# Last Modified: Sat Apr 20 12:21:32 2024
abi <abi/3.0>,

include <tunables/global>

/opt/brave.com/brave/brave {
  include <abstractions/base>
  include <abstractions/bash>
  include <abstractions/gnome>
  include <abstractions/gvfs-open>
  include <abstractions/kde-open5>
  include <abstractions/postfix-common>
  include <abstractions/ubuntu-browsers.d/multimedia>
  include <abstractions/ubuntu-browsers.d/ubuntu-integration>
  include <abstractions/ubuntu-konsole>
  include <abstractions/vulkan>

  capability sys_admin,

  signal send set=term peer=/opt/brave.com/brave/chrome-sandbox//null-/opt/brave.com/brave/brave,

  ptrace read peer=/opt/brave.com/brave/brave//null-/opt/brave.com/brave/brave,
  ptrace read peer=/opt/brave.com/brave/brave//null-/usr/bin/xdg-settings,
  ptrace trace peer=/opt/brave.com/brave/brave,

  /dev/ r,
  /dev/disk/by-uuid/ r,
  /etc/*.alias r,
  /etc/*.cache r,
  /etc/*.conf r,
  /etc/hosts r,
  /etc/passwd r,
  /opt/ r,
  /opt/*.com/brave/*.bin r,
  /opt/*.com/brave/*.dat r,
  /opt/*.com/brave/*.pak r,
  /opt/brave.com/brave/* mr,
  /opt/brave.com/brave/** r,
  /opt/brave.com/brave/brave mrix,
  /opt/brave.com/brave/chrome-sandbox mrix,
  /opt/brave.com/brave/chrome_crashpad_handler mrix,
  /opt/brave.com/brave/locales/* r,
  /proc/ r,
  /proc/*/stat r,
  /proc/*/statm r,
  /proc/*/task/*/status r,
  /proc/cpuinfo r,
  /proc/filesystems r,
  /proc/meminfo r,
  /proc/pressure/cpu r,
  /proc/pressure/io r,
  /proc/pressure/memory r,
  /proc/self/exe mrix,
  /proc/stat r,
  /proc/sys/crypto/fips_enabled r,
  /proc/sys/dev/i915/perf_stream_paranoid r,
  /proc/sys/fs/inotify/* r,
  /proc/sys/kernel/yama/ptrace_scope r,
  /run/pulseaudio-enable-autospawn r,
  /sys/bus/ r,
  /sys/bus/**/ r,
  /sys/bus/coreboot/*/ r,
  /sys/bus/cpu/*/ r,
  /sys/bus/dax/*/ r,
  /sys/bus/gpio/*/ r,
  /sys/bus/hdaudio/*/ r,
  /sys/bus/machinecheck/*/ r,
  /sys/bus/mei/*/ r,
  /sys/bus/mmc/*/ r,
  /sys/bus/parport/*/ r,
  /sys/bus/platform/*/ r,
  /sys/bus/rmi4/*/ r,
  /sys/bus/serio/*/ r,
  /sys/bus/xen-backend/*/ r,
  /sys/bus/xen/*/ r,
  /sys/class/ r,
  /sys/class/*/ r,
  /sys/devices/pci0000:00/** r,
  /sys/devices/system/** r,
  /sys/devices/virtual/** r,
  /sys/devices/virtual/tty/** r,
  /usr/bin/basename mrix,
  /usr/bin/cut mrix,
  /usr/bin/dash ix,
  /usr/bin/grep mrix,
  /usr/bin/kreadconfig5 mrix,
  /usr/bin/readlink mrix,
  /usr/bin/which.debianutils mrix,
  /usr/bin/xdg-* mrix,
  /usr/share/icons/** r,
  /usr/share/icons/*/*.theme r,
  /var/lib/flatpak/exports/share/applications/ r,
  owner /dev/shm/.org.chromium.* rw,
  owner /etc/*.txt rw,
  owner /home/*/.cache/*.kcache rw,
  owner /home/*/.cache/BraveSoftware/Brave-Browser/** rw,
  owner /home/*/.cache/fontconfig/* r,
  owner /home/*/.cache/mesa_shader_cache/** rwk,
  owner /home/*/.cache/mesa_shader_cache/index rw,
  owner /home/*/.config/*.dirs r,
  owner /home/*/.config/BraveSoftware/ r,
  owner /home/*/.config/BraveSoftware/** mr,
  owner /home/*/.config/BraveSoftware/** rwk,
  owner /home/*/.config/dconf/* r,
  owner /home/*/.config/gtk-3.0/*.css r,
  owner /home/*/.config/gtk-3.0/*.ini r,
  owner /home/*/.config/kdedefaults/* r,
  owner /home/*/.config/kdeglobals r,
  owner /home/*/.config/pulse/* rk,
  owner /home/*/.local/share/applications/ r,
  owner /home/*/.local/share/icons/*/*.theme r,
  owner /home/*/.local/share/mime/* r,
  owner /home/*/.pki/*/*.db rwk,
  owner /home/*/.pki/*/*.txt r,
  owner /home/*/Desktop/opt.brave.com.* r,
  owner /opt/brave.com/brave/extensions/ rw,
  owner /proc/*/*/ r,
  owner /proc/*/clear_refs rw,
  owner /proc/*/cmdline r,
  owner /proc/*/gid_map rw,
  owner /proc/*/mem r,
  owner /proc/*/oom_score_adj rw,
  owner /proc/*/setgroups rw,
  owner /proc/*/status r,
  owner /proc/*/task/*/comm r,
  owner /proc/*/uid_map rw,
  owner /run/user/*/pulse/ r,
  owner /run/user/*/xauth* r,

}