r, /etc/mailcap r, /etc/mime.types r, /etc/mtab r, /etc/timezone r, /etc/wildmidi/wildmidi.cfg r, /etc/writable/timezone r, /etc/xul-ext/** r, /etc/xulrunner/** r, /proc/*/** r, /run/udev/** r, /sbin/killall5 rix, owner /tmp/** m, /tmp/.X[0-9]*-lock r, /usr/bin/basename rix, /usr/bin/dirname rix, /usr/bin/expr ix, /usr/bin/pwd rix, /usr/bin/tr rix, /usr/bin/dolphin rUx, /usr/lib/iceweasel/** rix, /usr/lib/xulrunner-*/plugin-container rix, /usr/{include,share,src}/** r, owner /var/tmp/** m, @{PROC}/@{pid}/cmdline r, owner @{PROC}/@{pid}/environ r, @{PROC}/@{pid}/mountinfo r, @{PROC}/@{pid}/net/if_inet6 r, @{PROC}/@{pid}/net/ipv6_route r, @{PROC}/@{pid}/stat r, @{PROC}/@{pid}/status r, owner @{PROC}/@{pid}/auxv r, # Digite abaixo o endereco do cache do perfil do navegador /home/*/.cache/mozilla/iceweasel/PERFILDONAVEGADOR/** rw, owner @{HOME}/ r, owner @{HOME}/.mozilla/**/extensions/** mrix,# Digite abaixo o endereco do perfil do navegador owner @{HOME}/.mozilla/iceweasel/PERFILDONAVEGADOR/** rw, owner @{HOME}/.thumbnails/*/*.png r, owner @{HOME}/.{iceweasel,mozilla}/ rw, owner @{HOME}/.{iceweasel,mozilla}/** rw, owner @{HOME}/.{iceweasel,mozilla}/**/*.{db,parentlock,sqlite}* k, owner @{HOME}/.{iceweasel,mozilla}/**/plugins/** mr, owner @{HOME}/.{iceweasel,mozilla}/plugins/** mr, # Inclua na lista abaixo as pastas para onde faz downloads ou de onde faz os uploadsowner @{HOME}/Desktop/ r, owner @{HOME}/Desktop/** rw, owner @{HOME}/Downloads/ r, owner @{HOME}/Downloads/** rw, owner @{HOME}/Public/ r, owner @{HOME}/Public/** rw,}Perfil Apparmor para o cliente de e-mail Debian Icedove 38.5.0 com cliente de agenda Iceowl, extensoes "Provider for Google Calendar", Enigmail e TorBirdynome do arquivo: usr.lib.icedove.icedove# Last Modified: Mon Feb 15 20:49:15 2016#include <tunables/global>/usr/lib/icedove/icedove { #include <abstractions/audio> #include <abstractions/base> #include <abstractions/bash> #include <abstractions/fonts> #include <abstractions/freedesktop.org> #include <abstractions/gnome> #include <abstractions/kde> #include <abstractions/totem> #include <abstractions/user-download> #include <abstractions/user-tmp> capability sys_ptrace, deny / r, deny /dev/vboxuser rw, deny /etc/fstab r, deny /etc/host.conf r, deny /etc/hosts r, deny /etc/machine-id r, deny /etc/nsswitch.conf r, deny /etc/passwd r, deny /sys/devices/system/cpu/ r, deny /sys/devices/system/cpu/present r, deny /var/lib/dbus/machine-id r, /bin/bash rix, /bin/cat rix, /bin/chmod rix, /bin/dash rix, /bin/grep rix, /bin/mknod rix, /bin/mktemp rix, /bin/ps rix, /bin/which rix, /dev/tty rw, /dev/xen/evtchn rw, /dev/xen/gntalloc rw, /dev/xen/xenbus rw, /etc/dpkg/dpkg.cfg r, /etc/icedove/pref/* r, /etc/iceweasel/pref/iceweasel.js r, /etc/iceweasel/searchplugins/** r, /etc/mailcap r, /etc/mime.types r, /etc/python*/sitecustomize.py r, /etc/xul-ext/** r, /etc/xul-ext/enigmail.js rix, /home/*/.config/dconf/user r,# Digite abaixo o endereco do perfil