felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(dbus): simple dbus rules cleaning.

Browse source
This commit is contained in:
Alexandre Pujol 2023-11-30 21:32:50 +00:00
parent dd06e3da65
commit 9517800a9d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
9 changed files with 37 additions and 67 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/groups/systemd/loginctl
View file

@ -15,15 +15,15 @@ profile loginctl @{exec_path} {
capability net_admin,
capability sys_resource,
dbus (send) bus=system path=/org/freedesktop/login[0-9]*
interface=org.freedesktop.login[0-9]*.Manager
dbus (send) bus=system path=/org/freedesktop/login1*
interface=org.freedesktop.login1*.Manager
member={ListSessions,GetSession}
peer=(name=org.freedesktop.login[0-9]*, label=systemd-logind),
peer=(name=org.freedesktop.login1*, label=systemd-logind),
dbus (send) bus=system path=/org/freedesktop/login[0-9]*/session/**
dbus (send) bus=system path=/org/freedesktop/login1*/session/**
interface=org.freedesktop.DBus.Properties
member={Get,GetAll}
peer=(name=org.freedesktop.login[0-9]*, label=systemd-logind),
peer=(name=org.freedesktop.login1*, label=systemd-logind),
@{exec_path} mr,

5
apparmor.d/groups/systemd/systemd-logind
View file

@ -39,10 +39,11 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected,complain) {
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={GetConnectionCredentials,GetConnectionUnixProcessID,GetConnectionUnixUser,RequestName},
member={GetConnectionCredentials,GetConnectionUnixProcessID,GetConnectionUnixUser}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit[0-9].Authority
interface=org.freedesktop.PolicyKit1.Authority
member=CheckAuthorization,
dbus send bus=system path=/org/freedesktop/systemd1/unit/**