feat(profile) gvfs: more dbus integration.

apparmor.d/groups/gvfs/gvfsd-dnssd

@@ -38,6 +38,11 @@ profile gvfsd-dnssd @{exec_path} {
        member=Introspect
        peer=(name=@{busname}, label=gnome-shell),
 
+  dbus receive bus=session
+       interface=org.freedesktop.DBus.Introspectable
+       member=Introspect
+       peer=(name=@{busname}, label=gnome-shell),
+
   @{exec_path} mr,
 
   owner @{run}/user/@{uid}/gvfsd/ rw,

apparmor.d/groups/gvfs/gvfsd-http

@@ -11,6 +11,7 @@ include <tunables/global>
 profile gvfsd-http @{exec_path} {
   include <abstractions/base>
   include <abstractions/bus-session>
+  include <abstractions/bus/org.gtk.vfs.Daemon>
   include <abstractions/dconf-write>
   include <abstractions/freedesktop.org>
   include <abstractions/nameservice-strict>

apparmor.d/groups/gvfs/gvfsd-network

@@ -32,6 +32,16 @@ profile gvfsd-network @{exec_path} {
        member={MountLocation,LookupMount,RegisterMount}
        peer=(name="@{busname}", label=gvfsd),
 
+  dbus receive bus=session
+       interface=org.freedesktop.DBus.Introspectable
+       member=Introspect
+       peer=(name=@{busname}, label=gnome-shell),
+
+  dbus send bus=session path=/org/gtk/vfs/Daemon
+       interface=org.gtk.vfs.Daemon
+       member=GetConnection
+       peer=(name=@{busname}),
+
   @{exec_path} mr,
 
   /usr/share/glib-2.0/schemas/gschemas.compiled r,

apparmor.d/groups/gvfs/gvfsd-recent

@@ -33,6 +33,11 @@ profile gvfsd-recent @{exec_path} {
        member=RegisterMount
        peer=(name="@{busname}", label=gvfsd),
 
+  dbus receive bus=session
+       interface=org.freedesktop.DBus.Introspectable
+       member=Introspect
+       peer=(name=@{busname}, label=gnome-shell),
+
   @{exec_path} mr,
 
   # Full access to user's data

apparmor.d/groups/gvfs/gvfsd-sftp

@@ -10,10 +10,36 @@ include <tunables/global>
 @{exec_path} = @{lib}/{,gvfs/}gvfsd-sftp
 profile gvfsd-sftp @{exec_path} {
   include <abstractions/base>
+  include <abstractions/bus-session>
+  include <abstractions/bus/org.gtk.vfs.MountTracker>
   include <abstractions/consoles>
   include <abstractions/freedesktop.org>
   include <abstractions/nameservice-strict>
 
+  #aa:dbus own bus=session name=org.gtk.vfs.mountpoint_@{int}
+
+  dbus receive bus=session path=/org/gtk/vfs/Daemon
+       interface=org.gtk.vfs.Daemon
+       member=GetConnection
+       peer=(name=@{busname}, label=gnome-extension-gsconnect),
+  dbus receive bus=session path=/org/gtk/vfs/Daemon
+       interface=org.gtk.vfs.Daemon
+       member=GetConnection
+       peer=(name=@{busname}, label=nautilus),
+
+  dbus receive bus=session path=/org/gtk/vfs/mountable
+       interface=org.gtk.vfs.Mountable
+       member=Mount
+       peer=(name=:*, label=gvfsd),
+  dbus send bus=session path=/org/gtk/gvfs/exec_spaw/@{int}
+       interface=org.gtk.vfs.Spawner
+       member=Spawned
+       peer=(name=:*, label=gvfsd),
+  dbus send bus=session path=/org/gtk/vfs/mounttracker
+       interface=org.gtk.vfs.MountTracker
+       member=RegisterMount
+       peer=(name=:*, label=gvfsd),
+
   @{exec_path} mr,
 
   @{bin}/ssh  rPx,

apparmor.d/groups/gvfs/gvfsd-wsdd

@@ -13,6 +13,7 @@ profile gvfsd-wsdd @{exec_path} {
   include <abstractions/bus-system>
   include <abstractions/bus/org.freedesktop.NetworkManager>
   include <abstractions/bus/org.gtk.vfs.MountTracker>
+  include <abstractions/nameservice-strict>
 
   network netlink raw,
 
@@ -31,9 +32,19 @@ profile gvfsd-wsdd @{exec_path} {
        member=RegisterMount
        peer=(name="@{busname}", label=gvfsd),
 
+  dbus receive bus=session path=/org/gtk/vfs/Daemon
+       interface=org.gtk.vfs.Daemon
+       member=GetConnection
+       peer=(name=@{busname}, label=gvfsd-network),
+
+  dbus receive bus=session
+       interface=org.freedesktop.DBus.Introspectable
+       member=Introspect
+       peer=(name=@{busname}, label=gnome-shell),
+
   @{exec_path} mr,
 
-  @{bin}/env r,
+  @{bin}/env mr,
   @{bin}/wsdd rPx,
 
         @{run}/mount/utab r,