felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(dbus): rewrite some dbus rules (9).

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-06 19:55:48 +00:00
parent 3425419f0e
commit 1307250250
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
34 changed files with 63 additions and 380 deletions
Download patch file Download diff file Expand all files Collapse all files

20
apparmor.d/profiles-a-f/evince
View file

@ -26,20 +26,18 @@ profile evince @{exec_path} {
deny network inet,
deny network inet6,
dbus bind bus=session name=org.gnome.evince.Daemon,
dbus send bus=session path=/org/gnome/evince/Daemon
interface=org.gnome.evince.Daemon
peer=(name=org.gnome.evince.Daemon),
dbus receive bus=session path=/org/gnome/evince/
peer=(name="{org.gnome.evince.Daemon,org.freedesktop.DBus,:*}",
label=@{profile_name}), # all interfaces and members
dbus send bus=session path=/org/gtk/vfs/metadata
interface=org.gtk.vfs.Metadata
member={Set,GetTreeFromDevice}
peer=(name=:*),
dbus send bus=session path=/org/gnome/evince/Daemon
interface=org.gnome.evince.Daemon
member=RegisterDocument
peer=(name=org.gnome.evince.Daemon), # no peer's labels
dbus (send, receive) bus=session path=/org/gnome/evince/{,**}
peer=(name="{org.gnome.evince.Daemon,org.freedesktop.DBus,:*}", label=@{profile_name}), # all interfaces and members
dbus bind bus=session name=org.gnome.evince.Daemon,
peer=(name=:*, label=gvfsd-metadata),
@{exec_path} rix,