/etc/apparmor.d/abstractions/launchpad-integration is in apparmor 2.9.0-3.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 | # vim:syntax=apparmor
# launchpad-integration
# Launchpad integration should run in a sanitizing profile
/usr/bin/launchpad-integration Cxr -> launchpad_integration,
profile launchpad_integration {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/ubuntu-browsers>
# Required for debuggers
capability sys_ptrace,
# Run confined with security execution. sudo scrubs the environment, so we
# don't have to
/usr/bin/sudo Ux,
# Give it wide permissions since it and apport need to do a lot
/** rwlk,
/{,usr/}{,s}bin/* Pixr,
/{,usr/}lib*/{,**/}*.so{,.*} m,
/usr/share/apport/* Pixr,
# Dangerous files
audit deny owner /**/*.py* r, # python imports
audit deny owner /**/* m, # compiled libraries
}
|