felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): improve dbus related rules.

Browse source
This commit is contained in:
Alexandre Pujol 2023-08-27 14:46:49 +01:00
parent 2db6b12a9b
commit 19331acaa9
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
12 changed files with 70 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

13
apparmor.d/profiles-s-z/udisksd
View file

@ -65,8 +65,8 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
dbus (send,receive) bus=system path=/org/freedesktop/UDisks2{,/**}
interface=org.freedesktop.{DBus*,UDisks2*},
dbus receive bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority
interface=org.freedesktop.PolicyKit[0-9].Authority
dbus receive bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit1.Authority
member=Changed,
dbus send bus=system path=/org/freedesktop/DBus
@ -82,16 +82,15 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
member={PrepareForSleep,PrepareForShutdown}
peer=(name=:*, label=systemd-logind),
dbus send bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority
dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.DBus.Properties
member=GetAll,
dbus send bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority
interface=org.freedesktop.PolicyKit[0-9].Authority
dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit1.Authority
member=CheckAuthorization,
dbus bind bus=system
name=org.freedesktop.UDisks2,
dbus bind bus=system name=org.freedesktop.UDisks2,
@{exec_path} mr,