felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update dbus directive format.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-21 23:03:08 +00:00
parent 22fb2298d5
commit 6c38e90b5e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
128 changed files with 170 additions and 171 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/systemd/hostnamectl
View file

@ -14,7 +14,7 @@ profile hostnamectl @{exec_path} {
capability net_admin,
# dbus: talk bus=system name=org.freedesktop.hostname1 label=systemd-hostnamed
#aa:dbus talk bus=system name=org.freedesktop.hostname1 label=systemd-hostnamed
@{exec_path} mr,

2
apparmor.d/groups/systemd/networkctl
View file

@ -26,7 +26,7 @@ profile networkctl @{exec_path} flags=(attach_disconnected) {
unix (bind) type=stream addr=@@{hex}/bus/networkctl/system,
# dbus: talk bus=system name=org.freedesktop.network1 label=systemd-networkd
#aa:dbus talk bus=system name=org.freedesktop.network1 label=systemd-networkd
# No label available
dbus send bus=system path=/org/freedesktop/network@{int}
interface=org.freedesktop.DBus.Properties

2
apparmor.d/groups/systemd/systemd-analyze
View file

@ -22,7 +22,7 @@ profile systemd-analyze @{exec_path} {
signal (send) peer=child-pager,
# dbus: talk bus=system name=org.freedesktop.systemd1 label="@{systemd}"
#aa:dbus talk bus=system name=org.freedesktop.systemd1 label="@{systemd}"
@{exec_path} mr,

2
apparmor.d/groups/systemd/systemd-homed
View file

@ -35,7 +35,7 @@ profile systemd-homed @{exec_path} flags=(attach_disconnected) {
mount options=(rw, rslave) -> @{run}/,
mount /dev/dm-@{int} -> @{run}/systemd/user-home-mount/,
# dbus: own bus=system name=org.freedesktop.home1
#aa:dbus own bus=system name=org.freedesktop.home1
@{exec_path} mr,

2
apparmor.d/groups/systemd/systemd-hostnamed
View file

@ -18,7 +18,7 @@ profile systemd-hostnamed @{exec_path} flags=(attach_disconnected) {
unix (bind) type=stream addr=@@{hex}/bus/systemd-hostnam/system,
# dbus: own bus=system name=org.freedesktop.hostname1
#aa:dbus own bus=system name=org.freedesktop.hostname1
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus

2
apparmor.d/groups/systemd/systemd-localed
View file

@ -19,7 +19,7 @@ profile systemd-localed @{exec_path} flags=(attach_disconnected) {
unix (bind) type=stream addr=@@{hex}/bus/systemd-localed/system,
# dbus: own bus=system name=org.freedesktop.locale1
#aa:dbus own bus=system name=org.freedesktop.locale1
@{exec_path} mr,

4
apparmor.d/groups/systemd/systemd-logind
View file

@ -31,9 +31,9 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected) {
unix (bind) type=stream addr=@@{hex}/bus/systemd-logind/system,
# dbus: own bus=system name=org.freedesktop.login1
#aa:dbus own bus=system name=org.freedesktop.login1
# dbus: talk bus=system name=org.freedesktop.systemd1 label="@{systemd}"
#aa:dbus talk bus=system name=org.freedesktop.systemd1 label="@{systemd}"
dbus receive bus=system path=/org/freedesktop/login@{int}{,/seat/auto,session/_@{int}}
interface=org.freedesktop.DBus.Introspectable

4
apparmor.d/groups/systemd/systemd-machined
View file

@ -31,9 +31,9 @@ profile systemd-machined @{exec_path} {
network inet6 dgram,
network netlink raw,
# dbus: own bus=system name=org.freedesktop.machine1
#aa:dbus own bus=system name=org.freedesktop.machine1
# dbus: talk bus=system name=org.freedesktop.systemd1 label="@{systemd}"
#aa:dbus talk bus=system name=org.freedesktop.systemd1 label="@{systemd}"
@{exec_path} mr,

2
apparmor.d/groups/systemd/systemd-networkd
View file

@ -29,7 +29,7 @@ profile systemd-networkd @{exec_path} flags=(attach_disconnected) {
unix (bind) type=stream addr=@@{hex}/bus/systemd-network/bus-api-network,
# dbus: own bus=system name=org.freedesktop.network1
#aa:dbus own bus=system name=org.freedesktop.network1
dbus send bus=system path=/org/freedesktop/hostname1
interface=org.freedesktop.hostname1

2
apparmor.d/groups/systemd/systemd-oomd
View file

@ -17,7 +17,7 @@ profile systemd-oomd @{exec_path} flags=(attach_disconnected) {
unix (bind) type=stream addr=@@{hex}/bus/systemd-oomd/bus-api-oom,
# dbus: own bus=system name=org.freedesktop.oom1
#aa:dbus own bus=system name=org.freedesktop.oom1
@{exec_path} mr,

2
apparmor.d/groups/systemd/systemd-portabled
View file

@ -29,7 +29,7 @@ profile systemd-portabled @{exec_path} {
network inet6 dgram,
network netlink raw,
# dbus: own bus=system name=org.freedesktop.portable1
#aa:dbus own bus=system name=org.freedesktop.portable1
@{exec_path} mr,

2
apparmor.d/groups/systemd/systemd-resolved
View file

@ -29,7 +29,7 @@ profile systemd-resolved @{exec_path} flags=(attach_disconnected) {
network inet6 stream,
network netlink raw,
# dbus: own bus=system name=org.freedesktop.resolve1
#aa:dbus own bus=system name=org.freedesktop.resolve1
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus

2
apparmor.d/groups/systemd/systemd-timedated
View file

@ -17,7 +17,7 @@ profile systemd-timedated @{exec_path} flags=(attach_disconnected) {
unix (bind) type=stream addr=@@{hex}/bus/systemd-timedat/system,
# dbus: own bus=system name=org.freedesktop.timedate1
#aa:dbus own bus=system name=org.freedesktop.timedate1
dbus send bus=system path=/org/freedesktop/systemd1/unit/*
interface=org.freedesktop.DBus.Properties

2
apparmor.d/groups/systemd/systemd-timesyncd
View file

@ -24,7 +24,7 @@ profile systemd-timesyncd @{exec_path} flags=(attach_disconnected) {
unix (bind) type=stream addr=@@{hex}/bus/systemd-timesyn/bus-api-timesync,
unix (send, receive) type=dgram addr=none peer=(label=@{systemd}, addr=none),
# dbus: own bus=system name=org.freedesktop.timesync1
#aa:dbus own bus=system name=org.freedesktop.timesync1
@{exec_path} mr,