# vim:syntax=apparmor
# Profile for restricting lightdm remote session for UCCS Configuration
# Based on the Guest Account Apparmor script from:

#include <tunables/global>

/usr/lib/x86_64-linux-gnu/lightdm-remote-session-uccsconfigure/uccsconfigure-session-wrapper {
  # Most applications are confined via the main abstraction
  #include <abstractions/lightdm>

  # chromium-browser needs special confinement due to its sandboxing
  #include <abstractions/lightdm_chromium-browser>
}
