feat(profiles): add dbus rules for some common profiles.

2022-06-05 23:06:14 +01:00 · 2022-06-05 23:06:14 +01:00 · 583d7a15f0
commit 583d7a15f0
parent e949654614
43 changed files with 584 additions and 6 deletions
--- a/apparmor.d/profiles-s-z/spice-vdagentd
+++ b/apparmor.d/profiles-s-z/spice-vdagentd
@ -13,6 +13,12 @@ profile spice-vdagentd @{exec_path} flags=(attach_disconnected) {

  capability sys_nice,

+  dbus receive
+       bus=system
+       path=/org/freedesktop/login[0-9]/session/_[0-9]*
+       interface=org.freedesktop.login[0-9].Session
+       member=Unlock,
+
  @{exec_path} mr,

  owner @{run}/spice-vdagentd/spice-vdagent-sock r,