felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(dbus): rewrite some dbus rules (4).

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-03 16:53:25 +00:00
parent 2af165403a
commit 1edf507abf
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
16 changed files with 74 additions and 129 deletions
Download patch file Download diff file Expand all files Collapse all files

36
apparmor.d/profiles-s-z/udisksd
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,udisks2/}udisksd
profile udisksd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/login>
include <abstractions/bus/polkit>
include <abstractions/dbus-strict>
include <abstractions/disks-write>
@ -58,6 +59,14 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
signal (receive) set=(int) peer=@{systemd},
dbus bind bus=system name=org.freedesktop.UDisks2,
dbus receive bus=system path=/org/freedesktop/UDisks2{,/**}
interface=org.freedesktop.UDisks2.*
peer=(name="{:*,org.freedesktop.DBus}"),
dbus receive bus=system path=/org/freedesktop/UDisks2{,/**}
interface=org.freedesktop.DBus.{Properties,ObjectManager}
peer=(name=:*),
dbus (send,receive) bus=system path=/
interface=org.freedesktop.DBus.Introspectable
member=Introspect,
@ -66,37 +75,16 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
interface=org.freedesktop.DBus.Properties
member=Get,
dbus (send,receive) bus=system path=/org/freedesktop/UDisks2{,/**}
interface=org.freedesktop.{DBus*,UDisks2*},
dbus receive bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit1.Authority
member=Changed
peer=(name=:*, label=polkitd),
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={ReleaseName,GetConnectionUnixUser,RequestName},
dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login1.Manager
member=Inhibit,
member={GetConnectionUnixUser,GetConnectionUnixProcessID}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
dbus receive bus=system path=/org/freedesktop/login1*
interface=org.freedesktop.login1*.Manager
interface=org.freedesktop.login1.Manager
member={PrepareForSleep,PrepareForShutdown}
peer=(name=:*, label=systemd-logind),
dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.DBus.Properties
member=GetAll,
dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit1.Authority
member=CheckAuthorization,
dbus bind bus=system name=org.freedesktop.UDisks2,
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,