# jgoguen's current Firefox profile
# Please note, this is for:
# Ubuntu 9.04 "Jaunty"
# Firefox 3.0.8
# Firefox 3.5b4pre

# This also includes a profile for Firefox 3.5 b4pre
# assuming it is extracted to /opt, creating 
# /opt/firefox/

#include <tunables/global>
/usr/lib/firefox-3.0.10/firefox.sh {
	#include <abstractions/audio>
	#include <abstractions/base>
	#include <abstractions/bash>
	#include <abstractions/consoles>
	#include <abstractions/dbus>
	#include <abstractions/fonts>
	#include <abstractions/gnome>
	#include <abstractions/nameservice>
	#include <abstractions/user-tmp>

	deny @{HOME}/.bash* rw,
	deny @{HOME}/.cshrc rw,
	deny @{HOME}/.profile rw,
	deny @{HOME}/.ssh/* rw,
	deny @{HOME}/.zshrc rw,

	owner @{HOME}/ r,
	owner @{HOME}/.adobe/** rw,
	owner @{HOME}/.asoundrc.asoundconf r,
	owner @{HOME}/.config/** rwk,
	owner @{HOME}/.gnash/ rw,
	owner @{HOME}/.gnash/** rw,
	owner @{HOME}/.gnashrc rw,
	owner @{HOME}/.gnashpluginrc rw,
	owner @{HOME}/.gnome2/accelsevince rw,
	owner @{HOME}/.gnome2/evince/** rw,
	owner @{HOME}/.gstreamer*/** rw,
	owner @{HOME}/.gtkrc-2.0-kde4 r,
	owner @{HOME}/.icedteaplugin/** rw,
	owner @{HOME}/.icons/ r,
	owner @{HOME}/.iprint/ rw,
	owner @{HOME}/.iprint/** rwk,
	owner @{HOME}/.java/** rwkm,
	owner @{HOME}/.kde/** rwlk,
	owner @{HOME}/.local/** r,
	owner @{HOME}/.macromedia/** rw,
	owner @{HOME}/.mozilla/ rw,
	owner @{HOME}/.mozilla/{firefox*,plugins,extensions}/ rw,
	owner @{HOME}/.mozilla/{firefox*,plugins,extensions}/** rwmk,
	owner @{HOME}/.netx/** rwk,
	owner @{HOME}/.pulse/ rw,
	owner @{HOME}/.pulse/** rw,
	owner @{HOME}/.pulse-cookie rwk,
	owner @{HOME}/.recently-used.xbel* rwk,
	owner @{HOME}/.thumbnails/** r,
	owner @{HOME}/Downloads/ rw,
	owner @{HOME}/Downloads/** rw,
	owner @{HOME}/Pictures/ r,
	owner @{HOME}/Pictures/** r,
	owner @{HOME}/Public/ r,
	owner @{HOME}/Public/** r,

	owner @{PROC}/[0-9]*/maps r,
	owner @{PROC}/[0-9]*/net/** r,
	owner @{PROC}/[0-9]*/stat r,

	@{PROC}/uptime r,
	@{PROC}/version r,

	/bin/bzip2 rix,
	/bin/cp rmix,
	/bin/cpio rix,
	/bin/dash rmix,
	/bin/grep rix,
	/bin/gzip rix,
	/bin/ps rix,
	/bin/readlink rmix,
	/bin/sed rix,
	/bin/tar rix,
	/bin/uname rix,
	/bin/uncompress rix,
	/bin/which rix,

	/dev/shm/ rw,
	/dev/shm/* rw,

	/etc/ r,
	/etc/default/apport r,
	/etc/firefox-*/{pref,profile}/ r,
	/etc/firefox-*/{pref,profile}/* r,
	/etc/gnome/defaults.list r,
	/etc/gre.d/ r,
	/etc/gre.d/* r,
	/etc/java*/** r,
	/etc/kde4/** r,
	/etc/kde4rc r,
	/etc/kderc r,
	/etc/lsb-release r,
	/etc/mailcap r,
	/etc/mime.types r,
	/etc/mplayer/* r,
	/etc/opt/novell/iprint/** r,
	/etc/pulse/* r,
	/etc/sound/events/gtk-events-2.soundlist r,
	/etc/ssl/certs/** r,
	/etc/wildmidi/wildmidi.cfg r,
	/etc/X11/cursors/** r,
	/etc/xulrunner-*/* r,

