felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refractor(dbus): use the new bus-{systemd,session} abstractions.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-06 21:56:59 +00:00
parent 9861f005d4
commit 1cf268b770
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
187 changed files with 288 additions and 287 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/network/ModemManager
View file

@ -9,10 +9,10 @@ include <tunables/global>
@{exec_path} = @{bin}/ModemManager
profile ModemManager @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/consoles>
include <abstractions/dbus-strict>
include <abstractions/devices-usb>
include <abstractions/dri-enumerate>

4
apparmor.d/groups/network/networkd-dispatcher
View file

@ -9,10 +9,10 @@ include <tunables/global>
@{exec_path} = @{bin}/networkd-dispatcher
profile networkd-dispatcher @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-strict>
include <abstractions/bus-system>
include <abstractions/nameservice-strict>
include <abstractions/python>
include <abstractions/openssl>
include <abstractions/python>
dbus receive bus=system path=/org/freedesktop/network1{,/link/*}
interface=org.freedesktop.DBus.Properties

2
apparmor.d/groups/network/nm-dispatcher
View file

@ -11,7 +11,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,NetworkManager/}nm-dispatcher
profile nm-dispatcher @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-strict>
include <abstractions/bus-system>
include <abstractions/nameservice-strict>
capability net_admin,

3
apparmor.d/groups/network/nm-online
View file

@ -9,7 +9,8 @@ include <tunables/global>
@{exec_path} = @{bin}/nm-online
profile nm-online @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-strict>
include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.NetworkManager>
@{exec_path} mr,

2
apparmor.d/groups/network/tailscaled
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/tailscaled
profile tailscaled @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-strict>
include <abstractions/bus-system>
include <abstractions/nameservice-strict>
include <abstractions/ssl_certs>