OXIESEC PANEL
- Current Dir:
/
/
snap
/
core24
/
888
/
etc
/
apparmor.d
/
abstractions
Server IP: 139.59.38.164
Upload:
Create Dir:
Name
Size
Modified
Perms
📁
..
-
03/18/2025 08:12:15 AM
rwxr-xr-x
📄
X
1.94 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
apache2-common
1.09 KB
07/18/2024 06:28:46 PM
rw-r--r--
📁
apparmor_api
-
03/18/2025 08:12:15 AM
rwxr-xr-x
📄
aspell
412 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
audio
2.01 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
authentication
2.14 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
base
6.93 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
bash
1.58 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
consoles
903 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
crypto
992 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
cups-client
820 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
dbus
694 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
dbus-accessibility
745 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
dbus-accessibility-strict
760 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
dbus-network-manager-strict
1.37 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
dbus-session
747 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
dbus-session-strict
1.23 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
dbus-strict
781 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
dconf
344 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
dovecot-common
675 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
dri-common
542 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
dri-enumerate
392 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
enchant
2.17 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
exo-open
1.88 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
fcitx
558 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
fcitx-strict
821 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
fonts
2.23 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
freedesktop.org
1.64 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
gio-open
1.51 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
gnome
3.73 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
gnupg
459 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
groff
1.86 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
gtk
1.58 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
gvfs-open
1.15 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
hosts_access
511 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
ibus
992 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
kde
3.25 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
kde-globals-write
413 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
kde-icon-cache-write
256 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
kde-language-write
575 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
kde-open5
3.58 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
kerberosclient
1.44 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
ldapclient
856 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
libpam-systemd
770 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
likewise
595 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
mdns
554 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
mesa
1.21 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
mir
694 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
mozc
573 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
mysql
739 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
nameservice
4.46 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
nis
625 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
nss-systemd
1.22 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
nvidia
1.09 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
opencl
370 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
opencl-common
516 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
opencl-intel
672 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
opencl-mesa
636 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
opencl-nvidia
895 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
opencl-pocl
2.84 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
openssl
642 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
orbit2
197 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
p11-kit
999 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
perl
974 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
php
1.1 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
php-worker
558 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
php5
208 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
postfix-common
1.32 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
private-files
1.62 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
private-files-strict
1.18 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
python
2.24 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
qt5
863 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
qt5-compose-cache-write
399 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
qt5-settings-write
514 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
recent-documents-write
466 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
ruby
1008 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
samba
1.27 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
samba-rpcd
817 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
smbpass
581 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
snap_browsers
1.54 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
ssl_certs
1.49 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
ssl_keys
938 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
svn-repositories
1.72 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
transmission-common
4.28 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
trash
3.54 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-bittorrent-clients
821 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-browsers
1.58 KB
07/18/2024 06:28:46 PM
rw-r--r--
📁
ubuntu-browsers.d
-
03/18/2025 08:12:15 AM
rwxr-xr-x
📄
ubuntu-console-browsers
731 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-console-email
718 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-email
1.06 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-feed-readers
456 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-gnome-terminal
300 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-helpers
3.82 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-konsole
453 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-media-players
2.3 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-unity7-base
2.5 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-unity7-launcher
311 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-unity7-messaging
313 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
ubuntu-xterm
346 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
user-download
987 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
user-mail
944 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
user-manpages
1000 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
user-tmp
760 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
user-write
972 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
video
594 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
vulkan
1.1 KB
07/18/2024 06:28:46 PM
rw-r--r--
📄
wayland
713 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
web-data
811 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
winbind
882 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
wutmp
788 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
xad
984 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
xdg-desktop
782 bytes
07/18/2024 06:28:46 PM
rw-r--r--
📄
xdg-open
2.23 KB
07/18/2024 06:28:46 PM
rw-r--r--
Editing: kde-open5
Close
# vim:syntax=apparmor abi <abi/4.0>, # This abstraction is designed to be used in a child profile to limit what # confined application can invoke via kde-open5 helper. # # NOTE: most likely you want to use xdg-open abstraction instead for better # portability across desktop environments, unless you are sure that confined # application only uses /usr/bin/kde-open5 directly. # # Usage example: # # ``` # profile foo /usr/bin/foo { # ... # /usr/bin/kde-open5 rPx -> foo//kde-open5, # ... # } # end of main profile # # # out-of-line child profile # profile foo//kde-open5 { # include <abstractions/kde-open5> # # # needed for ubuntu-* abstractions # include <abstractions/ubuntu-helpers> # # # Only allow to handle http[s]: and mailto: links # include <abstractions/ubuntu-browsers> # include <abstractions/ubuntu-email> # # # Add if accessibility access is considered as required # # (for message box in case exo-open fails) # include <abstractions/dbus-accessibility> # # # Add if audio support for message box is # # considered as required. # include if exists <abstractions/gstreamer> # # # < add additional allowed applications here > # } # ``` include <abstractions/audio> # for alert messages include <abstractions/base> include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-network-manager-strict> include <abstractions/dbus-session-strict> include <abstractions/dbus-strict> include <abstractions/kde-icon-cache-write> include <abstractions/kde> include <abstractions/nameservice> # for IceProcessMessages () from libICE.so (called by libQtCore.so) include <abstractions/qt5> include <abstractions/recent-documents-write> include <abstractions/X> # Main executables /usr/bin/kde-open5 rix, /usr/lib/@{multiarch}/libexec/kf5/kioslave{,5} ix, # DBus dbus bus=session interface=org.kde.KLauncher member=start_service_by_desktop_path peer=(name=org.kde.klauncher5), # Denied system files deny /usr/lib/vlc/plugins/* w, # VLC backed tries to create plugins.dat.16109 # libpcre2 on openSUSE tries to mmap() shared memory on directory. # see: https://lists.ubuntu.com/archives/apparmor/2019-January/011925.html # AppArmor does not allow to distinguish "real" file vs shared memory one, # so we deny this path to protect from loading exploits from /tmp. deny /tmp/#[0-9]*[0-9] m, # System files /dev/tty r, /etc/xdg/accept-languages.codes r, /etc/xdg/menus/{,*/} r, /usr/share/*fonts*/conf.avail/*.conf r, # for openSUSE, when showing error message box /usr/share/ghostscript/fonts/ r, # for openSUSE, when showing error message box /usr/share/hwdata/pnp.ids r, # for openSUSE, when showing error message box, for QXcbConnection::initializeScreens() from libQt5XcbQpa.so /usr/share/icu/[0-9]*.[0-9]*/*.dat r, # for openSUSE /usr/share/kservices5/{,**} r, # for KProtocolManager::defaultUserAgent() from libKF5KIOCore.so /usr/share/mime/ r, /usr/share/mime/generic-icons r, /usr/share/plasma/look-and-feel/*/contents/defaults r, # TODO: move to kde abstraction? /usr/share/sounds/ r, @{PROC}/sys/kernel/core_pattern r, @{PROC}/sys/kernel/random/boot_id r, # User files owner /tmp/xauth-[0-9]*-_[0-9] r, # for libQt5XcbQpa.so owner @{run}/user/[0-9]*/#[0-9]* rw, # for /run/user/1000/#13 owner @{run}/user/[0-9]*/kioclient*slave-socket lrw -> @{run}/user/[0-9]/#[0-9]*, # for KIO::Slave::holdSlave(QString const&, QUrl const&) () from libKF5KIOCore.so (not 100% sure) owner @{HOME}/.cache/kio_http/ rw, # Include additions to the abstraction include if exists <abstractions/kde-open5.d>