felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): add some dbus access to bwrap-app.

Browse source 
See #302
This commit is contained in:
Alexandre Pujol 2024-03-03 23:15:19 +00:00
parent b91cf4da41
commit 0533e03756
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
apparmor.d/abstractions/bwrap-app
View file

@ -9,9 +9,14 @@
# application beeing confined. # application beeing confined.
include <abstractions/audio> include <abstractions/audio>
include <abstractions/consoles> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.a11y>
include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/consoles>
include <abstractions/deny-sensitive-home> include <abstractions/deny-sensitive-home>
include <abstractions/desktop> include <abstractions/desktop>
include <abstractions/devices-usb> include <abstractions/devices-usb>
@ -24,6 +29,7 @@
include <abstractions/ssl_certs> include <abstractions/ssl_certs>
include <abstractions/video> include <abstractions/video>
dbus bus=accessibility,
dbus bus=session, dbus bus=session,
dbus bus=system, dbus bus=system,
@ -87,6 +93,7 @@
@{PROC}/bus/pci/devices r, @{PROC}/bus/pci/devices r,
@{PROC}/driver/** r, @{PROC}/driver/** r,
@{PROC}/sys/fs/inotify/max_user_watches r, @{PROC}/sys/fs/inotify/max_user_watches r,
@{PROC}/sys/kernel/core_pattern r,
@{PROC}/sys/kernel/osrelease r, @{PROC}/sys/kernel/osrelease r,
@{PROC}/sys/kernel/pid_max r, @{PROC}/sys/kernel/pid_max r,
@{PROC}/sys/kernel/yama/ptrace_scope r, @{PROC}/sys/kernel/yama/ptrace_scope r,