/etc/apparmor.d/usr.bin.irssi is in apparmor-profiles-extra 1.4.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 | # Author: Jamie Strandboge
# For use with irssi within screen
#include <tunables/global>
/usr/bin/irssi {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/perl>
#include <abstractions/ssl_certs>
/usr/share/irssi/themes/*.theme r,
/usr/share/irssi/help/* r,
# Enable system wide scripts
/usr/share/irssi/scripts/* r,
/usr/share/ca-certificates/** r,
@{PROC}/uptime r,
/bin/dash ix,
# for screen_away
#include <abstractions/wutmp>
/usr/bin/screen ix,
owner /{,var/}run/screen/** r,
owner /{,var/}run/screen/S-[a-zA-Z0-9]*/[0-9]* w,
@{PROC}/[0-9]*/stat r,
# for /uptime
/usr/bin/gawk ix,
/usr/bin/expr ix,
/bin/date ix,
# for /calc
/usr/bin/bc ix,
/bin/which ixr,
# config files, etc
/etc/irssi.conf r,
owner @{HOME}/.irssi/ r,
owner @{HOME}/.irssi/** r,
owner @{HOME}/.irssi/away.log wk,
owner @{HOME}/.irssi/config{,.autosave} wk,
owner @{HOME}/.irssi/*.theme wk,
# http://www.irssi.org/documentation/startup states that ~/irclogs is the
# default location for logs.
owner @{HOME}/irclogs/ r,
owner @{HOME}/irclogs/** rwk,
# for fnotify
owner @{HOME}/.irssi/fnotify rwk,
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.bin.irssi>
}
|