felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): add some missing dbus rules.

Browse source
This commit is contained in:
Alexandre Pujol 2022-06-13 21:41:48 +01:00
parent 6898bac12f
commit 7b0ef88358
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
10 changed files with 79 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/groups/systemd/systemd-oomd
View file

@ -15,6 +15,14 @@ profile systemd-oomd @{exec_path} flags=(attach_disconnected) {
capability dac_override,
capability kill,
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member=RequestName
peer=(name=org.freedesktop.DBus),
dbus bind bus=system
name=org.freedesktop.oom[0-9],
@{exec_path} mr,
/etc/systemd/oomd.conf r,

11
apparmor.d/groups/systemd/systemd-resolved
View file

@ -28,6 +28,17 @@ profile systemd-resolved @{exec_path} flags=(attach_disconnected) {
network inet6 stream,
network netlink raw,
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={RequestName,GetConnectionUnixUser}
peer=(name=org.freedesktop.DBus),
dbus receive bus=system path=/org/freedesktop/resolve[0-9]
interface=org.freedesktop.resolve[0-9].Manager,
dbus bind bus=system
name=org.freedesktop.resolve[0-9],
@{exec_path} mr,
/etc/systemd/resolved.conf r,