felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(tunable): add p_dbus_* variables.

Browse source 
This allow for better integration for system when dbus is not confined.
This commit is contained in:
Alexandre Pujol 2024-11-13 12:23:36 +00:00
parent 7c148fca95
commit 24ea5f0a3a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
33 changed files with 47 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/systemd/busctl
View file

@ -33,7 +33,7 @@ profile busctl @{exec_path} {
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus.Monitoring
member=BecomeMonitor
peer=(name=org.freedesktop.DBus, label=dbus-system),
peer=(name=org.freedesktop.DBus, label="@{p_dbus_system}"),
@{exec_path} mr,

2
apparmor.d/groups/systemd/systemd-hostnamed
View file

@ -25,7 +25,7 @@ profile systemd-hostnamed @{exec_path} flags=(attach_disconnected) {
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member=GetConnectionUnixUser
peer=(name=org.freedesktop.DBus, label=dbus-system),
peer=(name=org.freedesktop.DBus, label="@{p_dbus_system}"),
@{exec_path} mr,

2
apparmor.d/groups/systemd/systemd-logind
View file

@ -43,7 +43,7 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected) {
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={GetConnectionUnixUser,GetConnectionUnixProcessID,GetConnectionCredentials}
peer=(name=org.freedesktop.DBus, label=dbus-system),
peer=(name=org.freedesktop.DBus, label="@{p_dbus_system}"),
@{exec_path} mr,

2
apparmor.d/groups/systemd/systemd-resolved
View file

@ -34,7 +34,7 @@ profile systemd-resolved @{exec_path} flags=(attach_disconnected) {
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={GetConnectionUnixUser,GetConnectionUnixProcessID}
peer=(name=org.freedesktop.DBus, label=dbus-system),
peer=(name=org.freedesktop.DBus, label="@{p_dbus_system}"),
@{exec_path} mr,