FM / abstractions

/snap/snapd/27710/usr/lib/snapd/apparmor.d/abstractions/

/snap/snapd/27710/usr/lib/snapd/apparmor.d/abstractions

Name	Size	Mode	Actions
apparmor_api/	-	0775	rm
ubuntu-browsers.d/	-	0775	rm
apache2-common	1119	0664	edit dl rm
aspell	412	0664	edit dl rm
audio	2063	0664	edit dl rm
authd	145	0664	edit dl rm
authentication	2194	0664	edit dl rm
base	7151	0664	edit dl rm
bash	1614	0664	edit dl rm
consoles	903	0664	edit dl rm
crypto	992	0664	edit dl rm
cups-client	820	0664	edit dl rm
dbus	694	0664	edit dl rm
dbus-accessibility	745	0664	edit dl rm
dbus-accessibility-strict	760	0664	edit dl rm
dbus-network-manager-strict	1403	0664	edit dl rm
dbus-session	747	0664	edit dl rm
dbus-session-strict	1261	0664	edit dl rm
dbus-strict	781	0664	edit dl rm
dconf	442	0664	edit dl rm
devices-usb	652	0664	edit dl rm
devices-usb-read	1014	0664	edit dl rm
dovecot-common	796	0664	edit dl rm
dri-common	542	0664	edit dl rm
dri-enumerate	402	0664	edit dl rm
enchant	2220	0664	edit dl rm
exo-open	1921	0664	edit dl rm
fcitx	558	0664	edit dl rm
fcitx-strict	1246	0664	edit dl rm
fonts	2280	0664	edit dl rm
freedesktop.org	1427	0664	edit dl rm
gio-open	1546	0664	edit dl rm
gnome	3772	0664	edit dl rm
gnupg	459	0664	edit dl rm
golang	310	0664	edit dl rm
groff	1908	0664	edit dl rm
gtk	1722	0664	edit dl rm
gvfs-open	1180	0664	edit dl rm
hosts_access	511	0664	edit dl rm
ibus	750	0664	edit dl rm
kde	3329	0664	edit dl rm
kde-globals-write	413	0664	edit dl rm
kde-icon-cache-write	256	0664	edit dl rm
kde-language-write	575	0664	edit dl rm
kde-open5	3666	0664	edit dl rm
kerberosclient	1623	0664	edit dl rm
ldapclient	856	0664	edit dl rm
libpam-systemd	770	0664	edit dl rm
likewise	595	0664	edit dl rm
mdns	554	0664	edit dl rm
mesa	2049	0664	edit dl rm
mir	694	0664	edit dl rm
mozc	573	0664	edit dl rm
mysql	739	0664	edit dl rm
nameservice	3342	0664	edit dl rm
nameservice-strict	1181	0664	edit dl rm
nis	625	0664	edit dl rm
nss-systemd	1403	0664	edit dl rm
nvidia	1113	0664	edit dl rm
opencl	370	0664	edit dl rm
opencl-common	516	0664	edit dl rm
opencl-intel	673	0664	edit dl rm
opencl-mesa	636	0664	edit dl rm
opencl-nvidia	896	0664	edit dl rm
opencl-pocl	2916	0664	edit dl rm
opengl	477	0664	edit dl rm
openssl	642	0664	edit dl rm
orbit2	197	0664	edit dl rm
p11-kit	999	0664	edit dl rm
perl	974	0664	edit dl rm
php	1184	0664	edit dl rm
php-worker	558	0664	edit dl rm
php5	208	0664	edit dl rm
postfix-common	1356	0664	edit dl rm
private-files	1660	0664	edit dl rm
private-files-strict	1212	0664	edit dl rm
python	2497	0664	edit dl rm
qt5	863	0664	edit dl rm
qt5-compose-cache-write	399	0664	edit dl rm
qt5-settings-write	514	0664	edit dl rm
qt6	863	0664	edit dl rm
qt6-compose-cache-write	399	0664	edit dl rm
qt6-settings-write	515	0664	edit dl rm
recent-documents-write	466	0664	edit dl rm
ruby	1008	0664	edit dl rm
samba	1299	0664	edit dl rm
samba-rpcd	817	0664	edit dl rm
smbpass	581	0664	edit dl rm
snap_browsers	1579	0664	edit dl rm
ssl_certs	1522	0664	edit dl rm
ssl_keys	938	0664	edit dl rm
svn-repositories	1759	0664	edit dl rm
terminfo	296	0664	edit dl rm
transmission-common	4379	0664	edit dl rm
trash	3621	0664	edit dl rm
ubuntu-bittorrent-clients	821	0664	edit dl rm
ubuntu-browsers	1621	0664	edit dl rm
ubuntu-console-browsers	731	0664	edit dl rm
ubuntu-console-email	718	0664	edit dl rm
ubuntu-email	1087	0664	edit dl rm
ubuntu-feed-readers	456	0664	edit dl rm
ubuntu-gnome-terminal	300	0664	edit dl rm
ubuntu-helpers	4019	0664	edit dl rm
ubuntu-konsole	453	0664	edit dl rm
ubuntu-media-players	2352	0664	edit dl rm
ubuntu-unity7-base	2558	0664	edit dl rm
ubuntu-unity7-launcher	311	0664	edit dl rm
ubuntu-unity7-messaging	313	0664	edit dl rm
ubuntu-xterm	346	0664	edit dl rm
user-download	987	0664	edit dl rm
user-mail	944	0664	edit dl rm
user-manpages	1000	0664	edit dl rm
user-tmp	760	0664	edit dl rm
user-write	972	0664	edit dl rm
video	596	0664	edit dl rm
vulkan	624	0664	edit dl rm
wayland	713	0664	edit dl rm
web-data	811	0664	edit dl rm
winbind	882	0664	edit dl rm
wutmp	942	0664	edit dl rm
X	2061	0664	edit dl rm
xad	984	0664	edit dl rm
xdg-desktop	782	0664	edit dl rm
xdg-open	2286	0664	edit dl rm

