feat(dbus): rewrite some dbus rules (7).

This commit is contained in:
Alexandre Pujol 2023-12-05 21:01:26 +00:00
parent 081c8a4fa1
commit 538ec25001
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
43 changed files with 221 additions and 377 deletions

View file

@ -7,6 +7,7 @@ include <tunables/global>
@{exec_path} = @{bin}/murmurd
profile murmurd @{exec_path} {
include <abstractions/base>
include <abstractions/bus/avahi>
include <abstractions/dbus-strict>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
@ -25,11 +26,6 @@ profile murmurd @{exec_path} {
unix (send, receive) type=stream addr=none peer=(label=lsb_release),
dbus send bus=system path=/
interface=org.freedesktop.DBus.Peer
member=Ping
peer=(name=org.freedesktop.Avahi, label=avahi-daemon),
@{exec_path} mr,
@{bin}/lsb_release rPx -> lsb_release,

View file

@ -16,6 +16,11 @@ profile obexd @{exec_path} {
network bluetooth stream,
network bluetooth seqpacket,
dbus bind bus=session name=org.bluez.obex,
dbus receive bus=session path=/org/bluez/obex
interface=org.bluez.obex.AgentManager1
peer=(name=:*),
@{exec_path} mr,
owner @{user_cache_dirs}/ rw,

View file

@ -21,11 +21,9 @@ profile power-profiles-daemon @{exec_path} flags=(attach_disconnected) {
network netlink raw,
dbus bind bus=system name=net.hadess.PowerProfiles,
dbus receive bus=system path=/net/hadess/PowerProfiles
interface=org.freedesktop.DBus.Properties
peer=(name=:*),
dbus send bus=system path=/net/hadess/PowerProfiles
interface=org.freedesktop.DBus.Properties
peer=(name=org.freedesktop.DBus),

View file

@ -10,6 +10,7 @@ include <tunables/global>
profile remmina @{exec_path} {
include <abstractions/base>
include <abstractions/bus/atspi>
include <abstractions/bus/hostname>
include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict>
@ -49,11 +50,6 @@ profile remmina @{exec_path} {
member=GetAll
peer=(name=:*, label=gnome-keyring-daemon),
dbus send bus=system path=/org/freedesktop/hostname[0-9]*
interface=org.freedesktop.DBus.Properties
member=GetAll
peer=(name=:*),
dbus send bus=session path=/StatusNotifierWatcher
interface=org.kde.StatusNotifierWatcher
member=RegisterStatusNotifierItem