# Last Modified: Fri Oct 13 05:01:46 2023
include <tunables/global>

/**/PyBitmessage*.AppImage {
  include <abstractions/apparmor_api/find_mountpoint>
  include <abstractions/base>
  include <abstractions/fonts>
  include <abstractions/openssl>
  include <abstractions/user-tmp>

  capability dac_read_search,
  capability sys_admin,

  network inet dgram,
  network inet stream,
  network inet6 dgram,
  network inet6 stream,
  network netlink raw,

  mount fstype=fuse.PyBitmessage*.AppImage options=(ro, nosuid, nodev),
  umount,

  /dev/fuse rw,
  /etc/fuse.conf r,
  /etc/gai.conf r,
  /etc/host.conf r,
  /etc/hosts r,
  /etc/nsswitch.conf r,
  /etc/python2.7/sitecustomize.py r,
  /etc/resolv.conf r,
  /etc/xdg/Trolltech.conf rk,
  /proc/filesystems r,
  /sys/devices/system/cpu/online r,

  /tmp/*/*/.mount_PyBitm*/ r,
  /tmp/*/*/.mount_PyBitm*/** r,
  /tmp/*/*/.mount_PyBitm*/AppRun mrix,
  /tmp/*/*/.mount_PyBitm*/lib/x86_64-linux-gnu/lib*.so* mr,
  /tmp/*/*/.mount_PyBitm*/usr/bin/pybitmessage mrix,
  /tmp/*/*/.mount_PyBitm*/usr/bin/qt.conf mrk,
  /tmp/*/*/.mount_PyBitm*/usr/lib/python2.7/**.so mr,
  /tmp/*/*/.mount_PyBitm*/usr/bin/python2.7 rix,
  /tmp/*/*/.mount_PyBitm*/usr/lib/x86_64-linux-gnu/**/lib*.so* mr,
  /tmp/*/*/.mount_PyBitm*/usr/lib/x86_64-linux-gnu/lib*.so* mr,
  /tmp/*/*/.mount_PyBitm*/lib/x86_64/lib*.so mr,
  /proc/*/cmdline r,
  /usr/share/themes/** r,
  owner /run/*/*/sni-qt_python2*/ rw,
  owner /run/*/*/sni-qt_python2*/icons/ rw,

  /tmp/.mount_PyBitm*/ r,
  /tmp/.mount_PyBitm*/** r,
  /tmp/.mount_PyBitm*/AppRun mrix,
  /tmp/.mount_PyBitm*/lib/x86_64-linux-gnu/lib*.so* mr,
  /tmp/.mount_PyBitm*/usr/bin/pybitmessage mrix,
  /tmp/.mount_PyBitm*/usr/bin/qt.conf mrk,
  /tmp/.mount_PyBitm*/usr/lib/python2.7/**.so mr,
  /tmp/.mount_PyBitm*/usr/lib/x86_64-linux-gnu/**/lib*.so* mr,
  /tmp/.mount_PyBitm*/usr/lib/x86_64-linux-gnu/lib*.so* mr,
  /usr/bin/dash mrix,
  /usr/bin/fusermount mrix,
  /usr/bin/fusermount3 mrix,
  /usr/bin/python2.7 r,
  /usr/bin/stat mrix,
  /usr/sbin/ldconfig mrix,
  /usr/share/icons/ r,
  /usr/share/icons/Adwaita/* r,
  /usr/share/icons/Adwaita/** r,
  /usr/share/icons/gnome/* r,
  /usr/share/icons/hicolor/* rk,
  /usr/share/mime/* r,
  /usr/share/pixmaps/ r,
  /usr/share/themes/Adwaita/** r,
  owner /**/PyBitmessage*.AppImage mr,
  owner /etc/passwd r,
  owner @{HOME}/tmp* w,
  owner /run/systemd/userdb/ r,
  owner /run/*/*/sni-qt_python2_*/ rw,
  owner /run/*/*/sni-qt_python2_*/icons/ rw,
  owner /usr/local/share/fonts/** r,
  owner @{HOME}/.cache/fontconfig/*-le64.cache-7 r,
  owner @{HOME}/.config/PyBitmessage/ r,
  owner @{HOME}/.config/PyBitmessage/debug.log w,
  owner @{HOME}/.config/PyBitmessage/keys.dat rw,
  owner @{HOME}/.config/PyBitmessage/keys.dat.*.bak w,
  owner @{HOME}/.config/PyBitmessage/knownnodes.dat rw,
  owner @{HOME}/.config/PyBitmessage/messages.dat rwk,
  owner @{HOME}/.config/PyBitmessage/messages.dat-journal rw,
  owner @{HOME}/.config/PyBitmessage/pybitmessageqt.conf rwk,
  owner @{HOME}/.config/PyBitmessage/singleton.lock rwk,
  owner @{HOME}/.config/Trolltech.conf rwk,

}