37 lines
895 B
Plaintext
37 lines
895 B
Plaintext
|
#include <tunables/global>
|
||
|
|
|
||
|
|
/opt/sublime_text_3/sublime_text {
|
||
|
|
#include <abstractions/base>
|
||
|
|
#include <abstractions/X>
|
||
|
|
#include <abstractions/ibus>
|
||
|
|
#include <abstractions/dbus>
|
||
|
|
#include <abstractions/dbus-session>
|
||
|
|
#include <abstractions/dbus-accessibility>
|
||
|
|
#include <abstractions/dbus-session-strict>
|
||
|
|
#include <abstractions/gnome>
|
||
|
|
|
||
|
|
/usr/share/mate/applications/** r,
|
||
|
|
/usr/bin/caja rwix,
|
||
|
|
/usr/share/glib-*/schemas/** r,
|
||
|
|
/dev/null r,
|
||
|
|
|
||
|
|
/{dev,run}/{,shm/}** rwmkl,
|
||
|
|
/opt/sublime_text_3/ rwixmkl,
|
||
|
|
/opt/sublime_text_3/** rwixmkl,
|
||
|
|
|
||
|
|
owner @{HOME}/.config/sublime-text-3/ rwmkl,
|
||
|
|
owner @{HOME}/.config/sublime-text-3/** rwmkl,
|
||
|
|
owner @{HOME}/ rwmkl,
|
||
|
|
owner @{HOME}/** rwmkl,
|
||
|
|
|
||
|
|
deny network inet,
|
||
|
|
deny network inet6,
|
||
|
|
deny network raw,
|
||
|
|
}
|
||
|
|
|
||
|
|
/opt/sublime_text_3/plugin_host {
|
||
|
|
#include <abstractions/base>
|
||
|
|
deny network inet,
|
||
|
|
deny network inet6,
|
||
|
|
deny network raw,
|
||
|
|
}
|