# vim:syntax=apparmor
# Profile for restricting lightdm remote session for FreeRDP
# Based on the Guest Account Apparmor script from:

#include <tunables/global>

/usr/lib/x86_64-linux-gnu/lightdm-remote-session-freerdp/freerdp-session-wrapper {
  # Most applications are confined via the main abstraction
  #include <abstractions/lightdm>

  # chromium-browser needs special confinement due to its sandboxing
  #include <abstractions/lightdm_chromium-browser>
}
