# jgoguen's current Epiphany Browser profile
# Please note, this is for:
# Ubuntu 9.04 "Jaunty"

#include <tunables/global>
/usr/bin/epiphany {
	#include <abstractions/audio>
	#include <abstractions/base>
	#include <abstractions/bash>
	#include <abstractions/consoles>
	#include <abstractions/dbus>
	#include <abstractions/fonts>
	#include <abstractions/gnome>
	#include <abstractions/nameservice>
	#include <abstractions/user-tmp>

	deny @{HOME}/.bash* rw,
	deny @{HOME}/.cshrc rw,
	deny @{HOME}/.profile rw,
	deny @{HOME}/.ssh/* rw,
	deny @{HOME}/.zshrc rw,

	owner @{HOME}/ r,
	owner @{HOME}/.adobe/** rw,
	owner @{HOME}/.asoundrc.asoundconf r,
	owner @{HOME}/.config/** rwk,
	owner @{HOME}/.gconf/ rw,
	owner @{HOME}/.gconf/** rw,
	owner @{HOME}/.gnash/ rw,
	owner @{HOME}/.gnash/** rw,
	owner @{HOME}/.gnashrc rw,
	owner @{HOME}/.gnashpluginrc rw,
	owner @{HOME}/.gnome2/ rw,
	owner @{HOME}/.gnome2/** rwk,
	owner @{HOME}/.gstreamer*/** rw,
	owner @{HOME}/.gtkrc-2.0-kde4 r,
	owner @{HOME}/.icedteaplugin/** rw,
	owner @{HOME}/.icons/ r,
	owner @{HOME}/.iprint/ rw,
	owner @{HOME}/.iprint/** rwk,
	owner @{HOME}/.java/** rwkm,
	owner @{HOME}/.kde/** rwlk,
	owner @{HOME}/.local/** r,
	owner @{HOME}/.macromedia/** rw,
	owner @{HOME}/.mozilla/plugins/ rw,
	owner @{HOME}/.mozilla/plugins/** rwm,
	owner @{HOME}/.netx/** rwk,
	owner @{HOME}/.pulse/ rw,
	owner @{HOME}/.pulse/** rw,
	owner @{HOME}/.pulse-cookie rwk,
	owner @{HOME}/.recently-used.xbel* rwk,
	owner @{HOME}/.thumbnails/** r,
	owner @{HOME}/Downloads/ rw,
	owner @{HOME}/Downloads/** rw,
	owner @{HOME}/Pictures/ r,
	owner @{HOME}/Pictures/** r,
	owner @{HOME}/Public/ r,
	owner @{HOME}/Public/** r,

	owner @{PROC}/[0-9]*/maps r,
	owner @{PROC}/[0-9]*/net/** r,
	owner @{PROC}/[0-9]*/stat r,

	/bin/dash rmix,

	/etc/ r,
	/etc/apt/apt.conf.d/ r,
	/etc/apt/apt.conf.d/** r,
	/etc/default/apport r,
	/etc/gnome/defaults.list r,
	/etc/gnome/epiphany/ r,
	/etc/gnome/epiphany/** r,
	/etc/gre.d/ r,
	/etc/gre.d/** r,
	/etc/java*/** r,
	/etc/kde4/** r,
	/etc/kde4rc r,
	/etc/kderc r,
	/etc/lsb-release r,
	/etc/mailcap r,
	/etc/mime.types r,
	/etc/mplayer/* r,
	/etc/opt/novell/iprint/** r,
	/etc/pulse/* r,
	/etc/python*/ r,
	/etc/python*/** r,
	/etc/sound/events/gtk-events-2.soundlist r,
	/etc/ssl/certs/** r,
	/etc/wildmidi/wildmidi.cfg r,
	/etc/X11/cursors/** r,
	/etc/xulrunner-*/ r,
	/etc/xulrunner-*/** r,

	/opt/thunderbird/thunderbird Px,

	/usr/bin/env rix,
	/usr/bin/epiphany* rix,
	/usr/bin/evince rix,
	/usr/bin/expr rix,
	/usr/bin/file-roller Px,
	/usr/bin/gconftool-2 rix,
	/usr/bin/gedit rix,
	/usr/bin/gnome-app-install rix,
	/usr/bin/gtk-gnash rix,
	/usr/bin/kate rix,
	/usr/bin/kde4-config rmix,
	/usr/bin/launchpad-integration rix,
	/usr/bin/lpr rix,
	/usr/bin/mplayer rix,
	/usr/bin/okular rix,
	/usr/bin/ps2pdf rix,
	/usr/bin/setarch rix,

	/usr/lib/browser-plugins/** rm,
	/usr/lib/gamin/gam_server ix,
	/usr/lib/jvm/*/jre/bin/** rix,
	/usr/lib/jvm/** rm,
	/usr/lib/kde4/**.so rm,
	/usr/lib/kde4/libexec/drkonqi rix,
	/usr/lib/ladspa/**.so rm,
	/usr/lib/libvisual*/**.so rm,
	/usr/lib/nspluginwrapper/i386/linux/npviewer* rix,
	/usr/lib/python*/**.so rm,
	/usr/lib/thunderbird*/thunderbird Px,

	/usr/local/lib/python2.6/ r,
	/usr/local/lib/python2.6/** r,

	/usr/local/share/applications/ r,
	/usr/local/share/applications/* r,
	/usr/local/share/mime/** r,

	/usr/share/applications/ r,
	/usr/share/applications/** r,
	/usr/share/doc/** r,
	/usr/share/epiphany-browser/ r,
	/usr/share/epiphany-browser/** r,
	/usr/share/epiphany-extensions/** r,
	/usr/share/evince/** r,
	/usr/share/file-roller/** r,
	/usr/share/gnash/** r,
	/usr/share/icons/**.theme rk,
	/usr/share/java/** r,
	/usr/share/javazi/** r,
	/usr/share/kde4/apps/okular/** r,
	/usr/share/kde4/config/** r,
	/usr/share/kubuntu-default-settings/** r,
	/usr/share/ladspa/ r,
	/usr/share/ladspa/** r,
	/usr/share/libthai/** r,
	/usr/share/locale-langpack/** rm,
	/usr/share/mime/** r,
	/usr/share/myspell/dicts/ r,
	/usr/share/myspell/dicts/** r,
	/usr/share/pyshared/** r,
	/usr/share/python-support/** r,
	/usr/share/zoneinfo/ r,
	/usr/share/zoneinfo/** r,

	# These are for my own installations. The Novell iPrint entry 
	# probably isn't needed for most people.  The plugin 
	# this entry points to doesn't even work very well if 
	# you're not using SUSE...
	/opt/novell/** rm,

	/tmp/hsperfdata_*/** rwm,

	/var/lib/flashplugin-nonfree/* rm,
	/var/lib/python-support/ r,
	/var/lib/python-support/** r,
	/var/run/cups/cups.sock w,
}