	/opt/thunderbird/thunderbird Px,

	/usr/bin/ar rix,
	/usr/bin/basename rix,
	/usr/bin/dirname rix,
	/usr/bin/env rix,
	/usr/bin/evince rix,
	/usr/bin/expr rix,
	/usr/bin/file-roller rix,
	/usr/bin/gconftool-2 rix,
	/usr/bin/gedit rix,
	/usr/bin/gnome-app-install rix,
	/usr/bin/gtk-gnash rix,
	/usr/bin/isoinfo rix,
	/usr/bin/kate rix,
	/usr/bin/kde4-config rmix,
	/usr/bin/launchpad-integration rix,
	/usr/bin/lpr rix,
	/usr/bin/lzma rix,
	/usr/bin/mplayer rix,
	/usr/bin/okular rix,
	/usr/bin/ps2pdf rix,
	/usr/bin/setarch rix,
	/usr/bin/unrar-nonfree rix,
	/usr/bin/zip rix,

	/usr/lib/browser-plugins/** rm,
	/usr/lib/firefox*/**.so rm,
	/usr/lib/firefox*/firefox* ix,
	/usr/lib/gamin/gam_server ix,
	/usr/lib/jvm/*/jre/bin/** rix,
	/usr/lib/jvm/** rm,
	/usr/lib/kde4/**.so rm,
	/usr/lib/kde4/libexec/drkonqi rix,
	/usr/lib/ladspa/**.so rm,
	/usr/lib/libvisual*/**.so rm,
	/usr/lib/nspluginwrapper/i386/linux/npviewer* rix,
	/usr/lib/thunderbird/thunderbird Px,
	/usr/lib/xulrunner*/**.so rm,

	/usr/lib32/** rm,

	/usr/local/share/applications/ r,
	/usr/local/share/applications/* r,
	/usr/local/share/mime/** r,

	/usr/share/applications/ r,
	/usr/share/applications/** r,
	/usr/share/doc/** r,
	/usr/share/evince/** r,
	/usr/share/file-roller/** r,
	/usr/share/gnash/** r,
	/usr/share/icons/**.theme rk,
	/usr/share/java/** r,
	/usr/share/javazi/** r,
	/usr/share/kde4/apps/okular/** r,
	/usr/share/kde4/config/** r,
	/usr/share/kubuntu-default-settings/** r,
	/usr/share/libthai/** r,
	/usr/share/locale-langpack/** rm,
	/usr/share/mime/** r,
	/usr/share/myspell/dicts/ r,
	/usr/share/myspell/dicts/** r,
	/usr/share/ubufox/** r,
	/usr/share/zoneinfo/ r,
	/usr/share/zoneinfo/** r,

	# These are for my own installations. The Novell iPrint entry 
	# probably isn't needed for most people.  The plugin 
	# this entry points to doesn't even work very well if 
	# you're not using SUSE...
	/opt/novell/** rm,

	/tmp/hsperfdata_*/** rwm,

	/var/lib/flashplugin-nonfree/* rm,
	/var/run/cups/cups.sock w,
}

/usr/lib/firefox-3.5b5pre/firefox.sh {
	#include <abstractions/audio>
	#include <abstractions/base>
	#include <abstractions/bash>
	#include <abstractions/consoles>
	#include <abstractions/dbus>
	#include <abstractions/fonts>
	#include <abstractions/gnome>
	#include <abstractions/nameservice>
	#include <abstractions/user-tmp>

	deny @{HOME}/.bash* rw,
	deny @{HOME}/.cshrc rw,
	deny @{HOME}/.profile rw,
	deny @{HOME}/.ssh/* rw,
	deny @{HOME}/.zshrc rw,