Edit: /snap/snapd/27710/usr/lib/snapd/apparmor.d/abstractions/transmission-common (4379B)

# vim:syntax=apparmor
# LOGPROF-SUGGEST: no
# Author: Daniel Richard G. <skunk@iSKUNK.ORG>

include <abstractions/base>
  include <abstractions/freedesktop.org>
  include <abstractions/nameservice>
  include <abstractions/openssl>

network inet    dgram,
  network inet6   dgram,
  network netlink dgram,
  network inet    stream,
  network inet6   stream,

dbus (bind)
       bus=session
       name=com.transmissionbt.Transmission,
  dbus (bind)
       bus=session
       name=com.transmissionbt.transmission_*,

dbus (receive)
       bus=session
       path=/ca/desrt/dconf/Writer/user
       interface=ca.desrt.dconf.Writer
       member=Notify,
  dbus (send)
       bus=session
       path=/ca/desrt/dconf/Writer/user
       interface=ca.desrt.dconf.Writer
       member=Change
       peer=(name=ca.desrt.dconf),

dbus (receive)
       bus=accessibility
       path=/org/a11y/atspi/accessible/root
       interface=org.freedesktop.DBus.Properties
       member=Set,
  dbus (send)
       bus=accessibility
       path=/org/a11y/atspi/accessible/root
       interface=org.a11y.atspi.Socket
       member=Embed
       peer=(name=org.a11y.atspi.Registry),
  dbus (send)
       bus=accessibility
       path=/org/a11y/atspi/registry
       interface=org.a11y.atspi.Registry
       member=GetRegisteredEvents
       peer=(name=org.a11y.atspi.Registry),
  dbus (send)
       bus=accessibility
       path=/org/a11y/atspi/registry/deviceeventcontroller
       interface=org.a11y.atspi.DeviceEventController
       member={GetDeviceEventListeners,GetKeystrokeListeners}
       peer=(name=org.a11y.atspi.Registry),

