felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update some dbus defintion for gnome.

Browse source
This commit is contained in:
Alexandre Pujol 2025-05-03 18:34:37 +02:00
parent f6c0893d90
commit 6d8eda6b87
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
7 changed files with 28 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/gnome/gdm-generate-config
View file

@ -18,6 +18,8 @@ profile gdm-generate-config @{exec_path} {
capability setgid, capability setgid,
capability setuid, capability setuid,
ptrace read,
@{exec_path} mr, @{exec_path} mr,
@{sh_path} rix, @{sh_path} rix,

11
apparmor.d/groups/gnome/gnome-control-center
View file

@ -43,9 +43,20 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
#aa:dbus talk bus=session name=org.gnome.SettingsDaemon.Color label=gsd-color #aa:dbus talk bus=session name=org.gnome.SettingsDaemon.Color label=gsd-color
#aa:dbus talk bus=session name=org.gnome.Shell label=gnome-shell #aa:dbus talk bus=session name=org.gnome.Shell label=gnome-shell
#aa:dbus talk bus=system name=com.ubuntu.WhoopsiePreferences label=whoopsie-preferences
#aa:dbus talk bus=system name=net.hadess.SwitcherooControl label=switcheroo-control
#aa:dbus talk bus=system name=net.reactivated.Fprint.Manager label=fprintd
#aa:dbus talk bus=system name=org.freedesktop.Accounts label=accounts-daemon
#aa:dbus talk bus=system name=org.freedesktop.bolt1 label=boltd
#aa:dbus talk bus=system name=org.freedesktop.hostname1 label=systemd-hostnamed #aa:dbus talk bus=system name=org.freedesktop.hostname1 label=systemd-hostnamed
#aa:dbus talk bus=system name=org.freedesktop.login1 label=systemd-logind
#aa:dbus talk bus=system name=org.freedesktop.ModemManager1 label=ModemManager
#aa:dbus talk bus=system name=org.freedesktop.NetworkManager label=NetworkManager #aa:dbus talk bus=system name=org.freedesktop.NetworkManager label=NetworkManager
#aa:dbus talk bus=system name=org.freedesktop.PolicyKit1 label=polkitd
#aa:dbus talk bus=system name=org.freedesktop.systemd1 label="@{p_systemd}"
#aa:dbus talk bus=system name=org.freedesktop.UDisks2 label=udisksd
#aa:dbus talk bus=system name=org.freedesktop.UPower label=upowerd #aa:dbus talk bus=system name=org.freedesktop.UPower label=upowerd
#aa:dbus talk bus=system name=org.freedesktop.UPower.PowerProfiles label=power-profiles-daemon
@{exec_path} mr, @{exec_path} mr,

1
apparmor.d/groups/gnome/gnome-shell
View file

@ -87,6 +87,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
#aa:dbus talk bus=system name=org.freedesktop.bolt label=boltd #aa:dbus talk bus=system name=org.freedesktop.bolt label=boltd
#aa:dbus talk bus=system name=org.freedesktop.ColorManager label=colord #aa:dbus talk bus=system name=org.freedesktop.ColorManager label=colord
#aa:dbus talk bus=system name=org.freedesktop.login1 label=systemd-logind #aa:dbus talk bus=system name=org.freedesktop.login1 label=systemd-logind
#aa:dbus talk bus=system name=org.freedesktop.UPower.PowerProfiles label=power-profiles-daemon
#aa:dbus talk bus=system name=org.gnome.DisplayManager label=gdm #aa:dbus talk bus=system name=org.gnome.DisplayManager label=gdm
#aa:dbus talk bus=session name=com.rastersoft.ding label=gnome-extension-ding #aa:dbus talk bus=session name=com.rastersoft.ding label=gnome-extension-ding

10
apparmor.d/groups/gnome/session-migration
View file

@ -15,14 +15,16 @@ profile session-migration @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
@{sh_path} rix, @{sh_path} rix,
@{python_path} rix, @{python_path} rix,
@{bin}/gsettings rPx, @{bin}/dconf rPx,
/usr/share/session-migration/scripts/* rix, @{bin}/gsettings rPx,
/usr/share/session-migration/scripts/* rix,
/usr/share/glib-2.0/schemas/gschemas.compiled r, /usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/session-migration/{,**} r, /usr/share/session-migration/{,**} r,
owner @{gdm_share_dirs}/ w,
owner @{gdm_share_dirs}/session_migration-* rw, owner @{gdm_share_dirs}/session_migration-* rw,
owner @{user_share_dirs}/session_migration-* rw, owner @{user_share_dirs}/session_migration-* rw,

1
apparmor.d/groups/gnome/yelp
View file

@ -10,6 +10,7 @@ include <tunables/global>
profile yelp @{exec_path} { profile yelp @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/bus-system>
include <abstractions/common/gnome> include <abstractions/common/gnome>
network netlink raw, network netlink raw,

1
apparmor.d/groups/gvfs/gvfsd-wsdd
View file

@ -11,6 +11,7 @@ profile gvfsd-wsdd @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.gtk.vfs.MountTracker> include <abstractions/bus/org.gtk.vfs.MountTracker>
network netlink raw, network netlink raw,

7
apparmor.d/groups/network/nm-dispatcher
View file

@ -26,7 +26,12 @@ profile nm-dispatcher @{exec_path} flags=(attach_disconnected) {
dbus send bus=system path=/org/freedesktop dbus send bus=system path=/org/freedesktop
interface=org.freedesktop.DBus.ObjectManager interface=org.freedesktop.DBus.ObjectManager
member=GetManagedObjects member=GetManagedObjects
peer=(name=:*, label=NetworkManager), peer=(name=@{busname}, label=NetworkManager),
dbus send bus=system path=/org/freedesktop/NetworkManager/Settings/@{int}
interface=org.freedesktop.NetworkManager.Settings.Connection
member=GetSettings
peer=(name=@{busname}, label=NetworkManager),
@{exec_path} mr, @{exec_path} mr,