# jgoguen's current Pidgin profile
# Please note, this is for:
# Ubuntu 9.04 "Jaunty"

#include <tunables/global>
/usr/bin/pidgin {
	#include <abstractions/X>
	#include <abstractions/audio>
	#include <abstractions/base>
	#include <abstractions/bash>
	#include <abstractions/consoles>
	#include <abstractions/dbus>
	#include <abstractions/fonts>
	#include <abstractions/gnome>
	#include <abstractions/nameservice>
	#include <abstractions/user-tmp>

	capability sys_ptrace,

	deny @{HOME}/.bash* rw,
	deny @{HOME}/.cshrc rw,
	deny @{HOME}/.profile rw,
	deny @{HOME}/.ssh/* rw,
	deny @{HOME}/.zshrc rw,

	owner @{HOME}/.aspell* rk,
	owner @{HOME}/.config/enchant/ rw,
	owner @{HOME}/.config/enchant/* rwk,
	owner @{HOME}/.local/share/icons/ r,
	owner @{HOME}/.local/share/mime/* r,
	owner @{HOME}/.gnome2/nautilus-sendto/** rw,
	owner @{HOME}/.gstreamer*/ rw,
	owner @{HOME}/.gstreamer*/** rw,
	owner @{HOME}/.pulse/ rw,
	owner @{HOME}/.pulse/** rw,
	owner @{HOME}/.pulse-cookie rwk,
	owner @{HOME}/.purple/ rw,
	owner @{HOME}/.purple/** rwk,
	owner @{HOME}/Downloads/ rw,
	owner @{HOME}/Downloads/** rw,
	owner @{HOME}/Pictures/ rw,
	owner @{HOME}/Pictures/** rw,

	/bin/dash rix,

	/dev/shm/ r,
	/dev/shm/* rw,

	/etc/ r,
	/etc/pulse/client.conf r,
	/etc/ssl/certs/ r,

	/tmp/.ICE-unix/* w,
	owner /tmp/orbit-*/ w,
	owner /tmp/pulse-*/* w,

	/opt/firefox/firefox Px,

	/usr/bin/gconftool-2 rix,
	/usr/bin/gnome-default-applications-properties ix,
	/usr/bin/gnome-network-preferences ix,
	/usr/bin/gnome-open rmix,
	/usr/bin/launchpad-integration ix,
	/usr/bin/pidgin r,
	/usr/bin/xdg-open rmix,

	/usr/lib/ r,
	/usr/lib/firefox-*/firefox.sh Px,
	/usr/lib/libvisual-*/**.so rm,
	/usr/lib/pidgin/*.so rm,
	/usr/lib/purple*/*.so rm,

	/usr/share/ca-certificates/** r,
	/usr/share/enchant/enchant.ordering r,
	/usr/share/ladspa/rdf/ r,
	/usr/share/ladspa/rdf/** r,
	/usr/share/locale-langpack/** r,
	/usr/share/myspell/dicts/ r,
	/usr/share/myspell/dicts/** r,
	/usr/share/tcltk/** r,

	/var/lib/aspell/** r,
}