
opencl-mesa	636	0644	editdlrm
opencl-nvidia	896	0644	editdlrm
opencl-pocl	2916	0644	editdlrm
openssl	642	0644	editdlrm
orbit2	197	0644	editdlrm
p11-kit	999	0644	editdlrm
perl	974	0644	editdlrm
php	1128	0644	editdlrm
php-worker	558	0644	editdlrm
php5	208	0644	editdlrm
postfix-common	1356	0644	editdlrm
private-files	1660	0644	editdlrm
private-files-strict	1212	0644	editdlrm
python	2293	0644	editdlrm
qt5	863	0644	editdlrm
qt5-compose-cache-write	399	0644	editdlrm
qt5-settings-write	514	0644	editdlrm
recent-documents-write	466	0644	editdlrm
ruby	1008	0644	editdlrm
samba	1299	0644	editdlrm
samba-rpcd	817	0644	editdlrm
smbpass	581	0644	editdlrm
snap_browsers	1579	0644	editdlrm
ssl_certs	1522	0644	editdlrm
ssl_keys	938	0644	editdlrm
svn-repositories	1759	0644	editdlrm
transmission-common	4379	0644	editdlrm
trash	3621	0644	editdlrm
ubuntu-bittorrent-clients	821	0644	editdlrm
ubuntu-browsers	1621	0644	editdlrm
ubuntu-console-browsers	731	0644	editdlrm
ubuntu-console-email	718	0644	editdlrm
ubuntu-email	1087	0644	editdlrm
ubuntu-feed-readers	456	0644	editdlrm
ubuntu-gnome-terminal	300	0644	editdlrm
ubuntu-helpers	3909	0644	editdlrm
ubuntu-konsole	453	0644	editdlrm
ubuntu-media-players	2352	0644	editdlrm
ubuntu-unity7-base	2558	0644	editdlrm
ubuntu-unity7-launcher	311	0644	editdlrm
ubuntu-unity7-messaging	313	0644	editdlrm
ubuntu-xterm	346	0644	editdlrm
user-download	987	0644	editdlrm
user-mail	944	0644	editdlrm
user-manpages	1000	0644	editdlrm
user-tmp	760	0644	editdlrm
user-write	972	0644	editdlrm
video	596	0644	editdlrm
vulkan	1133	0644	editdlrm
wayland	713	0644	editdlrm
web-data	811	0644	editdlrm
winbind	882	0644	editdlrm
wutmp	788	0644	editdlrm
X	1989	0644	editdlrm
xad	984	0644	editdlrm
xdg-desktop	782	0644	editdlrm
xdg-open	2286	0644	editdlrm

# vim:syntax=apparmor # privacy-violations contains rules for common files that you want to # explicitly deny access abi , # privacy violations (don't audit files under $HOME otherwise get a # lot of false positives when reading contents of directories) deny @{HOME}/.*history mrwkl, deny @{HOME}/.fetchmail* mrwkl, deny @{HOME}/.mutt** mrwkl, deny @{HOME}/.viminfo* mrwkl, deny @{HOME}/.*~ mrwkl, deny @{HOME}/.*.swp mrwkl, deny @{HOME}/.*~1~ mrwkl, deny @{HOME}/.*.bak mrwkl, # special attention to (potentially) executable files audit deny @{HOME}/bin/{,**} wl, audit deny @{HOME}/.config/ w, audit deny @{HOME}/.config/autostart/{,**} wl, audit deny @{HOME}/.config/upstart/{,**} wl, audit deny @{HOME}/.init/{,**} wl, audit deny @{HOME}/.kde{,4}/ w, audit deny @{HOME}/.kde{,4}/Autostart/{,**} wl, audit deny @{HOME}/.kde{,4}/env/{,**} wl, audit deny @{HOME}/.local/{,share/} w, audit deny @{HOME}/.local/share/thumbnailers/{,**} wl, audit deny @{HOME}/.pki/ w, audit deny @{HOME}/.pki/nssdb/{,*.so{,.[0-9]*}} wl, # don't allow reading/updating of run control files deny @{HOME}/.*rc mrk, audit deny @{HOME}/.*rc wl, # bash deny @{HOME}/.bash* mrk, audit deny @{HOME}/.bash* wl, deny @{HOME}/.inputrc mrk, audit deny @{HOME}/.inputrc wl, # sh/dash/csh/tcsh/pdksh/zsh deny @{HOME}/.{,z}profile* mrk, audit deny @{HOME}/.{,z}profile* wl, deny @{HOME}/.{,z}log{in,out} mrk, audit deny @{HOME}/.{,z}log{in,out} wl, deny @{HOME}/.zshenv mrk, audit deny @{HOME}/.zshenv wl, # Include additions to the abstraction include if exists