dbus (send)
       bus={accessibility,session}
       path=/org/freedesktop/DBus
       interface=org.freedesktop.DBus
       member={AddMatch,GetNameOwner,Hello,ReleaseName,RemoveMatch,RequestName,StartServiceByName}
       peer=(name=org.freedesktop.DBus),
  dbus (send)
       bus=session
       interface=org.freedesktop.DBus.Introspectable
       path=/StatusNotifierWatcher
       member=Introspect
       peer=(name=org.kde.StatusNotifierWatcher),
  dbus (send)
       bus=session
       interface=org.freedesktop.DBus.Properties
       path=/StatusNotifierWatcher
       member=Get
       peer=(name=org.kde.StatusNotifierWatcher),
  dbus (send)
       bus=session
       interface=org.freedesktop.DBus.Properties
       path=/org/a11y/bus
       member=Get
       peer=(name=org.a11y.Bus),
  dbus (send)
       bus=system
       interface=org.freedesktop.DBus.Properties
       path=/org/freedesktop/hostname1
       member=GetAll,

dbus (send)
       bus=session
       interface=org.freedesktop.Notifications
       path=/org/freedesktop/Notifications
       member={GetCapabilities,Notify},

dbus (send)
       bus=session
       path=/org/gtk/Private/RemoteVolumeMonitor
       interface=org.gtk.Private.RemoteVolumeMonitor
       member={IsSupported,List},
  dbus (send)
       bus=session
       path=/org/gtk/vfs/Daemon
       interface=org.gtk.vfs.Daemon
       member={GetConnection,ListMonitorImplementations},
  dbus (send)
       bus=session
       path=/org/gtk/vfs/mount/[1-9]*
       interface=org.gtk.vfs.Mount
       member={CreateFileMonitor,Enumerate,QueryInfo},
  dbus (receive)
       bus=session
       path=/org/gtk/vfs/mounttracker
       interface=org.gtk.vfs.MountTracker
       member=Mounted,
  dbus (send)
       bus=session
       path=/org/gtk/vfs/mounttracker
       interface=org.gtk.vfs.MountTracker
       member={ListMountableInfo,ListMounts2,LookupMount},

@{PROC}/sys/kernel/random/uuid r,

owner @{PROC}/@{pid}/mountinfo r,
  owner @{PROC}/@{pid}/mounts r,

owner @{run}/user/@{uid}/gvfsd/socket-* rw,

@{etc_ro}/fstab r,

@{system_share_dirs}/hwdata/** r,
  @{system_share_dirs}/lxqt/**   r,

owner /tmp/tr_session_id_* rwk,

# allow a top-level directory listing
  @{HOME}/ r,

owner @{HOME}/.cache/transmission/    w,
  owner @{HOME}/.cache/transmission/**  rw,
  owner @{HOME}/.config/transmission/   w,
  owner @{HOME}/.config/transmission/** rw,

owner @{HOME}/.config/lxqt/lxqt.conf  r,

owner @{HOME}/@{XDG_DOWNLOAD_DIR}/    r,
  owner @{HOME}/@{XDG_DOWNLOAD_DIR}/**  rw,

# exclude these for now
  deny /usr/share/thumbnailers/ r,
  deny @{HOME}/.local/share/gvfs-metadata/** r,
  deny @{HOME}/.config/lxqt/**  rw,

