felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(dbus): rename dbus abstractions.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-06 19:38:47 +00:00
parent 401606b1aa
commit 3425419f0e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
112 changed files with 263 additions and 223 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/freedesktop/accounts-daemon
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,accountsservice/}accounts-daemon
profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/polkit>
include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/dbus-strict>
include <abstractions/nameservice-strict>
include <abstractions/wutmp>

4
apparmor.d/groups/freedesktop/at-spi2-registryd
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{lib}/{,at-spi2{,-core}/}at-spi2-registryd
profile at-spi2-registryd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/atspi>
include <abstractions/bus/session-manager>
include <abstractions/bus/org.a11y>
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict>
include <abstractions/nameservice-strict>

2
apparmor.d/groups/freedesktop/colord
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,colord/}colord
profile colord @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/polkit>
include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/dbus-strict>
include <abstractions/devices-usb>
include <abstractions/nameservice-strict>

2
apparmor.d/groups/freedesktop/colord-sane
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,colord/}colord-sane
profile colord-sane @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/avahi>
include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/dbus-strict>
include <abstractions/devices-usb>
include <abstractions/openssl>

8
apparmor.d/groups/freedesktop/geoclue
View file

@ -9,10 +9,10 @@ include <tunables/global>
@{exec_path} = @{lib}/geoclue @{lib}/geoclue-2.0/demos/agent
profile geoclue @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/avahi>
include <abstractions/bus/modem-manager>
include <abstractions/bus/network-manager>
include <abstractions/bus/wpa-supplicant>
include <abstractions/bus/fi.w1.wpa_supplicant1>
include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/bus/org.freedesktop.ModemManager1>
include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/dbus-strict>
include <abstractions/nameservice-strict>
include <abstractions/p11-kit>

2
apparmor.d/groups/freedesktop/pipewire
View file

@ -11,7 +11,7 @@ include <tunables/global>
profile pipewire @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/bus/rtkit>
include <abstractions/bus/org.freedesktop.RealtimeKit1>
include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict>
include <abstractions/nameservice-strict>

2
apparmor.d/groups/freedesktop/pipewire-media-session
View file

@ -11,7 +11,7 @@ include <tunables/global>
profile pipewire-media-session @{exec_path} {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/bus/rtkit>
include <abstractions/bus/org.freedesktop.RealtimeKit1>
include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict>
include <abstractions/devices-usb>

8
apparmor.d/groups/freedesktop/pulseaudio
View file

@ -12,10 +12,10 @@ include <tunables/global>
profile pulseaudio @{exec_path} {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/bus/avahi>
include <abstractions/bus/bluetooth>
include <abstractions/bus/hostname>
include <abstractions/bus/rtkit>
include <abstractions/bus/org.bluez>
include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/bus/org.freedesktop.hostname1>
include <abstractions/bus/org.freedesktop.RealtimeKit1>
include <abstractions/consoles>
include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict>

4
apparmor.d/groups/freedesktop/upowerd
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{lib}/{,upower/}upowerd
profile upowerd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/bluetooth>
include <abstractions/bus/login>
include <abstractions/bus/org.bluez>
include <abstractions/bus/org.freedesktop.login1>
include <abstractions/dbus-strict>
include <abstractions/devices-usb>

6
apparmor.d/groups/freedesktop/xdg-dbus-proxy
View file

@ -9,9 +9,9 @@ include <tunables/global>
@{exec_path} = @{bin}/xdg-dbus-proxy
profile xdg-dbus-proxy @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/avahi>
include <abstractions/bus/desktop>
include <abstractions/bus/network-manager>
include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict>

7
apparmor.d/groups/freedesktop/xdg-desktop-portal-gnome
View file

@ -9,9 +9,10 @@ include <tunables/global>
@{exec_path} = @{lib}/xdg-desktop-portal-gnome
profile xdg-desktop-portal-gnome @{exec_path} {
include <abstractions/base>
include <abstractions/bus/account-daemon>
include <abstractions/bus/desktop>
include <abstractions/bus/vfs/mount>
include <abstractions/bus/org.freedesktop.Accounts>
include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/org.gnome.Mutter.DisplayConfig>
include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict>
include <abstractions/dconf-write>

14
apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk
View file

@ -9,13 +9,13 @@ include <tunables/global>
@{exec_path} = @{lib}/xdg-desktop-portal-gtk
profile xdg-desktop-portal-gtk @{exec_path} {
include <abstractions/base>
include <abstractions/bus/account-daemon>
include <abstractions/bus/atspi>
include <abstractions/bus/desktop>
include <abstractions/bus/gnome-screensaver>
include <abstractions/bus/network-manager>
include <abstractions/bus/session-manager>
include <abstractions/bus/vfs/mount>
include <abstractions/bus/org.a11y>
include <abstractions/bus/org.freedesktop.Accounts>
include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/org.gnome.ScreenSaver>
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict>

1
apparmor.d/groups/freedesktop/xdg-document-portal
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/xdg-document-portal
profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/org.freedesktop.impl.portal.PermissionStore>
include <abstractions/dbus-session-strict>
capability sys_nice,

2
apparmor.d/groups/freedesktop/xorg
View file

@ -13,7 +13,7 @@ include <tunables/global>
@{exec_path} += @{lib}/xorg/Xorg{,.wrap}
profile xorg @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/login-session>
include <abstractions/bus/org.freedesktop.login1.Session>
include <abstractions/dbus-strict>
include <abstractions/fontconfig-cache-read>
include <abstractions/fonts>