1. # AppArmor profile for Teamviewer
2. # Tested on Debian jessie
3.  
4. #include <tunables/global>
5.  
6. /usr/bin/teamviewer {
7. }
8.  
9. /opt/teamviewer9/tv_bin/TVGuiSlave.64 {
10. }
11.  
12. /opt/teamviewer9/tv_bin/teamviewerd {
13.  
14.     #include <abstractions/base>
15.     #include <abstractions/nameservice>
16.     #include <abstractions/X>
17.  
18.     capability sys_ptrace,
19.     capability dac_override,
20.  
21.     /run/teamviewerd.pid krw,
22.     /var/run/teamviewerd.pid krw,
23.     /opt/teamviewer9/config/global.conf krw,
24.     /opt/teamviewer9/config/global.conf_ krw,
25.     /opt/teamviewer9/logfiles/* krw,
26.  
27.     /tmp/.X11-unix/ r,
28.     /proc/*/environ r,
29.     /sys/devices/system/cpu/ r,
30.  
31.     #/etc/passwd mr,
32.     #/etc/fstab r,
33.     #/etc/machine-id r,
34.  
35. }
36.  
37. /opt/teamviewer9/tv_bin/wine/bin/wineserver {
38.  
39.     #include <abstractions/base>
40.     #include <abstractions/nameservice>
41.  
42.     /opt/teamviewer9/tv_bin/wine/lib/libwine.so.1.0 mr,
43.     /opt/teamviewer9/ r,
44.     /opt/teamviewer9/config/global.conf r,
45.     /opt/teamviewer9/tv_bin/wine/drive_c/TeamViewer/TeamViewer.exe r,
46.     /opt/teamviewer9/tv_bin/wine/drive_c/TeamViewer/TeamViewer_StaticRes.dll r,
47.     /opt/teamviewer9/tv_bin/wine/drive_c/TeamViewer/TeamViewer_Resource_en.dll r,
48.     /opt/teamviewer9/tv_bin/wine/drive_c/TeamViewer/TeamViewer_Resource_de.dll r,
49.     /opt/teamviewer9/tv_bin/wine/drive_c/TeamViewer/TeamViewer_Resource_fr.dll r,
50.  
51.     owner /tmp/** rwkl,
52.  
53.     @{HOME}/.config/teamviewer9/ r,
54.     @{HOME}/.config/teamviewer9/** krw,
55.  
56. }
57.