feat(profile): update some dbus rules.

apparmor.d/groups/bus/dbus-daemon

@@ -10,10 +10,10 @@ include <tunables/global>
 @{exec_path} = @{bin}/dbus-daemon
 profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
+  include <abstractions/bus-accessibility>
+  include <abstractions/bus-session>
+  include <abstractions/bus-system>
   include <abstractions/consoles>
-  include <abstractions/dbus-accessibility>
-  include <abstractions/dbus-session>
-  include <abstractions/dbus>
   include <abstractions/dconf-write>
   include <abstractions/nameservice-strict>
 
@@ -37,11 +37,16 @@ profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
 
   ptrace (read),
 
+  dbus bus=accessibility,
+  dbus bus=session,
+  dbus bus=system,
+
   @{exec_path} mr,
 
   @{bin}/ r,
 
   @{bin}/*                                                               rPUx,
+  @{bin}/dbus-launch                                                      rix,
   @{lib}/{,at-spi2{,-core}/}at-spi-bus-launcher                           rix, # See #74, #80 & #235
   @{lib}/@{multiarch}/tumbler-1/tumblerd                                 rPUx,
   @{lib}/@{multiarch}/xfce[0-9]/xfconf/xfconfd                            rPx,

apparmor.d/groups/gnome/gnome-extension-ding

@@ -29,13 +29,8 @@ profile gnome-extension-ding @{exec_path} {
 
   unix (send,receive) type=stream addr=none peer=(label=gnome-shell),
 
-  dbus bind bus=session name=com.rastersoft.ding,
-  dbus receive bus=session path=/com/rastersoft/ding
-       interface={org.gtk.Actions,org.freedesktop.DBus.Properties}
-       peer=(name=:*, label=gnome-shell),
-  dbus send bus=session path=/com/rastersoft/ding{,**}
-       interface=org.gtk.Actions
-       peer=(label=gnome-shell),
+  # dbus: own bus=session name=com.rastersoft.ding
+  # dbus: talk bus=session name=com.rastersoft.dingextension label=gnome-shell
 
   dbus send bus=session path=/org/freedesktop/DBus
        interface=org.freedesktop.DBus.Introspectable

apparmor.d/groups/gnome/gnome-shell

@@ -80,20 +80,15 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
        peer=(name="{:*,org.gnome.*,org.freedesktop.DBus}"),
 
   # dbus: own bus=session name=com.canonical.Unity path=/com/canonical/unity
+  # dbus: own bus=session name=com.rastersoft.dingextension
   # dbus: own bus=session name=org.gtk.MountOperationHandler
   # dbus: own bus=session name=org.gtk.Notifications
   # dbus: own bus=session name=org.kde.StatusNotifierWatcher path=/StatusNotifierWatcher
 
-  dbus bind bus=session name=com.rastersoft.dingextension,
-  dbus (send, receive) bus=session path=/com/rastersoft/ding
-       interface=org.freedesktop.DBus.Properties
-       peer=(name=:*, label=gnome-extension-ding),
-  dbus (send, receive) bus=session path=/com/rastersoft/ding{,extension/control}
-       interface=org.gtk.Actions
-       peer=(name=:*, label=gnome-extension-ding),
-
   # Talk with gnome-shell
 
+  # dbus: talk bus=session name=com.rastersoft.ding label=gnome-extension-ding
+
   ## System bus
 
   dbus (send, receive) bus=system path=/org/gnome/**

apparmor.d/groups/gnome/nautilus

@@ -36,6 +36,9 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
 
   # dbus: own bus=session name=org.freedesktop.FileManager1
 
+  # dbus: talk bus=session name=org.gtk.MountOperationHandler label=gnome-shell
+  # dbus: talk bus=session name=org.gtk.vfs label=gvfsd
+
   dbus receive bus=session path=/org/gnome/Nautilus/SearchProvider
        interface=org.gnome.Shell.SearchProvider2
        peer=(name=:*, label=gnome-shell),
@@ -50,16 +53,6 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
        member={GetAll,ListActivatableNames}
        peer=(name=org.freedesktop.DBus, label=dbus-daemon),
 
-  # talk: org.gtk.vfs.*
-  dbus send bus=session path=/org/gtk/vfs/**
-       interface=org.gtk.vfs.*
-       peer=(name=:*, label=gvfsd),
-
-  # talk: org.gtk.MountOperationHandler
-  dbus send bus=session path=/org/gtk/MountOperationHandler
-       interface=org.freedesktop.DBus.Properties
-       peer=(name=:*, label=gnome-shell),
-
   dbus send bus=session path=/org/gtk/Notifications
        interface=org.gtk.Notifications
        member=AddNotification

apparmor.d/groups/ubuntu/update-notifier

@@ -15,6 +15,7 @@ profile update-notifier @{exec_path} {
   include <abstractions/bus-session>
   include <abstractions/bus-system>
   include <abstractions/bus/org.a11y>
+  include <abstractions/bus/org.kde.StatusNotifierWatcher>
   include <abstractions/dconf-write>
   include <abstractions/gnome-strict>
   include <abstractions/nameservice-strict>