feat(profile): some dbus improvement.

apparmor.d/groups/freedesktop/wireplumber

@@ -9,10 +9,11 @@ include <tunables/global>
 @{exec_path} = @{bin}/wireplumber
 profile wireplumber @{exec_path} {
   include <abstractions/base>
-  include <abstractions/audio-client>
   include <abstractions/audio-server>
   include <abstractions/bus-session>
   include <abstractions/bus-system>
+  include <abstractions/bus/org.bluez>
+  include <abstractions/bus/org.freedesktop.impl.portal.PermissionStore>
   include <abstractions/bus/org.freedesktop.RealtimeKit1>
   include <abstractions/bus/org.freedesktop.UPower>
   include <abstractions/devices-usb>

apparmor.d/groups/freedesktop/xdg-desktop-portal

@@ -40,7 +40,11 @@ profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
   dbus receive bus=session path=/org/freedesktop/portal/desktop
        interface=org.freedesktop.portal.Realtime
        member=MakeThread*
-       peer=(name=:*),
+       peer=(name=@{busname}),
+  dbus receive bus=session path=/org/freedesktop/portal/desktop
+       interface=org.freedesktop.host.portal.Registry
+       member=Register
+       peer=(name=@{busname}),
 
   #aa:dbus own bus=session name=org.freedesktop.background.Monitor path=/org/freedesktop/background/monitor
 

apparmor.d/groups/gnome/gio-launch-desktop

@@ -18,6 +18,8 @@ include <tunables/global>
 profile gio-launch-desktop @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/app-launcher-user>
+  include <abstractions/bus/org.gtk.vfs.Metadata>
+  include <abstractions/bus/org.gtk.vfs.MountTracker>
   include <abstractions/consoles>
   include <abstractions/deny-sensitive-home>
   include <abstractions/gnome-strict>

apparmor.d/groups/gnome/gnome-control-center-search-provider

@@ -10,6 +10,7 @@ include <tunables/global>
 profile gnome-control-center-search-provider @{exec_path} {
   include <abstractions/base>
   include <abstractions/bus-session>
+  include <abstractions/bus/org.freedesktop.portal.Desktop>
   include <abstractions/bus/org.gtk.vfs.MountTracker>
   include <abstractions/dconf-write>
   include <abstractions/gnome-strict>

apparmor.d/groups/gnome/gnome-extension-gsconnect

@@ -32,6 +32,7 @@ profile gnome-extension-gsconnect @{exec_path} {
 
   #aa:dbus own bus=session name=org.gnome.Shell.Extensions.GSConnect
 
+  dbus eavesdrop bus=session,
   @{exec_path} mr,
 
   @{sh_path}          rix,

apparmor.d/groups/gnome/gsd-disk-utility-notify

@@ -14,6 +14,7 @@ profile gsd-disk-utility-notify @{exec_path} {
   include <abstractions/bus/org.freedesktop.UDisks2>
 
   #aa:dbus own bus=session name=org.gnome.Disks.NotificationMonitor
+  #aa:dbus talk bus=system name=org.freedesktop.UDisks2 label=udisksd
 
   dbus receive bus=session
        interface=org.freedesktop.DBus.Introspectable

apparmor.d/groups/gnome/gsd-print-notifications

@@ -31,7 +31,7 @@ profile gsd-print-notifications @{exec_path} flags=(attach_disconnected) {
   dbus receive bus=session
        interface=org.freedesktop.DBus.Introspectable
        member=Introspect
-       peer=(name=:*, label=gnome-shell),
+       peer=(name=@{busname}, label=gnome-shell),
 
   @{exec_path} mr,
   @{lib}/gsd-printer rPx,

apparmor.d/groups/gnome/localsearch

@@ -29,6 +29,15 @@ profile localsearch @{exec_path} flags=(attach_disconnected) {
   #aa:dbus own bus=session name=org.freedesktop.Tracker3.Miner.Files
   #aa:dbus own bus=session name=org.freedesktop.LocalSearch3
 
+  dbus receive bus=session path=/org/freedesktop/Tracker3/Endpoint
+       interface=org.freedesktop.DBus.Peer
+       member=Ping
+       peer=(name=@{busname}, label=nautilus),
+  dbus receive bus=session path=/org/freedesktop/Tracker3/Endpoint
+       interface=org.freedesktop.Tracker3.Endpoint
+       member=Query
+       peer=(name=@{busname}, label=nautilus),
+
   @{exec_path} mr,
 
   @{lib}/localsearch-extractor-3 ix, # nnp

apparmor.d/profiles-a-f/fwupd

@@ -40,6 +40,11 @@ profile fwupd @{exec_path} flags=(attach_disconnected,complain) {
   #aa:dbus own bus=system name=org.freedesktop.fwupd path=/
   #aa:dbus talk bus=system name=org.freedesktop.UDisks2 label=udisksd
 
+  dbus receive bus=system path=/
+       interface=org.freedesktop.DBus.ObjectManager
+       member=InterfacesAdded
+       peer=(name=@{busname}, label=bluetoothd),
+
   @{exec_path} mr,
 
   @{lib}/fwupd/fwupd-detect-cet rix,

apparmor.d/profiles-s-z/terminator

@@ -13,6 +13,7 @@ profile terminator @{exec_path} flags=(attach_disconnected) {
   include <abstractions/bus-accessibility>
   include <abstractions/bus-session>
   include <abstractions/bus/org.a11y>
+  include <abstractions/bus/org.gtk.vfs.MountTracker>
   include <abstractions/consoles>
   include <abstractions/dconf-write>
   include <abstractions/desktop>