felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): improve dbus core abstractions

Browse source
This commit is contained in:
Alexandre Pujol 2025-08-23 17:42:49 +02:00
parent bfe35f254e
commit 7b0a78b1f1
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
8 changed files with 19 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/abstractions/bus/org.freedesktop.Accounts
View file

@ -8,8 +8,8 @@
dbus send bus=system path=/org/freedesktop/Accounts dbus send bus=system path=/org/freedesktop/Accounts
interface=org.freedesktop.Accounts interface=org.freedesktop.Accounts
member={FindUserByName,ListCachedUsers} member={FindUserByName,ListCachedUsers,FindUserById}
peer=(name="@{busname}", label="@{p_accounts_daemon}"), peer=(name="{@{busname},org.freedesktop.Accounts}", label="@{p_accounts_daemon}"),
dbus receive bus=system path=/org/freedesktop/Accounts/User@{uid} dbus receive bus=system path=/org/freedesktop/Accounts/User@{uid}
interface=org.freedesktop.Accounts.User interface=org.freedesktop.Accounts.User

2
apparmor.d/abstractions/bus/org.freedesktop.Avahi
View file

@ -23,7 +23,7 @@
dbus receive bus=system path=/Client@{int}/ServiceBrowser@{int} dbus receive bus=system path=/Client@{int}/ServiceBrowser@{int}
interface=org.freedesktop.Avahi.ServiceBrowser interface=org.freedesktop.Avahi.ServiceBrowser
member={ItemNew,AllForNow,CacheExhausted} member={ItemNew,ItemRemove,AllForNow,CacheExhausted}
peer=(name="@{busname}", label="@{p_avahi_daemon}"), peer=(name="@{busname}", label="@{p_avahi_daemon}"),
dbus receive bus=system path=/ dbus receive bus=system path=/

10
apparmor.d/abstractions/bus/org.freedesktop.portal.Desktop
View file

@ -14,22 +14,22 @@
dbus send bus=session path=/org/freedesktop/portal/desktop dbus send bus=session path=/org/freedesktop/portal/desktop
interface=org.freedesktop.portal.Settings interface=org.freedesktop.portal.Settings
member={Read,ReadAll} member={Read,ReadAll}
peer=(name="@{busname}", label=xdg-desktop-portal), peer=(name=@{busname}, label=xdg-desktop-portal),
dbus receive bus=session path=/org/freedesktop/portal/desktop dbus receive bus=session path=/org/freedesktop/portal/desktop
interface=org.freedesktop.portal.Settings interface=org.freedesktop.portal.Settings
member=SettingChanged member=SettingChanged
peer=(name="@{busname}", label=xdg-desktop-portal), peer=(name=@{busname}, label=xdg-desktop-portal),
dbus receive bus=session path=/org/freedesktop/portal/desktop dbus receive bus=session path=/org/freedesktop/portal/desktop{,/**}
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member={Get,GetAll} member={Get,GetAll}
peer=(name="@{busname}", label=xdg-desktop-portal), peer=(name=@{busname}, label=xdg-desktop-portal),
dbus receive bus=session path=/org/freedesktop/portal/desktop dbus receive bus=session path=/org/freedesktop/portal/desktop
interface=org.freedesktop.impl.portal.Settings interface=org.freedesktop.impl.portal.Settings
member={Read,ReadAll} member={Read,ReadAll}
peer=(name="@{busname}", label=xdg-desktop-portal), peer=(name=@{busname}, label=xdg-desktop-portal),
dbus send bus=session path=/org/freedesktop/portal/desktop dbus send bus=session path=/org/freedesktop/portal/desktop
interface=org.freedesktop.host.portal.Registry interface=org.freedesktop.host.portal.Registry

4
apparmor.d/abstractions/bus/org.freedesktop.secrets
View file

@ -8,8 +8,8 @@
dbus send bus=session path=/org/freedesktop/secrets dbus send bus=session path=/org/freedesktop/secrets
interface=org.freedesktop.Secret.Service interface=org.freedesktop.Secret.Service
member={OpenSession,GetSecrets,SearchItems,ReadAlias} member={OpenSession,GetSecrets,SearchItems,Unlock,ReadAlias}
peer=(name="@{busname}", label=gnome-keyring-daemon), peer=(name="{@{busname},org.freedesktop.secrets}", label=gnome-keyring-daemon),
dbus send bus=session path=/org/freedesktop/secrets/aliases/default dbus send bus=session path=/org/freedesktop/secrets/aliases/default
interface=org.freedesktop.Secret.Collection interface=org.freedesktop.Secret.Collection

4
apparmor.d/abstractions/bus/org.gnome.Mutter.IdleMonitor
View file

@ -13,8 +13,8 @@
dbus send bus=session path=/org/gnome/Mutter/IdleMonitor/Core dbus send bus=session path=/org/gnome/Mutter/IdleMonitor/Core
interface=org.gnome.Mutter.IdleMonitor interface=org.gnome.Mutter.IdleMonitor
member={AddIdleWatch,AddUserActiveWatch,RemoveWatch} member={AddIdleWatch,AddUserActiveWatch,RemoveWatch,GetIdletime}
peer=(name="@{busname}", label=gnome-shell), peer=(name="@{busname},org.gnome.Mutter.IdleMonitor", label=gnome-shell),
dbus receive bus=session path=/org/gnome/Mutter/IdleMonitor/Core dbus receive bus=session path=/org/gnome/Mutter/IdleMonitor/Core
interface=org.gnome.Mutter.IdleMonitor interface=org.gnome.Mutter.IdleMonitor

5
apparmor.d/abstractions/bus/org.gnome.SessionManager
View file

@ -13,6 +13,11 @@
member={RegisterClient,IsSessionRunning} member={RegisterClient,IsSessionRunning}
peer=(name="@{busname}", label=gnome-session-binary), peer=(name="@{busname}", label=gnome-session-binary),
dbus send bus=session path=/org/gnome/SessionManager
interface=org.gnome.SessionManager
member={Inhibit,Uninhibit}
peer=(name="@{busname}", label=gnome-session-binary),
dbus send bus=session path=/org/gnome/SessionManager dbus send bus=session path=/org/gnome/SessionManager
interface=org.gnome.SessionManager interface=org.gnome.SessionManager
member={Setenv,IsSessionRunning} member={Setenv,IsSessionRunning}

2
apparmor.d/abstractions/bus/org.gtk.Notifications
View file

@ -8,7 +8,7 @@
dbus send bus=session path=/org/gtk/Notifications dbus send bus=session path=/org/gtk/Notifications
interface=org.gtk.Notifications interface=org.gtk.Notifications
member=RemoveNotification member={AddNotification,RemoveNotification}
peer=(name=org.gtk.Notifications, label=gnome-shell), peer=(name=org.gtk.Notifications, label=gnome-shell),
include if exists <abstractions/bus/org.gtk.Notifications.d> include if exists <abstractions/bus/org.gtk.Notifications.d>

2
apparmor.d/abstractions/bus/org.gtk.vfs.MountTracker
View file

@ -21,7 +21,7 @@
dbus receive bus=session path=/org/gtk/vfs/mounttracker dbus receive bus=session path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker interface=org.gtk.vfs.MountTracker
member=Mounted member={Mounted,Unmounted}
peer=(name="@{busname}", label=gvfsd), peer=(name="@{busname}", label=gvfsd),
include if exists <abstractions/bus/org.gtk.vfs.MountTracker.d> include if exists <abstractions/bus/org.gtk.vfs.MountTracker.d>