felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-22 22:13:42 +00:00
parent 6d84301698
commit 8c516ea788
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
20 changed files with 74 additions and 47 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/groups/gnome/deja-dup-monitor
View file

@ -12,6 +12,7 @@ profile deja-dup-monitor @{exec_path} {
include <abstractions/bus-session>
include <abstractions/bus-system>
include <abstractions/bus/net.hadess.PowerProfiles>
include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/org.gtk.Private.RemoteVolumeMonitor>
include <abstractions/bus/org.gtk.vfs.Daemon>
include <abstractions/dconf-write>
@ -19,7 +20,7 @@ profile deja-dup-monitor @{exec_path} {
network netlink raw,
#aa:dbus own bus=session name=org.gnome.DejaDup.Monitor
#aa:dbus talk bus=session name=org.gnome.DejaDup label=deja-dup
#aa:dbus talk bus=session name=org.gnome.DejaDup label=deja-dup interface=org.gtk.Actions
dbus send bus=system path=/org/freedesktop/NetworkManager
interface=org.freedesktop.DBus.Properties

2
apparmor.d/groups/gnome/gnome-control-center-goa-helper
View file

@ -30,7 +30,7 @@ profile gnome-control-center-goa-helper @{exec_path} {
signal (send) set=(kill) peer=bwrap,
#aa:dbus: own bus=session name=org.gnome.Settings.GoaHelper
#aa:dbus own bus=session name=org.gnome.Settings.GoaHelper
dbus send bus=session path=/org/gnome/OnlineAccounts
interface=org.freedesktop.DBus.ObjectManager

2
apparmor.d/groups/gnome/gnome-extension-ding
View file

@ -30,7 +30,7 @@ profile gnome-extension-ding @{exec_path} {
unix (send,receive) type=stream addr=none peer=(label=gnome-shell),
#aa:dbus own bus=session name=com.rastersoft.ding interface=org.gtk.Actions
#aa:dbus talk bus=session name=com.rastersoft.dingextension label=gnome-shell
#aa:dbus talk bus=session name=com.rastersoft.dingextension label=gnome-shell interface=org.gtk.Actions
dbus send bus=session path=/org/freedesktop/DBus
interface=org.freedesktop.DBus.Introspectable

21
apparmor.d/groups/gnome/gnome-shell
View file

@ -75,10 +75,9 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
# Owned by gnome-shell
dbus bind bus=session name=org.gnome.*,
dbus (send, receive) bus=session path=/org/gnome/**
interface={org.gnome.*,org.freedesktop.{Application,DBus.Properties,DBus.ObjectManager},org.gtk.{Actions,Application}}
peer=(name="{:*,org.gnome.*,org.freedesktop.DBus}"),
#aa:dbus own bus=session name=org.gnome.keyring.SystemPrompter
#aa:dbus own bus=session name=org.gnome.Mutter
#aa:dbus own bus=session name=org.gnome.Shell
#aa:dbus own bus=session name=com.canonical.Unity path=/com/canonical/{U,u}nity
#aa:dbus own bus=session name=com.rastersoft.dingextension interface=org.gtk.Actions
@ -88,17 +87,13 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
# Talk with gnome-shell
#aa:dbus talk bus=session name=com.rastersoft.ding label=gnome-extension-ding
#aa:dbus talk bus=system name=org.gnome.DisplayManager label=gdm
## System bus
#aa:dbus talk bus=session name=com.rastersoft.ding label=gnome-extension-ding
#aa:dbus talk bus=session name=org.gnome.SessionManager label=gnome-session-binary
#aa:dbus talk bus=session name=org.gnome.SettingsDaemon.* label=gsd-*
dbus (send, receive) bus=system path=/org/gnome/**
interface=org.gnome.*
peer=(name="{:*,org.gnome.*}"),
dbus (send, receive) bus=system path=/org/gnome/**
interface=org.freedesktop.DBus.Properties
peer=(name="{:*,org.gnome.*}"),
# System bus
dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit1.Authority
@ -145,7 +140,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
member={GetConnectionUnixUser,GetConnectionUnixProcessID,GetNameOwner,ListNames}
peer=(name=org.freedesktop.DBus, label=dbus-system),
## Session bus
# Session bus
dbus send bus=session path=/org/freedesktop/DBus
interface=org.freedesktop.DBus

6
apparmor.d/groups/gnome/nautilus
View file

@ -33,10 +33,10 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
interface={org.gnome.Nautilus,org.freedesktop.{Application,DBus.Properties},org.gtk.{Actions,Application}}
peer=(name="{:*,org.gnome.Nautilus,org.freedesktop.DBus}"),
#aa:dbus: own bus=session name=org.freedesktop.FileManager1
#aa:dbus own bus=session name=org.freedesktop.FileManager1
#aa:dbus: talk bus=session name=org.gtk.MountOperationHandler label=gnome-shell
#aa:dbus: talk bus=session name=org.gtk.vfs label=gvfsd
#aa:dbus talk bus=session name=org.gtk.MountOperationHandler label=gnome-shell
#aa:dbus talk bus=session name=org.gtk.vfs label=gvfsd
dbus receive bus=session path=/org/gnome/Nautilus/SearchProvider
interface=org.gnome.Shell.SearchProvider2