过来Skype for Linux的用户利用检测程序动作的AppArmor软件发现,软件在读取Mozilla FireFox的一系列文件,包括密码、配置、扩展、插件以及在/etc中绝大多数的文件,这一问题从1.4.0.94--1.4.0.99版本中都存在,让人疑惑的是Skype要这些内容干什么?再没弄清楚之前,这位用户还是将Skype用规则关进了小黑屋.查看:Skype 1.4.0.99 reads /etc/ passwd and firefox profile!

更多记录:

...
Aug 25 01:34:02 desknote kernel: [ 9116.625673] audit(1188002042.632:13467): REJECTING r access to /etc/ passwd (skype(8470) profile /usr/bin/skype active /usr/bin/skype)
...

# vim:syntax=apparmor
# Last Modified: Sat Aug 25 00:37:50 2007
#include <tunables/global>

/usr/bin/skype {
  #include <abstractions/base>

  /dev/snd/controlC0 rw,
  /dev/snd/pcmC0D0c rw,
  /dev/snd/pcmC0D0p rw,
  /dev/snd/pcmC0D1c rw,
  /dev/snd/timer r,
  /home/*/.Skype rw,
  /home/*/.Skype/** rw,
  /home/*/.config/Trolltech.conf r,
  /home/*/.fontconfig/* r,
  /home/*/.fonts/* r,
  /home/*/.Xauthority r,
  /home/*/.kde/share/config/kioslaverc r,
  /home/*/.ICEauthority r,
  /home/*/.mozilla r,
  /home/*/.mozilla/plugins r,
  /home/*/.mozilla/firefox r,
  /usr/bin/skype mr,
  /usr/share/alsa/** r,
  /usr/share/fonts/** r,
  /usr/share/icons/** r,
  /usr/share/locale-langpack/** r,
  /usr/share/skype/** r,
  /usr/share/X11/XKeysymDB r,
  /var/cache/fontconfig/* r,
  /var/lib/defoma/fontconfig.d/fonts.conf r,
  /tmp/** rw,
  /etc/fonts/** r,
  /etc/resolv.conf r,
  /etc/hosts r,
  /etc/nsswitch.conf r,
  /etc/gai.conf r,
  /etc/ passwd r,
  /etc/group r,
  /proc/1/cmdline r,
  /proc/interrupts r,
}