felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update dbus directive format.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-21 23:03:08 +00:00
parent 22fb2298d5
commit 6c38e90b5e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
128 changed files with 170 additions and 171 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/freedesktop/accounts-daemon
View file

@ -23,7 +23,7 @@ profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
ptrace (read) peer=unconfined,
# dbus: own bus=system name=org.freedesktop.Accounts
#aa:dbus own bus=system name=org.freedesktop.Accounts
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus

2
apparmor.d/groups/freedesktop/colord
View file

@ -20,7 +20,7 @@ profile colord @{exec_path} flags=(attach_disconnected) {
network inet6 dgram,
network netlink raw,
# dbus: own bus=system name=org.freedesktop.ColorManager
#aa:dbus own bus=system name=org.freedesktop.ColorManager
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus

2
apparmor.d/groups/freedesktop/colord-session
View file

@ -12,7 +12,7 @@ profile colord-session @{exec_path} {
include <abstractions/base>
include <abstractions/bus-session>
# dbus: own bus=session name=org.freedesktop.ColorHelper
#aa:dbus own bus=session name=org.freedesktop.ColorHelper
@{exec_path} mr,

2
apparmor.d/groups/freedesktop/dconf-service
View file

@ -16,7 +16,7 @@ profile dconf-service @{exec_path} flags=(attach_disconnected) {
signal (receive) set=(term kill hup) peer=dbus-session,
signal (receive) set=(term hup) peer=gdm,
# dbus: own bus=session name=ca.desrt.dconf
#aa:dbus own bus=session name=ca.desrt.dconf
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable

2
apparmor.d/groups/freedesktop/geoclue
View file

@ -24,7 +24,7 @@ profile geoclue @{exec_path} flags=(attach_disconnected) {
network inet6 stream,
network netlink raw,
# dbus: own bus=system name=org.freedesktop.GeoClue2
#aa:dbus own bus=system name=org.freedesktop.GeoClue2
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus

2
apparmor.d/groups/freedesktop/iio-sensor-proxy
View file

@ -14,7 +14,7 @@ profile iio-sensor-proxy @{exec_path} {
network netlink raw,
# dbus: own bus=system name=net.hadess.SensorProxy
#aa:dbus own bus=system name=net.hadess.SensorProxy
@{exec_path} mr,

2
apparmor.d/groups/freedesktop/pipewire
View file

@ -23,7 +23,7 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
ptrace (read),
# dbus: own bus=session name=org.pulseaudio.Server
#aa:dbus own bus=session name=org.pulseaudio.Server
dbus send bus=session path=/org/freedesktop/DBus
interface=org.freedesktop.DBus

2
apparmor.d/groups/freedesktop/polkitd
View file

@ -21,7 +21,7 @@ profile polkitd @{exec_path} flags=(attach_disconnected) {
ptrace (read),
# dbus: own bus=system name=org.freedesktop.PolicyKit1
#aa:dbus own bus=system name=org.freedesktop.PolicyKit1
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus

6
apparmor.d/groups/freedesktop/pulseaudio
View file

@ -38,9 +38,9 @@ profile pulseaudio @{exec_path} {
network bluetooth stream,
network bluetooth seqpacket,
# dbus: own bus=session name=org.freedesktop.ReserveDevice1.Audio@{int}
# dbus: own bus=session name=org.PulseAudio1
# dbus: own bus=session name=org.pulseaudio*
#aa:dbus own bus=session name=org.freedesktop.ReserveDevice1.Audio@{int}
#aa:dbus own bus=session name=org.PulseAudio1
#aa:dbus own bus=session name=org.pulseaudio*
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable

2
apparmor.d/groups/freedesktop/upowerd
View file

@ -17,7 +17,7 @@ profile upowerd @{exec_path} flags=(attach_disconnected) {
network netlink raw,
# dbus: own bus=system name=org.freedesktop.UPower
#aa:dbus own bus=system name=org.freedesktop.UPower
@{exec_path} mr,

4
apparmor.d/groups/freedesktop/xdg-desktop-portal
View file

@ -26,7 +26,7 @@ profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
ptrace (read),
# dbus: own bus=session name=org.freedesktop.portal.Desktop path=/org/freedesktop/portal/desktop interface={org.freedesktop.DBus.Properties,org.freedesktop{,.impl}.portal.{Settings,Background}}
#aa:dbus own bus=session name=org.freedesktop.portal.Desktop path=/org/freedesktop/portal/desktop interface={org.freedesktop.DBus.Properties,org.freedesktop{,.impl}.portal.{Settings,Background}}
dbus receive bus=session path=/org/freedesktop/portal/desktop
interface=org.freedesktop.portal.Realtime
member=MakeThread*
@ -37,7 +37,7 @@ profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
member=CheckPermissions
peer=(name=:*, label=NetworkManager),
# dbus: own bus=session name=org.freedesktop.background.Monitor path=/org/freedesktop/background/monitor
#aa:dbus own bus=session name=org.freedesktop.background.Monitor path=/org/freedesktop/background/monitor
dbus send bus=session path=/org/freedesktop/portal/documents
interface=org.freedesktop.DBus.Properties

2
apparmor.d/groups/freedesktop/xdg-desktop-portal-gnome
View file

@ -29,7 +29,7 @@ profile xdg-desktop-portal-gnome @{exec_path} flags=(attach_disconnected) {
signal (receive) set=term peer=gdm,
signal (receive) set=(hup term) peer=gdm-session-worker,
# dbus: own bus=session name=org.freedesktop.impl.portal.desktop.gnome
#aa:dbus own bus=session name=org.freedesktop.impl.portal.desktop.gnome
dbus send bus=session path=/org/gnome/Shell/Screenshot
interface=org.freedesktop.DBus.Properties

2
apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk
View file

@ -31,7 +31,7 @@ profile xdg-desktop-portal-gtk @{exec_path} {
unix (send, receive, connect) type=stream peer=(addr="@/tmp/.X11-unix/*", label=gnome-shell),
# dbus: own bus=session name=org.freedesktop.impl.portal.desktop.gtk
#aa:dbus own bus=session name=org.freedesktop.impl.portal.desktop.gtk
dbus receive bus=session path=/org/freedesktop/portal/desktop
interface=org.freedesktop.impl.portal.Settings

2
apparmor.d/groups/freedesktop/xdg-document-portal
View file

@ -24,7 +24,7 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
unix (send receive) type=stream peer=(label=xdg-document-portal//fusermount),
# dbus: own bus=session name=org.freedesktop.portal.Documents path=/org/freedesktop/portal/documents
#aa:dbus own bus=session name=org.freedesktop.portal.Documents path=/org/freedesktop/portal/documents
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable

2
apparmor.d/groups/freedesktop/xdg-permission-store
View file

@ -16,7 +16,7 @@ profile xdg-permission-store @{exec_path} flags=(attach_disconnected) {
signal (receive) set=(term hup kill) peer=dbus-session,
signal (receive) set=(term hup kill) peer=gdm,
# dbus: own bus=session name=org.freedesktop.impl.portal.PermissionStore
#aa:dbus own bus=session name=org.freedesktop.impl.portal.PermissionStore
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable