# Bodhi.Zazen's current bfilter profile
# Please note this is for :
# Ubuntu 9.04

#include <tunables/global>

/usr/bin/bfilter-gui {
  #include <abstractions/base>
  #include <abstractions/gnome>
  #include <abstractions/nameservice>
  #include <abstractions/user-tmp>

  capability setgid,
  capability setuid,

#  deny /home/*/.bash* rw,
#  deny /home/*/.ssh/* rw,
#  deny /home/*/.zshrc rw,
#  deny @{PROC}/ r,
#  deny @{PROC}/* r,

  /etc/bfilter/ r,
  /etc/bfilter/** r,
  @{PROC}/*/maps r,
  @{PROC}/*/mounts r,
  /sys/devices/system/cpu/ r,
  /usr/bin/bfilter-gui r,
  /usr/lib/pango/** r,
  /usr/lib/** r,
  /usr/lib/pango/1.6.0/modules/pango-basic-fc.so rm,
  /usr/share/** r,
  /var/run/bfilter.pid rwk,
  /var/run/bfilter.pid rw,
  /home/*/.Xauthority r,
  /home/*/.bfilter/ rw,
  /home/*/.bfilter/** rw,
  /home/*/.icons/ r ,
  /home/*/.icons/** r,
}