# Bodhi.Zazen's current privoxy profile
# Please note this is for :
# Ubuntu 9.10

#include <tunables/global>

/usr/sbin/privoxy {
  #include <abstractions/base>
  #include <abstractions/nameservice>

  capability setgid,
  capability setuid,

  #include <abstractions/private-files>
  audit deny @{HOME}/.ssh/** mrwkl,

  deny @{HOME}/.bash* rw,
  deny @{HOME}/.ssh/* rw,
  deny @{HOME}/.zshrc rw,
  deny @{PROC}/ r,
  deny @{PROC}/* r,

  /etc/privoxy/** r,
  owner /var/run/privoxy.pid rw,
  owner /var/log/privoxy/logfile rw,

 }