/usr/share/apparmor/easyprof/templates/sandbox-x is in apparmor-easyprof 2.9.0-3.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 | #
# Example usage for a program named 'foo' which is installed in /opt/foo
# $ aa-easyprof --template=sandbox \
# --template-var="@{APPNAME}=foo" \
# --policy-groups=opt-application,user-application \
# /opt/foo/bin/foo
#
###ENDUSAGE###
# vim:syntax=apparmor
# AppArmor policy for ###NAME###
#include <tunables/global>
###VAR###
###PROFILEATTACH### {
#include <abstractions/base>
#include <abstractions/gnome>
#include <abstractions/kde>
#include <abstractions/X>
audit deny @{HOME}/.Xauthority mrwlk,
/etc/passwd r,
/ r,
/**/ r,
/usr/** r,
/var/lib/dbus/machine-id r,
owner @{PROC}/[0-9]*/auxv r,
owner @{PROC}/[0-9]*/fd/ r,
owner @{PROC}/[0-9]*/environ r,
owner @{PROC}/[0-9]*/mounts r,
owner @{PROC}/[0-9]*/smaps r,
owner @{PROC}/[0-9]*/statm r,
owner @{PROC}/[0-9]*/task/[0-9]*/stat r,
###ABSTRACTIONS###
###POLICYGROUPS###
###READS###
###WRITES###
}
|