	owner @{HOME}/ r,
	owner @{HOME}/.adobe/** rw,
	owner @{HOME}/.asoundrc.asoundconf r,
	owner @{HOME}/.config/** rwk,
	owner @{HOME}/.gnash/ rw,
	owner @{HOME}/.gnash/** rw,
	owner @{HOME}/.gnashrc rw,
	owner @{HOME}/.gnashpluginrc rw,
	owner @{HOME}/.gnome2/accelsevince rw,
	owner @{HOME}/.gnome2/evince/** rw,
	owner @{HOME}/.gstreamer*/** rw,
	owner @{HOME}/.gtkrc-2.0-kde4 r,
	owner @{HOME}/.icedteaplugin/** rw,
	owner @{HOME}/.icons/ r,
	owner @{HOME}/.iprint/ rw,
	owner @{HOME}/.iprint/** rwk,
	owner @{HOME}/.java/** rwkm,
	owner @{HOME}/.kde/** rwlk,
	owner @{HOME}/.local/** r,
	owner @{HOME}/.macromedia/** rw,
	owner @{HOME}/.mozilla/ rw,
	owner @{HOME}/.mozilla/{firefox*,plugins,extensions}/ rw,
	owner @{HOME}/.mozilla/{firefox*,plugins,extensions}/** rwmk,
	owner @{HOME}/.netx/** rwk,
	owner @{HOME}/.pulse/ rw,
	owner @{HOME}/.pulse/** rw,
	owner @{HOME}/.pulse-cookie rwk,
	owner @{HOME}/.recently-used.xbel* rwk,
	owner @{HOME}/.thumbnails/** r,
	owner @{HOME}/Downloads/ rw,
	owner @{HOME}/Downloads/** rw,
	owner @{HOME}/Pictures/ r,
	owner @{HOME}/Pictures/** r,
	owner @{HOME}/Public/ r,
	owner @{HOME}/Public/** r,

	owner @{PROC}/[0-9]*/maps r,
	owner @{PROC}/[0-9]*/net/** r,
	owner @{PROC}/[0-9]*/stat r,

	@{PROC}/uptime r,
	@{PROC}/version r,

	/bin/bzip2 rix,
	/bin/cp rmix,
	/bin/cpio rix,
	/bin/dash rmix,
	/bin/grep rix,
	/bin/gzip rix,
	/bin/ps rix,
	/bin/readlink rmix,
	/bin/sed rix,
	/bin/tar rix,
	/bin/uname rix,
	/bin/uncompress rix,
	/bin/which rix,

	/dev/shm/ rw,
	/dev/shm/* rw,

	/etc/ r,
	/etc/default/apport r,
	/etc/firefox-*/{pref,profile}/ r,
	/etc/firefox-*/{pref,profile}/* r,
	/etc/gnome/defaults.list r,
	/etc/gre.d/ r,
	/etc/gre.d/* r,
	/etc/java*/** r,
	/etc/kde4/** r,
	/etc/kde4rc r,
	/etc/kderc r,
	/etc/lsb-release r,
	/etc/mailcap r,
	/etc/mime.types r,
	/etc/mplayer/* r,
	/etc/opt/novell/iprint/** r,
	/etc/pulse/* r,
	/etc/sound/events/gtk-events-2.soundlist r,
	/etc/ssl/certs/** r,
	/etc/wildmidi/wildmidi.cfg r,
	/etc/X11/cursors/** r,
	/etc/xulrunner-*/* r,

	/opt/thunderbird/thunderbird Px,

	/usr/bin/ar rix,
	/usr/bin/basename rix,
	/usr/bin/dirname rix,
	/usr/bin/env rix,
	/usr/bin/evince rix,
	/usr/bin/expr rix,
	/usr/bin/file-roller rix,
	/usr/bin/gconftool-2 rix,
	/usr/bin/gedit rix,
	/usr/bin/gnome-app-install rix,
	/usr/bin/gtk-gnash rix,
	/usr/bin/isoinfo rix,
	/usr/bin/kate rix,
	/usr/bin/kde4-config rmix,
	/usr/bin/launchpad-integration rix,
	/usr/bin/lpr rix,
	/usr/bin/lzma rix,
	/usr/bin/mplayer rix,
	/usr/bin/okular rix,
	/usr/bin/ps2pdf rix,
	/usr/bin/setarch rix,
	/usr/bin/unrar-nonfree rix,
	/usr/bin/zip rix,

	/usr/lib/browser-plugins/** rm,
	/usr/lib/firefox*/**.so rm,
	/usr/lib/firefox*/firefox* ix,
	/usr/lib/gamin/gam_server ix,
	/usr/lib/jvm/*/jre/bin/** rix,
	/usr/lib/jvm/** rm,
	/usr/lib/kde4/**.so rm,
	/usr/lib/kde4/libexec/drkonqi rix,
	/usr/lib/ladspa/**.so rm,
	/usr/lib/libvisual*/**.so rm,
	/usr/lib/nspluginwrapper/i386/linux/npviewer* rix,
	/usr/lib/thunderbird/thunderbird Px,
	/usr/lib/xulrunner*/**.so rm,

