felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update dbus directive format.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-21 23:03:08 +00:00
parent 22fb2298d5
commit 6c38e90b5e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
128 changed files with 170 additions and 171 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/development/dbus.md
View file

@ -22,7 +22,7 @@ We use a special directive to generate (when running `make`) more advanced dbus
**Directive format**
```
# dbus: ( own | talk ) bus=( system | session ) name=AARE [label=AARE] [interface=AARE] [path=AARE]
#aa:dbus: ( own | talk ) bus=( system | session ) name=AARE [label=AARE] [interface=AARE] [path=AARE]
```
The directive format is on purpose very similar to apparmor dbus rules. However, there are some restrictions:
@ -41,7 +41,7 @@ Allow owning a dbus interface:
[apparmor.d/groups/network/NetworkManager](https://github.com/roddhjav/apparmor.d/blob/a3b15973640042af7da0ed540db690c711fbf6ec/apparmor.d/groups/network/NetworkManager#L46)
``` aa linenums="46"
# dbus: own bus=system name=org.freedesktop.NetworkManager
#aa:dbus: own bus=system name=org.freedesktop.NetworkManager
```
Allow talking to a dbus interface on a given profile
@ -50,6 +50,6 @@ Allow talking to a dbus interface on a given profile
[apparmor.d/groups/gnome/gdm](https://github.com/roddhjav/apparmor.d/blob/a3b15973640042af7da0ed540db690c711fbf6ec/apparmor.d/groups/gnome/gdm#L32)
``` aa linenums="32"
# dbus: talk bus=system name=org.freedesktop.login1 label=systemd-logind
#aa:dbus: talk bus=system name=org.freedesktop.login1 label=systemd-logind
```