felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(dbus): rewrite some dbus rules (7).

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-05 21:01:26 +00:00
parent 081c8a4fa1
commit 538ec25001
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
43 changed files with 221 additions and 377 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/profiles-a-f/cups-pk-helper-mechanism
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} += @{lib}/@{multiarch}/cups-pk-helper-mechanism
profile cups-pk-helper-mechanism @{exec_path} {
include <abstractions/base>
include <abstractions/bus/polkit>
include <abstractions/dbus-strict>
include <abstractions/nameservice-strict>
@ -19,11 +20,10 @@ profile cups-pk-helper-mechanism @{exec_path} {
network inet stream,
network inet6 stream,
dbus bind bus=system name=org.opensuse.CupsPkHelper.Mechanism,
dbus receive bus=system path=/
interface=org.opensuse.CupsPkHelper.Mechanism,
dbus bind bus=system
name=org.opensuse.CupsPkHelper.Mechanism,
interface=org.opensuse.CupsPkHelper.Mechanism
peer=(name=:*),
@{exec_path} mr,

16
apparmor.d/profiles-a-f/fwupd
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,fwupd/}fwupd
profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/modem-manager>
include <abstractions/bus/polkit>
include <abstractions/bus/udisk>
include <abstractions/bus/upower>
@ -38,11 +39,9 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
peer=(name=:*, label=fwupdmgr),
dbus receive bus=system path=/
interface=org.freedesktop.DBus.Properties
member={GetAll,SetHints,GetPlugins,GetRemotes}
peer=(name=:*, label=fwupdmgr),
dbus send bus=system path=/
interface=org.freedesktop.DBus
member=Changed
peer=(name=:*, label=fwupdmgr),
dbus send bus=system path=/org/freedesktop/DBus
@ -50,17 +49,10 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
member={GetConnectionUnixUser,GetConnectionUnixProcessID}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
dbus send bus=system path=/org/freedesktop/ModemManager1
interface=org.freedesktop.DBus.{Properties,ObjectManager}
member={GetAll,GetManagedObjects},
dbus send bus=system path=/org/freedesktop/UDisks2/block_devices/*
interface=org.freedesktop.DBus.Properties
member=GetAll,
dbus send bus=system path=/org/freedesktop/UDisks2/Manager
interface=org.freedesktop.{DBus.Properties,UDisks2.Manager}
member={GetAll,GetBlockDevices},
interface=org.freedesktop.UDisks2.Manager
member=GetBlockDevices
peer=(name=:*, label=udisksd),
@{exec_path} mr,