# AppArmor profile for Teamviewer
# Tested on Debian jessie

#include <tunables/global>

/usr/bin/teamviewer {
}

/opt/teamviewer9/tv_bin/TVGuiSlave.64 {
}

/opt/teamviewer9/tv_bin/teamviewerd {

    #include <abstractions/base>
    #include <abstractions/nameservice>
    #include <abstractions/X>

    capability sys_ptrace,
    capability dac_override,

    /run/teamviewerd.pid krw,
    /var/run/teamviewerd.pid krw,
    /opt/teamviewer9/config/global.conf krw,
    /opt/teamviewer9/config/global.conf_ krw,
    /opt/teamviewer9/logfiles/* krw,

    /tmp/.X11-unix/ r,
    /proc/*/environ r,
    /sys/devices/system/cpu/ r,

    #/etc/passwd mr,
    #/etc/fstab r,
    #/etc/machine-id r,

}

/opt/teamviewer9/tv_bin/wine/bin/wineserver {

    #include <abstractions/base>
    #include <abstractions/nameservice>

    /opt/teamviewer9/tv_bin/wine/lib/libwine.so.1.0 mr,
    /opt/teamviewer9/ r,
    /opt/teamviewer9/config/global.conf r,
    /opt/teamviewer9/tv_bin/wine/drive_c/TeamViewer/TeamViewer.exe r,
    /opt/teamviewer9/tv_bin/wine/drive_c/TeamViewer/TeamViewer_StaticRes.dll r,
    /opt/teamviewer9/tv_bin/wine/drive_c/TeamViewer/TeamViewer_Resource_en.dll r,
    /opt/teamviewer9/tv_bin/wine/drive_c/TeamViewer/TeamViewer_Resource_de.dll r,
    /opt/teamviewer9/tv_bin/wine/drive_c/TeamViewer/TeamViewer_Resource_fr.dll r,

    owner /tmp/** rwkl,

    @{HOME}/.config/teamviewer9/ r,
    @{HOME}/.config/teamviewer9/** krw,

}