@{PROC}/*/auxv r, @{PROC}/sys/kernel/ostype r, @{PROC}/sys/kernel/osrelease r, /usr/bin/xdg-open rUxmlk, /dev/ r, /dev/tty rw, /dev/snd/* mrw, /{dev,run}/shm/ r, /{dev,run}/shm/pulse-shm-* mrw, /etc/pulse/client.conf r, /dev/pts/* rw, /dev/video* mrw, @{HOME}/.cache/fontconfig/** lkmrw, @{HOME}/Downloads/* krw, @{HOME}/Downloads/ krw, /etc/xdg/Trolltech.conf rk, @{HOME}/.config/Trolltech.conf* rwk, /etc/xdg/sni-qt.conf r, /usr/share/locale-langpack/* mr, /usr/share/glib-2.0/schemas/gschemas.compiled rm, /usr/share/nvidia-331/** rm, /sys/devices/system/cpu/ r, /sys/devices/system/cpu/cpu0/cpufreq/* r, @{HOME}/.Skype/ krw, @{HOME}/.Skype/** krw, @{HOME}/.config/Skype/ krw, @{HOME}/.config/Skype/** krw, /usr/share/skype/** kmr, /usr/share/skype/sounds/*.wav kr, /etc/passwd mr, /usr/share/icons/** kr, /sys/class/power_supply/ r, @{PROC}/[0-9]*/status r, @{PROC}/[0-9]*/net/** r, @{PROC}/[0-9]*/task/ r, @{PROC}/[0-9]*/task/** r, /usr/bin/pavucontrol rmUx, deny @{HOME}/.mozilla/ r, audit deny @{PROC}/[0-9]*/fd/ r, audit deny /var/cache/fontconfig/ w, deny /sys/devices/** r, audit deny /etc/xdg/sni-qt.conf k,} Perfil Apparmor para o cliente de armazenamento em nuvem Owncloud 2.1.1nome do arquivo: usr.bin.owncloud# Last Modified: Thu Feb 11 12:27:45 2016#include <tunables/global>/usr/bin/owncloud { #include <abstractions/base> #include <abstractions/kde> #include <abstractions/ssl_certs> #include <abstractions/totem> #include <abstractions/ubuntu-browsers.d/plugins-common> /etc/ownCloud/* r, /home/*/.Xauthority r, /home/*/.config/Trolltech.conf rk, /home/*/.config/fontconfig/* r, /home/*/.fontconfig/* r, /home/*/.kde/share/config/* r, /home/*/.kde/share/config/kdeglobals rk, /home/*/.local/share/data/ownCloud/* rwk,# Digite abaixo o(s) endereco(s) da(s) pasta(s) compartilhadas# atraves do Owncloud /home/*/PASTASCOMPARTILHADAS rwk, /proc/*/statm r, /run/user/1000/ownCloud/socket w, /tmp/* rwk, /usr/bin/lsb_release Ux, /usr/bin/owncloud mrix, /usr/share/icons/** rk, /var/cache/nscd/hosts r, /var/tmp/** rwlk,}Perfil Apparmor para o cliente de FTP Filezilla 3.9.0.5nome do arquivo: usr.bin.filezilla# Last Modified: Tue Feb 9 13:35:14 2016#include <tunables/global>/usr/bin/filezilla { #include <abstractions/base> #include <abstractions/totem> #include <abstractions/ubuntu-browsers.d/plugins-common> deny / r, deny /etc/phpmyadmin/phpmyadmin.desktop r, /home/*/.Xauthority r, /home/*/.config/fontconfig/* r, /home/*/.filezilla/* rwk, /home/*/.fontconfig/* r, /home/*/.kde/share/config/gtkrc-2.0 r, /home/*/.local/share/applications/* r, /home/*/.local/share/mime/* r, /home/*/.putty/randomseed r, /home/*/.putty/sshhostkeys r, #Digite abaixo os enderecos das pastas que usa para upload/download. Por exemplo: /home/*/Desktop/** rw, /home/*/Downloads/** rw, /tmp/** rwlk, /usr/bin/filezilla mr, /usr/bin/fzsftp rPx, /usr/bin/kate Px, /usr/bin/phatch Px, /var/cache/nscd/hosts r, /var/tmp/** rwlk,} Perfil Apparmor para fzsftp (use junto com o perfil filezilla)nome do arquivo: usr.bin.fzsftp# Last Modified: Tue Feb 9 13:35:14 2016#include <tunables/global>/usr/bin/fzsftp { #include <abstractions/base> /home/*/.putty/randomseed r, /home/*/.putty/sshhostkeys r, /usr/bin/fzsftp mr, /var/cache/nscd/hosts r,# Digite abaixo os enderecos das pastas que usa para upload/download. Por exemplo: /home/*/Desktop/** rw, /home/*/Downloads/** rw, /tmp/** rwlk, /var/tmp/** rwlk, } Perfil Apparmor para visualizador de imagens phatch 0.2.7 (use junto com o perfil filezilla)nome do arquivo: usr.bin.phatch# Last Modified: Tue Feb 9 13:35:15 2016#include <tunables/global>/usr/bin/phatch { #include <abstractions/base> #include <abstractions/kde> #include <abstractions/python> #include <abstractions/totem> #include <abstractions/ubuntu-browsers.d/plugins-common> /home/*/.Xauthority r, /home/*/.config/fontconfig/* r, /home/*/.config/user-dirs.dirs r, /home/*/.fontconfig/* r, /home/*/.kde/share/config/gtkrc-2.0 r, /home/*/.thumbnails/** w, /proc/*/mounts r, /proc/filesystems r, /proc/meminfo r, /tmp/** rwlk, /usr/bin/phatch r, /usr/bin/python2.7 rix,}Perfil Apparmor para cliente bittorrent Transmission-qt 2.84nome do arquivo: usr.bin.transmission-qt# Last Modified: Mon Jul 28 18:59:05 2014#include <tunables/global>/usr/bin/transmission-qt { #include <abstractions/base> #include <abstractions/kde> #include <abstractions/gnome> #include <abstractions/user-download>/dev/dri/card0 rw,/etc/drirc r,/etc/fonts/** r,/etc/gai.conf r,/etc/host.conf r,/etc/hosts r,/etc/resolv.conf r,/etc/ssl/certs/ r,/etc/ssl/openssl.cnf r,/etc/udev/udev.conf r,/home/*/.Xauthority r,/home/*/.cache/transmission/** rw,/home/*/.config/fontconfig/fonts.conf r,/home/*/.config/transmission/** rw,/home/*/.config/user-dirs.dirs r,/home/*/.fontconfig/** r,/home/*/.fonts/** r,/home/*/.kde/share/config/kdeglobals rk,#Digite abaixo a(s) pasta(s) onde voce deseja salvar os arquivos baixados/home/*/PASTAONDESALVOARQUIVOS/** rw,/proc/** r,/run/udev/data/* r,/sys/devices/** r,/usr/lib/x86_64-linux-gnu/dri/i965_dri.so mr,/usr/local/share/fonts/** r,/usr/share/fontconfig/conf.avail/** r,/usr/share/fonts/** r,/usr/share/icons/hicolor/* rk,/usr/share/icons/** rk,/usr/share/javascript/mathjax/fonts/** r,/usr/share/poppler/cMap/*/ r,/usr/share/qt5/translations/qt_pt.qm r,/var/cache/fontconfig/** r,/var/cache/nscd/hosts r,/var/cache/nscd/passwd r,}