include if exists <abstractions/transmission-common.d>

# vim:syntax=apparmor # LOGPROF-SUGGEST: no # Author: Daniel Richard G. include include include include network inet dgram, network inet6 dgram, network netlink dgram, network inet stream, network inet6 stream, dbus (bind) bus=session name=com.transmissionbt.Transmission, dbus (bind) bus=session name=com.transmissionbt.transmission_*, dbus (receive) bus=session path=/ca/desrt/dconf/Writer/user interface=ca.desrt.dconf.Writer member=Notify, dbus (send) bus=session path=/ca/desrt/dconf/Writer/user interface=ca.desrt.dconf.Writer member=Change peer=(name=ca.desrt.dconf), dbus (receive) bus=accessibility path=/org/a11y/atspi/accessible/root interface=org.freedesktop.DBus.Properties member=Set, dbus (send) bus=accessibility path=/org/a11y/atspi/accessible/root interface=org.a11y.atspi.Socket member=Embed peer=(name=org.a11y.atspi.Registry), dbus (send) bus=accessibility path=/org/a11y/atspi/registry interface=org.a11y.atspi.Registry member=GetRegisteredEvents peer=(name=org.a11y.atspi.Registry), dbus (send) bus=accessibility path=/org/a11y/atspi/registry/deviceeventcontroller interface=org.a11y.atspi.DeviceEventController member={GetDeviceEventListeners,GetKeystrokeListeners} peer=(name=org.a11y.atspi.Registry), dbus (send) bus={accessibility,session} path=/org/freedesktop/DBus interface=org.freedesktop.DBus member={AddMatch,GetNameOwner,Hello,ReleaseName,RemoveMatch,RequestName,StartServiceByName} peer=(name=org.freedesktop.DBus), dbus (send) bus=session interface=org.freedesktop.DBus.Introspectable path=/StatusNotifierWatcher member=Introspect peer=(name=org.kde.StatusNotifierWatcher), dbus (send) bus=session interface=org.freedesktop.DBus.Properties path=/StatusNotifierWatcher member=Get peer=(name=org.kde.StatusNotifierWatcher), dbus (send) bus=session interface=org.freedesktop.DBus.Properties path=/org/a11y/bus member=Get peer=(name=org.a11y.Bus), dbus (send) bus=system interface=org.freedesktop.DBus.Properties path=/org/freedesktop/hostname1 member=GetAll, dbus (send) bus=session interface=org.freedesktop.Notifications path=/org/freedesktop/Notifications member={GetCapabilities,Notify}, dbus (send) bus=session path=/org/gtk/Private/RemoteVolumeMonitor interface=org.gtk.Private.RemoteVolumeMonitor member={IsSupported,List}, dbus (send) bus=session path=/org/gtk/vfs/Daemon interface=org.gtk.vfs.Daemon member={GetConnection,ListMonitorImplementations}, dbus (send) bus=session path=/org/gtk/vfs/mount/[1-9]* interface=org.gtk.vfs.Mount member={CreateFileMonitor,Enumerate,QueryInfo}, dbus (receive) bus=session path=/org/gtk/vfs/mounttracker interface=org.gtk.vfs.MountTracker member=Mounted, dbus (send) bus=session path=/org/gtk/vfs/mounttracker interface=org.gtk.vfs.MountTracker member={ListMountableInfo,ListMounts2,LookupMount}, @{PROC}/sys/kernel/random/uuid r, owner @{PROC}/@{pid}/mountinfo r, owner @{PROC}/@{pid}/mounts r, owner @{run}/user/@{uid}/gvfsd/socket-* rw, @{etc_ro}/fstab r, @{system_share_dirs}/hwdata/** r, @{system_share_dirs}/lxqt/** r, owner /tmp/tr_session_id_* rwk, # allow a top-level directory listing @{HOME}/ r, owner @{HOME}/.cache/transmission/ w, owner @{HOME}/.cache/transmission/** rw, owner @{HOME}/.config/transmission/ w, owner @{HOME}/.config/transmission/** rw, owner @{HOME}/.config/lxqt/lxqt.conf r, owner @{HOME}/@{XDG_DOWNLOAD_DIR}/ r, owner @{HOME}/@{XDG_DOWNLOAD_DIR}/** rw, # exclude these for now deny /usr/share/thumbnailers/ r, deny @{HOME}/.local/share/gvfs-metadata/** r, deny @{HOME}/.config/lxqt/** rw, include if exists