	/usr/lib32/** rm,

	/usr/local/share/applications/ r,
	/usr/local/share/applications/* r,
	/usr/local/share/mime/** r,

	/usr/share/applications/ r,
	/usr/share/applications/** r,
	/usr/share/doc/** r,
	/usr/share/evince/** r,
	/usr/share/file-roller/** r,
	/usr/share/gnash/** r,
	/usr/share/icons/**.theme rk,
	/usr/share/java/** r,
	/usr/share/javazi/** r,
	/usr/share/kde4/apps/okular/** r,
	/usr/share/kde4/config/** r,
	/usr/share/kubuntu-default-settings/** r,
	/usr/share/libthai/** r,
	/usr/share/locale-langpack/** rm,
	/usr/share/mime/** r,
	/usr/share/myspell/dicts/ r,
	/usr/share/myspell/dicts/** r,
	/usr/share/ubufox/** r,
	/usr/share/zoneinfo/ r,
	/usr/share/zoneinfo/** r,

	# These are for my own installations. The Novell iPrint entry 
	# probably isn't needed for most people.  The plugin 
	# this entry points to doesn't even work very well if 
	# you're not using SUSE...
	/opt/novell/** rm,

	/tmp/hsperfdata_*/** rwm,

	/var/lib/flashplugin-nonfree/* rm,
	/var/run/cups/cups.sock w,
}

/opt/firefox/firefox {
	#include <abstractions/audio>
	#include <abstractions/base>
	#include <abstractions/bash>
	#include <abstractions/consoles>
	#include <abstractions/dbus>
	#include <abstractions/fonts>
	#include <abstractions/gnome>
	#include <abstractions/nameservice>
	#include <abstractions/user-tmp>

	deny @{HOME}/.bash* rw,
	deny @{HOME}/.cshrc rw,
	deny @{HOME}/.profile rw,
	deny @{HOME}/.ssh/* rw,
	deny @{HOME}/.zshrc rw,

	owner @{HOME}/ r,
	owner @{HOME}/.adobe/** rw,
	owner @{HOME}/.asoundrc.asoundconf r,
	owner @{HOME}/.config/** rwk,
	owner @{HOME}/.gnash/ rw,
	owner @{HOME}/.gnash/** rw,
	owner @{HOME}/.gnashrc rw,
	owner @{HOME}/.gnashpluginrc rw,
	owner @{HOME}/.gnome2/accelsevince rw,
	owner @{HOME}/.gnome2/evince/** rw,
	owner @{HOME}/.gstreamer*/** rw,
	owner @{HOME}/.gtkrc-2.0-kde4 r,
	owner @{HOME}/.icedteaplugin/** rw,
	owner @{HOME}/.icons/ r,
	owner @{HOME}/.iprint/ rw,
	owner @{HOME}/.iprint/** rwk,
	owner @{HOME}/.java/** rwkm,
	owner @{HOME}/.kde/** rwlk,
	owner @{HOME}/.local/** r,
	owner @{HOME}/.macromedia/** rw,
	owner @{HOME}/.mozilla/ rw,
	owner @{HOME}/.mozilla/{firefox*,plugins,extensions}/ rw,
	owner @{HOME}/.mozilla/{firefox*,plugins,extensions}/** rwmk,
	owner @{HOME}/.netx/** rwk,
	owner @{HOME}/.pulse/ rw,
	owner @{HOME}/.pulse/** rw,
	owner @{HOME}/.pulse-cookie rwk,
	owner @{HOME}/.recently-used.xbel* rwk,
	owner @{HOME}/.thumbnails/** r,
	owner @{HOME}/Downloads/ rw,
	owner @{HOME}/Downloads/** rw,
	owner @{HOME}/Pictures/ r,
	owner @{HOME}/Pictures/** r,
	owner @{HOME}/Public/ r,
	owner @{HOME}/Public/** r,

	owner @{PROC}/[0-9]*/maps r,
	owner @{PROC}/[0-9]*/net/** r,
	owner @{PROC}/[0-9]*/stat r,

