felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(dbus): improve dbus integration.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-08 17:38:21 +00:00
parent 55a1fb6f9c
commit 853668e492
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
23 changed files with 103 additions and 240 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/abstractions/bus/org.freedesktop.ColorManager
View file

@ -7,6 +7,11 @@
member=GetAll
peer=(name=:*, label=colord),
dbus send bus=system path=/org/freedesktop/ColorManager/devices/*
interface=org.freedesktop.DBus.Properties
member=GetAll
peer=(name=:*, label=colord),
dbus send bus=system path=/org/freedesktop/ColorManager
interface=org.freedesktop.ColorManager
member=CreateDevice

5
apparmor.d/abstractions/bus/org.freedesktop.GeoClue2
View file

@ -27,4 +27,9 @@
member=AddAgent
peer=(name=:*, label=geoclue),
dbus receive bus=system path=/org/freedesktop/GeoClue2/Manager
interface=org.freedesktop.DBus.Properties
member=PropertiesChanged
peer=(name=:*, label=geoclue),
include if exists <abstractions/bus/org.freedesktop.GeoClue2.d>

4
apparmor.d/abstractions/bus/org.freedesktop.login1.Session
View file

@ -14,7 +14,7 @@
dbus send bus=system path=/org/freedesktop/login1/session/*
interface=org.freedesktop.login1.Session
member={ReleaseDevice,TakeControl,TakeDevice,SetBrightness}
member={ReleaseDevice,TakeControl,TakeDevice,SetBrightness,SetLockedHint,SetIdleHint}
peer=(name=:*, label=systemd-logind),
dbus receive bus=system path=/org/freedesktop/login1/session/*
@ -24,7 +24,7 @@
dbus receive bus=system path=/org/freedesktop/login1/session/*
interface=org.freedesktop.login1.Session
member=PauseDevice
member={PauseDevice,Unlock}
peer=(name=:*, label=systemd-logind),
include if exists <abstractions/bus/org.freedesktop.login1.Session.d>

20
apparmor.d/abstractions/bus/org.gnome.Mutter.IdleMonitor Normal file
View file

@ -0,0 +1,20 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
dbus send bus=session path=/org/gnome/Mutter/IdleMonitor
interface=org.freedesktop.DBus.ObjectManager
member=GetManagedObjects
peer=(name=:*, label=gnome-shell),
dbus send bus=session path=/org/gnome/Mutter/IdleMonitor/Core
interface=org.gnome.Mutter.IdleMonitor
member={AddIdleWatch,AddUserActiveWatch,RemoveWatch}
peer=(name=:*, label=gnome-shell),
dbus receive bus=session path=/org/gnome/Mutter/IdleMonitor/Core
interface=org.gnome.Mutter.IdleMonitor
member=WatchFired
peer=(name=:*, label=gnome-shell),
include if exists <abstractions/bus/org.gnome.Mutter.IdleMonitor.d>

5
apparmor.d/abstractions/bus/org.gnome.SessionManager
View file

@ -7,6 +7,11 @@
member={RegisterClient,IsSessionRunning}
peer=(name=:*, label=gnome-session-binary),
dbus send bus=session path=/org/gnome/SessionManager
interface=org.gnome.SessionManager
member=Setenv
peer=(name=org.gnome.SessionManager, label=gnome-session-binary),
dbus receive bus=session path=/org/gnome/SessionManager
interface=org.gnome.SessionManager
member={ClientAdded,ClientRemoved,SessionRunning,InhibitorRemoved,InhibitorAdded}

25
apparmor.d/abstractions/bus/org.gnome.Shell.Introspect Normal file
View file

@ -0,0 +1,25 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
dbus send bus=session path=/org/gnome/Shell/Introspect
interface=org.freedesktop.DBus.Properties
member=GetAll
peer=(name=:*, label=gnome-shell),
dbus send bus=session path=/org/gnome/Shell/Introspect
interface=org.freedesktop.DBus.Properties
member=Get
peer=(name=org.gnome.Shell.Introspect, label=gnome-shell),
dbus send bus=session path=/org/gnome/Shell/Introspect
interface=org.gnome.Shell.Introspect
member=GetRunningApplications
peer=(name=:*, label=gnome-shell),
dbus receive bus=session path=/org/gnome/Shell/Introspect
interface=org.gnome.Shell.Introspect
member={RunningApplicationsChanged,WindowsChanged}
peer=(name=:*, label=gnome-shell),
include if exists <abstractions/bus/org.gnome.Shell.Introspect.d>