domain_policy.conf

<kernel>
use_profile 0
use_group 0


<kernel> /sbin/init
use_profile 0
use_group 0


<kernel> /usr/bin/skype
use_profile 3
use_group 0

misc env \*
file read /bin/bash
file read/write /dev/tty
file read /usr/lib/locale/locale-archive
file read /usr/lib/gconv/gconv-modules
file read /usr/bin/skype
file read /usr/lib32/skype/skype
file execute /usr/lib32/skype/skype exec.realpath="/usr/lib32/skype/skype" exec.argv[0]="/usr/lib32/skype/skype"

<kernel> /usr/lib32/skype/skype
use_profile 3
use_group 0

misc env \*
file chmod /home/pf/.Skype/ 0700
file read/write/unlink/truncate @SKYPE_FILES
file create @SKYPE_FILES 0666
file mkdir @SKYPE_DIRS 0777
file rmdir @SKYPE_DIRS
file rename @SKYPE_FILES @SKYPE_FILES
file rename @SKYPE_DIRS @SKYPE_DIRS
file read @ICONS_FILES
file append /dev/snd/pcm\*
file read /usr/share/fonts/\*/\*/\*
file read/write/unlink /tmp/qtsingleapp-\*
file mksock /tmp/qtsingleapp-\* 0755
file read /usr/share/X11/locale/compose.dir
file read /usr/share/X11/locale/en_US.UTF-8/Compose
file read /home/pf/.XCompose
file ioctl /dev/video0 0-0xFFFFFFFFFFFFFFFF
file ioctl /dev/snd/\* 0-0xFFFFFFFFFFFFFFFF
file read/write /dev/snd/\*
file ioctl anon_inode:inotify 0x541B
file read/write/truncate /home/pf/.config/Trolltech.conf
file execute /usr/bin/firefox
file execute /usr/bin/opera
file execute /usr/bin/xdg-open
file execute /usr/bin/gnome-open
network unix stream connect \000/tmp/.ICE-unix/\*
network unix stream connect /tmp/.ICE-unix/\*
network unix stream bind/listen /tmp/qtsingleapp-\*
network unix stream connect \000/tmp/dbus-\*
network inet dgram bind/send 0.0.0.0-255.255.255.255 0-65535
network inet stream bind/listen 0.0.0.0 0-65535
network inet dgram bind 0.0.0.0 0-65535
network inet stream connect 0.0.0.0-255.255.255.255 0-65535
file read /usr/lib32/libv4l/v4l2convert.so
file read /usr/lib32/gconv/gconv-modules
file read /usr/lib32/gconv/UTF-16.so
file read /usr/lib/locale/locale-archive
file read /etc/fonts/fonts.conf
file read /etc/fonts/conf.avail/\*.conf
file read /etc/fonts/conf.d/\*.conf
file read /home/pf/.fontconfig/\*
file read /home/pf/.cache/fontconfig/\*
network unix stream connect \000/tmp/.X11-unix/X0
file read /home/pf/.Xauthority
file read /usr/share/X11/locale/locale.alias
file read /usr/share/X11/locale/locale.dir
file read /usr/share/X11/locale/en_US.UTF-8/XLC_LOCALE
file read /home/pf/.ICEauthority
file read sysfs:/devices/system/cpu/online
file read /dev/urandom
file read /usr/lib32/qt/plugins/imageformats/libq\*.so
file ioctl socket:[family=2:type=2:protocol=17] 0x8927
network inet dgram bind 127.0.0.1 0
file read proc:/sys/kernel/ostype
file read proc:/sys/kernel/osrelease
file ioctl socket:[family=2:type=2:protocol=17] 0x8912
file read/write /dev/video0
file read sysfs:/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.5/1-1.5:1.0/video4linux/video0/dev
file read sysfs:/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.5/1-1.5:1.0/modalias
file read sysfs:/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.5/speed
file read sysfs:/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.5/idVendor
file read sysfs:/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.5/idProduct
file read proc:/stat
file read sysfs:/devices/system/cpu/cpu0/cpufreq/scaling_cur_freq
file read sysfs:/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
network unix stream connect /var/run/nscd/socket
file read /etc/nsswitch.conf
file read /etc/passwd
file read /usr/lib32/qt/plugins/bearer/libq\*bearer.so
network unix stream connect /var/run/dbus/system_bus_socket
file ioctl socket:[family=1:type=2:protocol=0] 0x8933
file ioctl socket:[family=1:type=2:protocol=0] 0x8910
file read /usr/lib32/skype/skype
file read proc:/cpuinfo
file read /etc/resolv.conf
file read /etc/host.conf
file read /etc/hosts
file ioctl socket:[family=2:type=2:protocol=17] 0x541B
file ioctl socket:[family=2:type=1:protocol=6] 0x541B
file read /usr/share/alsa/alsa.conf
file read /usr/share/alsa/cards/\*.conf
file read /usr/share/alsa/pcm/\*.conf
file read /etc/group

<kernel> /usr/lib32/skype/skype /usr/bin/xdg-open
use_profile 0
use_group 0

<kernel> /usr/lib32/skype/skype /usr/bin/gnome-open
use_profile 0
use_group 0