	@{PROC}/uptime r,
	@{PROC}/version r,

	/bin/bzip2 rix,
	/bin/cp rmix,
	/bin/cpio rix,
	/bin/dash rmix,
	/bin/grep rix,
	/bin/gzip rix,
	/bin/ps rix,
	/bin/readlink rmix,
	/bin/sed rix,
	/bin/tar rix,
	/bin/uname rix,
	/bin/uncompress rix,
	/bin/which rix,

	/dev/shm/ rw,
	/dev/shm/* rw,

	/etc/ r,
	/etc/default/apport r,
	/etc/firefox-*/{pref,profile}/ r,
	/etc/firefox-*/{pref,profile}/* r,
	/etc/gnome/defaults.list r,
	/etc/gre.d/ r,
	/etc/gre.d/* r,
	/etc/java*/** r,
	/etc/kde4/** r,
	/etc/kde4rc r,
	/etc/kderc r,
	/etc/lsb-release r,
	/etc/mailcap r,
	/etc/mime.types r,
	/etc/mplayer/* r,
	/etc/opt/novell/iprint/** r,
	/etc/pulse/* r,
	/etc/sound/events/gtk-events-2.soundlist r,
	/etc/ssl/certs/** r,
	/etc/wildmidi/wildmidi.cfg r,
	/etc/X11/cursors/** r,
	/etc/xulrunner-*/* r,

	/opt/firefox/ r,
	/opt/firefox/** r,
	/opt/firefox/**.so rm,
	/opt/firefox/firefox* rix,
	/opt/firefox/run-mozilla.sh rix,

	/usr/bin/ar rix,
	/usr/bin/basename rix,
	/usr/bin/dirname rix,
	/usr/bin/env rix,
	/usr/bin/evince rix,
	/usr/bin/expr rix,
	/usr/bin/file-roller rix,
	/usr/bin/gconftool-2 rix,
	/usr/bin/gedit rix,
	/usr/bin/gnome-app-install rix,
	/usr/bin/gtk-gnash rix,
	/usr/bin/isoinfo rix,
	/usr/bin/kate rix,
	/usr/bin/kde4-config rmix,
	/usr/bin/launchpad-integration rix,
	/usr/bin/lpr rix,
	/usr/bin/lzma rix,
	/usr/bin/mplayer rix,
	/usr/bin/okular rix,
	/usr/bin/ps2pdf rix,
	/usr/bin/setarch rix,
	/usr/bin/unrar-nonfree rix,
	/usr/bin/zip rix,

	/usr/lib/browser-plugins/** rm,
	/usr/lib/firefox*/**.so rm,
	/usr/lib/firefox*/firefox* ix,
	/usr/lib/gamin/gam_server ix,
	/usr/lib/jvm/*/jre/bin/** rix,
	/usr/lib/jvm/** rm,
	/usr/lib/kde4/**.so rm,
	/usr/lib/kde4/libexec/drkonqi rix,
	/usr/lib/ladspa/**.so rm,
	/usr/lib/libvisual*/**.so rm,
	/usr/lib/nspluginwrapper/i386/linux/npviewer* rix,
	/usr/lib/xulrunner*/**.so rm,

	/usr/lib32/** rm,

	/usr/local/share/applications/ r,
	/usr/local/share/applications/* r,
	/usr/local/share/mime/** r,

	/usr/share/applications/ r,
	/usr/share/applications/** r,
	/usr/share/doc/** r,
	/usr/share/evince/** r,
	/usr/share/file-roller/** r,
	/usr/share/gnash/** r,
	/usr/share/icons/**.theme rk,
	/usr/share/java/** r,
	/usr/share/javazi/** r,
	/usr/share/kde4/apps/okular/** r,
	/usr/share/kde4/config/** r,
	/usr/share/kubuntu-default-settings/** r,
	/usr/share/libthai/** r,
	/usr/share/locale-langpack/** rm,
	/usr/share/mime/** r,
	/usr/share/myspell/dicts/ r,
	/usr/share/myspell/dicts/** r,
	/usr/share/ubufox/** r,
	/usr/share/zoneinfo/ r,
	/usr/share/zoneinfo/** r,

	# These are for my own installations. The Novell iPrint entry 
	# probably isn't needed for most people.  The plugin 
	# this entry points to doesn't even work very well if 
	# you're not using SUSE...
	/opt/novell/** rm,

	/tmp/hsperfdata_*/** rwm,

	/var/lib/flashplugin-nonfree/* rm,
	/var/run/cups/cups.sock w,
}