de sua instalacao do Icedove /home/*/PERFILDOICEDOVE/** mrwk, /run/udev/data/* r, /run/user/1000/dconf/ rwk, /run/user/1000/dconf/user rwk, /rw/config/gpg-split-domain r, /usr/bin/basename rix, /usr/bin/cut rix, /usr/bin/dpkg rix, /usr/bin/dpkg-query rix, /usr/bin/du rix, /usr/bin/gpg rix, /usr/bin/gpg-agent rix, /usr/bin/gpg-connect-agent rix, /usr/bin/gpg2 rix, /usr/bin/gpgconf rix, /usr/bin/grep rix, /usr/bin/kde4-config rix, /usr/bin/mkdir rix, /usr/bin/pinentry* rix, /usr/bin/qrexec-client-vm rix, /usr/bin/qubes-gpg-client rix, /usr/bin/qubes-gpg-client-wrapper rix, /usr/bin/qubesdb-cmd rix, /usr/bin/qvm-mru-entry rix, /usr/bin/qvm-open-in-dvm rix, /usr/bin/tail rix, /usr/bin/torbrowser Px, /usr/bin/torsocks rix, /usr/bin/update-desktop-database rix, /usr/bin/uwt rix, /usr/bin/zenity rix, /usr/lib/*-linux-gnu/** mr, /usr/lib/gnupg/* rix, /usr/lib/gnupg2/gpg2keys_hkp rix, /usr/lib/icedove/icedove mrix, /usr/lib/iceweasel/iceweasel rix, /usr/lib/pyshared/python*/** mr, /usr/lib/python*/dist-packages/** mr, /usr/lib/qubes-gpg-split/pipe-cat rix, /usr/lib/qubes/qfile-agent rix, /usr/lib/qubes/qopen-in-vm rix, /usr/lib/qubes/qvm-copy-to-vm rix, /usr/lib/qubes/qvm-copy-to-vm.* rix, /usr/local/lib/python*/dist-packages/** mr, /usr/share/applications/** rwk, /usr/share/pyshared/** mr, /var/cache/nscd/hosts r, /var/lib/dpkg/status r, /var/lib/dpkg/triggers/File r, /var/lib/dpkg/triggers/Unincorp r, @{HOME}/.Xauthority r, @{HOME}/.cache/ r, @{HOME}/.cache/** rwk, @{HOME}/.cache/icedove/ rwk, @{HOME}/.cache/icedove/** rw, @{HOME}/.config/oxygen-gtk/* rw, @{HOME}/.fontconfig/ rwk, @{HOME}/.gnupg/* rwlkcix, @{HOME}/.icedove/ rwk, @{HOME}/.icedove/** mrwk, @{HOME}/.kde/share/** rw, @{HOME}/.local/share/ r, @{HOME}/.local/share/applications/ rwk, @{HOME}/.local/share/applications/* rwk, @{HOME}/.local/share/mime/ rwk, @{HOME}/.local/share/mime/** rwk, @{HOME}/.mozilla/ rwk, @{HOME}/.mozilla/** rwk, @{HOME}/.thunderbird/ rwk, @{HOME}/.thunderbird/** mrwk, @{PROC}/ r, @{PROC}/[0-9]*/cmdline r, @{PROC}/[0-9]*/fd/ r, @{PROC}/[0-9]*/maps r, @{PROC}/[0-9]*/mountinfo r, @{PROC}/[0-9]*/mounts r, @{PROC}/[0-9]*/stat r, @{PROC}/[0-9]*/status r, @{PROC}/[0-9]*/task/*/stat r, @{PROC}/sys/kernel/pid_max r, @{PROC}/tty/drivers r, @{PROC}/uptime r, @{PROC}/xen/privcmd rw,}Perfil Apparmor para o cliente VOIP Skype 4.3.0.37nome do arquivo: usr.bin.skype#include <tunables/global>/usr/bin/skype { #include <abstractions/base> #include <abstractions/user-tmp> #include <abstractions/audio> #include <abstractions/nameservice> #include <abstractions/ssl_certs> #include <abstractions/fonts> #include <abstractions/ibus> #include <abstractions/dbus> #include <abstractions/dbus-session> #include <abstractions/X> #include <abstractions/freedesktop.org> #include <abstractions/gnome> #include <abstractions/kde> network, /usr/bin/skype mr, /opt/skype/skype pix, /opt/skype/** kmr, /usr/share/fonts/** m, @{PROC}/*/net/arp r, @{PROC}/*/cmdline r,