# Bodhi.Zazen's current firefox profile
# Please note this for :
# Firefox 3.5.3
# Ubuntu 9.10

#include <tunables/global>
/usr/lib/firefox-3.5.3/firefox.sh {
  #include <abstractions/audio>
  #include <abstractions/base>
  #include <abstractions/bash>
  #include <abstractions/consoles>
  #include <abstractions/dbus>
  #include <abstractions/fonts>
  #include <abstractions/gnome>
  #include <abstractions/nameservice>

  deny @{HOME}/.bash* rw,
  deny @{HOME}/Private/ r,
  deny @{HOME}/.Private/ r,
  deny @{HOME}/.ssh/* rw,
  deny @{HOME}/.zshrc rw,
  deny @{PROC}/ r,
  deny @{PROC}/* r,

  /bin/dash ixr,
  /bin/grep rix,
  /bin/ps rix,
  /bin/readlink rix,
  /bin/sed rix,
  /bin/true rix,
  /bin/uname rix,
  /bin/which rix,
  /dev/shm/ r,
  /dev/shm/* rw,
  /etc/ r,
  /etc/wildmidi/* r,
  /etc/firefox-3.5/** r,
  /etc/gnome/defaults.list r,
  /etc/gre.d/ r,
  /etc/gre.d/* r,
  /etc/mailcap r,
  /etc/mime.types r,
  /etc/mplayer/* r,
  /etc/openoffice/* r,
  /etc/pulse/* r,
  /etc/sound/events/* r,
  /etc/xulrunner-1.9.1/system-greprefs.js r,
  /tmp/** kmrwl,
  /usr/bin/basename rix,
  /usr/bin/dirname rix,
  /usr/bin/evince rix,
  /usr/bin/gnome-app-install rix,
  /usr/bin/gnome-mplayer rix,
  /usr/bin/lpr rix,
  /usr/bin/mplayer rix,
  /usr/bin/nautilus ixr,
  /usr/bin/ooffice ixr,
  /usr/bin/pulseaudio ixr,
  /usr/bin/setarch rix,
  /usr/bin/stat ixr,
  /usr/lib/ r,
  /usr/lib/** mr,
  /usr/lib/firefox-3.5.3/firefox ixr,
  /usr/lib/firefox-3.5.3/firefox.sh ixr,
  /usr/lib/firefox-3.5.3/update.test rw,
  /usr/lib/firefox-addons/** rw,
  /usr/lib/mozilla/extensions/** rw,
  /usr/lib/openoffice/** krix,
  /usr/lib/pulseaudio/pulse/gconf-helper ixr,
  /usr/lib/nspluginwrapper/i386/linux/npviewer rix,
  /usr/lib/nspluginwrapper/i386/linux/npviewer.bin rix,
  /usr/lib/realplay-10.0.9/realplay rix,
  /usr/lib/realplay-10.0.9/realplay.bin rix,
  /usr/lib/totem/gstreamer/totem-plugin-viewer ixr,
  /usr/lib32/** mr,
  /usr/local/share/** r,
  /usr/share/** mr,
  /usr/share/mozilla/** rw,
  /var/lib/flashplugin-nonfree/* mr,
  /var/lib/flashplugin-installer/* mr,
  @{PROC}/*/fd/ r,
  @{PROC}/*/maps r,
  @{PROC}/*/mounts r,
  @{PROC}/*/stat r,
  owner @{HOME}/ r,
  owner @{HOME}/.adobe/** rw,
  owner @{HOME}/.config/** rw,
  owner @{HOME}/..esd_auth krw,
  owner @{HOME}/.fontconfig/* mr,
  owner @{HOME}/.icons/ r,
  owner @{HOME}/.local/share/** r,
  owner @{HOME}/.macromedia/** rw,
  owner @{HOME}/.mailcap rw,
  owner @{HOME}/.mozilla/ rw,
  owner @{HOME}/.mozilla/** krw,
  owner @{HOME}/.mozilla/firefox/*/extensions/moonlight@novell.com/plugins/libmoonloader.so kmrw,
  owner @{HOME}/.mozilla/firefox/*/extensions/moonlight@novell.com/plugins/moonlight/* kmrw,
  owner @{HOME}/.mozilla/plugins/moonlight/silverlight-media-pack-linux-x64-5-*.so kmrw,
  owner @{HOME}/.openoffice.org2/** krw,
  owner @{HOME}/.pulse/** rw,
  owner @{HOME}/.pulse-cookie krw,
  owner @{HOME}/.realplayerrc rw,
  owner @{HOME}/.recently-used** krw,
  owner @{HOME}/{Desktop,Downloads}/ rw,
  owner @{HOME}/{Desktop,Downloads}/* rw,

}