# vim:syntax=apparmor
#
# abstraction for allowing access to media players in Ubuntu
#
# Users of this abstraction need to #include the ubuntu-helpers abstraction
# in the toplevel profile. Eg:
# #include <abstractions/ubuntu-helpers>

/usr/bin/amarok Cxr -> sanitized_helper,
/usr/bin/audacious2 Cxr -> sanitized_helper,
/usr/bin/audacity Cxr -> sanitized_helper,
/usr/bin/bangarang Cxr -> sanitized_helper,
/usr/bin/banshee Cxr -> sanitized_helper,
/usr/bin/banshee-1 Cxr -> sanitized_helper,
/usr/bin/decibel Cxr -> sanitized_helper,
/usr/bin/dragon Cxr -> sanitized_helper,
/usr/bin/esperanza Cxr -> sanitized_helper,
/usr/bin/exaile Cxr -> sanitized_helper,
/usr/bin/freevo Cxr -> sanitized_helper,
/usr/bin/gmerlin Cxr -> sanitized_helper,
/usr/bin/gxmms Cxr -> sanitized_helper,
/usr/bin/gxmms2 Cxr -> sanitized_helper,
/usr/bin/hornsey Cxr -> sanitized_helper,
/usr/bin/jlgui Cxr -> sanitized_helper,
/usr/bin/juk Cxr -> sanitized_helper,
/usr/bin/kaffeine Cxr -> sanitized_helper,
/usr/bin/listen Cxr -> sanitized_helper,
/usr/share/minirok/minirok.py Cxr -> sanitized_helper,

# mplayer
/etc/mplayerplug-in.conf r,
/usr/bin/gmplayer Cxr -> sanitized_helper,
/usr/bin/gnome-mplayer Cxr -> sanitized_helper,
/usr/bin/kmplayer Cxr -> sanitized_helper,
/usr/bin/mplayer Cxr -> sanitized_helper,
/usr/bin/smplayer Cxr -> sanitized_helper,

/usr/bin/muine Cxr -> sanitized_helper,
/usr/bin/potamus Cxr -> sanitized_helper,
/usr/bin/promoe Cxr -> sanitized_helper,
/usr/bin/qmmp Cxr -> sanitized_helper,
/usr/bin/quodlibet Cxr -> sanitized_helper,
/usr/bin/rhythmbox Cxr -> sanitized_helper,
/usr/bin/strange-quark Cxr -> sanitized_helper,
/usr/bin/swfdec-player Cxr -> sanitized_helper,
/usr/bin/timidity Cxr -> sanitized_helper,
/usr/lib/totem/** ixr,
/usr/bin/totem-gstreamer Cxr -> sanitized_helper,
/usr/bin/totem-xine Cxr -> sanitized_helper,
/usr/bin/totem Cxr -> sanitized_helper,
/usr/bin/vlc Cxr -> sanitized_helper,
/usr/bin/xfmedia Cxr -> sanitized_helper,
/usr/bin/xmms Cxr -> sanitized_helper,

# gnash
/usr/bin/gtk-gnash ixr,
/etc/gnashrc r,
/etc/gnashpluginrc r,
owner @{HOME}/.gnash/ rw,
owner @{HOME}/.gnash/** rw,