# vim:syntax=apparmor

#include <tunables/global>

/usr/bin/totem-video-thumbnailer {
  #include <abstractions/totem>

  # Allow read on anything in @{HOME}. Lenient, but private-files-strict is in
  # effect.
  #include <abstractions/private-files-strict>
  owner @{HOME}/** r,

  # Not needed by nautilus, but maybe other applications
  owner /**.[pP][nN][gG] w,
  owner /**.[jJ][pP]{,[eE]}[gG] w,
}

/usr/bin/totem-audio-preview {
  #include <abstractions/totem>
  #include <abstractions/audio>

  # Allow read on anything in @{HOME}. Lenient, but private-files-strict is in
  # effect.
  #include <abstractions/private-files-strict>
  owner @{HOME}/** r,
}