feat(abs): dbus interfaces definition update.

apparmor.d/abstractions/bus/com.canonical.dbusmenu

@@ -4,6 +4,10 @@
 
   abi <abi/4.0>,
 
+  dbus send bus=session path=/com/canonical/unity/launcherentry/**
+       interface=com.canonical.dbusmenu
+       member={GetGroupProperties,GetLayout}
+       peer=(name=@{busname}, label=nautilus),
 
   include if exists <abstractions/bus/com.canonical.dbusmenu.d>
 

apparmor.d/abstractions/bus/org.a11y

@@ -35,7 +35,7 @@
 
   dbus send bus=session path=/org/a11y/bus
        interface=org.a11y.Bus
-       member=GetAddress
+       member=Get
        peer=(name=org.a11y.Bus, label="@{p_dbus_accessibility}"),
 
   dbus send bus=session path=/org/a11y/bus

apparmor.d/abstractions/bus/org.freedesktop.RealtimeKit1

@@ -2,23 +2,23 @@
 # Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
+# Allow setting realtime priorities. Clients require RLIMIT_RTTIME in the first
+# place and client authorization is done via PolicyKit. Note that setrlimit()
+# is allowed by default seccomp policy but requires 'capability sys_resource',
+# which we deny be default.
+# http://git.0pointer.net/rtkit.git/tree/README
+
   abi <abi/4.0>,
 
-  #aa:dbus common bus=system name=org.freedesktop.RealtimeKit1 label=rtkit-daemon
+  #-aa-dbus common bus=system name=org.freedesktop.RealtimeKit1 label=rtkit-daemon
-
   dbus send bus=system path=/org/freedesktop/RealtimeKit1
-       interface=org.freedesktop.RealtimeKit1
+       interface=org.freedesktop.DBus.Properties
-       member=MakeThread*
+       member=Get
-       peer=(name="@{busname}", label=rtkit-daemon),
-
-  dbus send bus=system path=/org/freedesktop/RealtimeKit1
-       interface=org.freedesktop.RealtimeKit1
-       member=MakeThread*
        peer=(name=org.freedesktop.RealtimeKit1),
 
   dbus send bus=system path=/org/freedesktop/RealtimeKit1
        interface=org.freedesktop.RealtimeKit1
-       member=MakeThread*
+       member={MakeThreadHighPriority,MakeThreadRealtime,MakeThreadRealtimeWithPID}
        peer=(name=org.freedesktop.RealtimeKit1, label=rtkit-daemon),
 
   include if exists <abstractions/bus/org.freedesktop.RealtimeKit1.d>

apparmor.d/abstractions/bus/org.freedesktop.locale1

@@ -5,6 +5,10 @@
   abi <abi/4.0>,
 
   #aa:dbus common bus=system name=org.freedesktop.locale1 label=systemd-localed
+  dbus send bus=system path=/org/freedesktop/locale1
+       interface=org.freedesktop.DBus.Properties
+       member=GetAll
+       peer=(name=org.freedesktop.locale1),
 
   include if exists <abstractions/bus/org.freedesktop.locale1.d>
 

apparmor.d/abstractions/bus/org.freedesktop.portal.Desktop

@@ -5,6 +5,10 @@
   abi <abi/4.0>,
 
   #aa:dbus common bus=session name=org.freedesktop.portal.Desktop label=xdg-desktop-portal
+  dbus send bus=session path=/org/freedesktop/portal/desktop
+       interface=org.freedesktop.DBus.Properties
+       member=GetAll
+       peer=(name=@{busname}, label=xdg-desktop-portal),
 
   dbus send bus=session path=/org/freedesktop/portal/desktop
        interface=org.freedesktop.DBus.Properties

apparmor.d/abstractions/bus/org.gtk.vfs.Metadata

@@ -4,9 +4,11 @@
 
   abi <abi/4.0>,
 
+  #aa:dbus common bus=system name=org.gtk.vfs.Metadata path=/org/gtk/vfs/metadata label=gvfsd-metadata
+
   dbus send bus=session path=/org/gtk/vfs/metadata
-       interface=org.freedesktop.DBus.Properties
+       interface=org.gtk.vfs.Metadata
-       member=GetAll
+       member={Set,Move,GetTreeFromDevice,Remove}
        peer=(name="@{busname}", label=gvfsd-metadata),
 
   dbus receive bus=session path=/org/gtk/vfs/metadata

apparmor.d/abstractions/bus/org.gtk.vfs.MountTracker

@@ -9,6 +9,11 @@
        member=ListMountableInfo
        peer=(name="@{busname}", label=gvfsd),
 
+  dbus send bus=session path=/org/gtk/vfs/mounttracker
+       interface=org.gtk.vfs.MountTracker
+       member=LookupMount
+       peer=(name="@{busname}", label=gvfsd),
+
   dbus send bus=session path=/org/gtk/vfs/mounttracker
        interface=org.gtk.vfs.MountTracker
        member=ListMounts2