# Bodhi.Zazen's current jailbash profile
# Please note this is for :
# Ubuntu 9.10
# Modified from jdong's jailbash profile


#include <tunables/global>
/usr/local/bin/jailbash {
  #include <abstractions/base>
  #include <abstractions/bash>
  #include <abstractions/consoles>
  #include <abstractions/dbus>
  #include <abstractions/gnome>
  #include <abstractions/nameservice>
  #include <abstractions/python>
  #include <abstractions/ubuntu-browsers>
  #include <abstractions/wutmp>
  #include <abstractions/X>

  /dev/ptmx rw,

  / r,
  /bin/* ixr,
  /usr/bin/* ixr,
  /usr/bin/exo-open ixr,
  /usr/bin/bfilter Pxr,
  /usr/bin/empathy Pxr,
  /usr/bin/evince Pxr,
  /usr/bin/firefox-3.5 Pxr,
  /usr/lib/firefox-3.5.4/firefox.sh Pxr,
  /usr/bin/irssi Pxr,
  /usr/bin/streamtuner Pxr,
  /usr/bin/xchat Pxr,
  /etc/nsswitch.conf r,
  /etc/mtab r,
  /etc/passwd mr,
  /etc/purple/ r,
  /etc/purple/** r,
  /etc/resolv.conf r,
  /etc/group mr,
  /etc/xdg/** r,
  /home/guest/ r,
  /home/guest/** rwix,
  /lib/terminfo/** r,
  /tmp/** rw,
  /usr/bin/ r,
  /usr/bin/* ixr,
  /usr/bin/python2.6 ix,
  /usr/lib/ r,
  /usr/lib*/ r,
  /usr/lib/* mixr,
  /usr/lib*/* mixr,
  /usr/lib/libexo* mixrl,
  /usr/lib/libexo*/* mixrl,
  /usr/lib*/* mixr,
  /usr/local/bin/jailbash mr,
  /usr/share/** lr,
  /usr/share/ r,
  /usr/local/share/ r,
  /usr/local/share/** lr,
  /usr/share/command-not-found/programs.d/* kr,

  /media/ rw,
  /media/** rw,

  @{PROC}/ r,
  @{PROC}/*/cmdline r,
  @{PROC}/*/stat r,
  @{PROC}/*/status r,
  @{PROC}/filesystems r,
  @{PROC}/*/mounts r,
  @{PROC}/*/maps r,
  @{PROC}/*/fd/ r,
  @{PROC}/version r,


  /home/guest/ rw,
  /home/guest/** rwmkl,
  /home/guest/.cache/** rwk,
  /home/guest/.config/ rw,
  /home/guest/.config/** rwk,
  /home/guest/.profile rw,

}