/etc/apparmor.d/lightdm-guest-session is in lightdm 1.26.0-0ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 | # vim:syntax=apparmor
# Profile for restricting lightdm guest session
#include <tunables/global>
/usr/lib/lightdm/lightdm-guest-session {
# Most applications are confined via the main abstraction
#include <abstractions/lightdm>
# chromium-browser needs special confinement due to its sandboxing
#include <abstractions/lightdm_chromium-browser>
# fcitx and friends needs special treatment due to C/S design
/usr/bin/fcitx ix,
/tmp/fcitx-socket-* rwl,
/dev/shm/* rwl,
/usr/bin/fcitx-qimpanel ix,
/usr/bin/sogou-qimpanel-watchdog ix,
/usr/bin/sogou-sys-notify ix,
/tmp/sogou-qimpanel:* rwl,
# Allow ibus
unix (bind, listen) type=stream addr="@tmp/ibus/*",
# mozc_server needs special treatment due to C/S design
unix (bind, listen) type=stream addr="@tmp/.mozc.*",
}
|