felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): dbus interfaces definition update.

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-23 12:28:01 +01:00
parent a1559d23c7
commit 9ab321d146
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
7 changed files with 32 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/abstractions/bus/com.canonical.dbusmenu
View file

@ -4,6 +4,10 @@
abi <abi/4.0>,
dbus send bus=session path=/com/canonical/unity/launcherentry/**
interface=com.canonical.dbusmenu
member={GetGroupProperties,GetLayout}
peer=(name=@{busname}, label=nautilus),
include if exists <abstractions/bus/com.canonical.dbusmenu.d>

2
apparmor.d/abstractions/bus/org.a11y
View file

@ -35,7 +35,7 @@
dbus send bus=session path=/org/a11y/bus
interface=org.a11y.Bus
member=GetAddress
member=Get
peer=(name=org.a11y.Bus, label="@{p_dbus_accessibility}"),
dbus send bus=session path=/org/a11y/bus

20
apparmor.d/abstractions/bus/org.freedesktop.RealtimeKit1
View file

@ -2,23 +2,23 @@
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# Allow setting realtime priorities. Clients require RLIMIT_RTTIME in the first
# place and client authorization is done via PolicyKit. Note that setrlimit()
# is allowed by default seccomp policy but requires 'capability sys_resource',
# which we deny be default.
# http://git.0pointer.net/rtkit.git/tree/README
abi <abi/4.0>,
#aa:dbus common bus=system name=org.freedesktop.RealtimeKit1 label=rtkit-daemon
#-aa-dbus common bus=system name=org.freedesktop.RealtimeKit1 label=rtkit-daemon
dbus send bus=system path=/org/freedesktop/RealtimeKit1
interface=org.freedesktop.RealtimeKit1
member=MakeThread*
peer=(name="@{busname}", label=rtkit-daemon),
dbus send bus=system path=/org/freedesktop/RealtimeKit1
interface=org.freedesktop.RealtimeKit1
member=MakeThread*
interface=org.freedesktop.DBus.Properties
member=Get
peer=(name=org.freedesktop.RealtimeKit1),
dbus send bus=system path=/org/freedesktop/RealtimeKit1
interface=org.freedesktop.RealtimeKit1
member=MakeThread*
member={MakeThreadHighPriority,MakeThreadRealtime,MakeThreadRealtimeWithPID}
peer=(name=org.freedesktop.RealtimeKit1, label=rtkit-daemon),
include if exists <abstractions/bus/org.freedesktop.RealtimeKit1.d>

4
apparmor.d/abstractions/bus/org.freedesktop.locale1
View file

@ -5,6 +5,10 @@
abi <abi/4.0>,
#aa:dbus common bus=system name=org.freedesktop.locale1 label=systemd-localed
dbus send bus=system path=/org/freedesktop/locale1
interface=org.freedesktop.DBus.Properties
member=GetAll
peer=(name=org.freedesktop.locale1),
include if exists <abstractions/bus/org.freedesktop.locale1.d>

4
apparmor.d/abstractions/bus/org.freedesktop.portal.Desktop
View file

@ -5,6 +5,10 @@
abi <abi/4.0>,
#aa:dbus common bus=session name=org.freedesktop.portal.Desktop label=xdg-desktop-portal
dbus send bus=session path=/org/freedesktop/portal/desktop
interface=org.freedesktop.DBus.Properties
member=GetAll
peer=(name=@{busname}, label=xdg-desktop-portal),
dbus send bus=session path=/org/freedesktop/portal/desktop
interface=org.freedesktop.DBus.Properties

6
apparmor.d/abstractions/bus/org.gtk.vfs.Metadata
View file

@ -4,9 +4,11 @@
abi <abi/4.0>,
#aa:dbus common bus=system name=org.gtk.vfs.Metadata path=/org/gtk/vfs/metadata label=gvfsd-metadata
dbus send bus=session path=/org/gtk/vfs/metadata
interface=org.freedesktop.DBus.Properties
member=GetAll
interface=org.gtk.vfs.Metadata
member={Set,Move,GetTreeFromDevice,Remove}
peer=(name="@{busname}", label=gvfsd-metadata),
dbus receive bus=session path=/org/gtk/vfs/metadata

5
apparmor.d/abstractions/bus/org.gtk.vfs.MountTracker
View file

@ -9,6 +9,11 @@
member=ListMountableInfo
peer=(name="@{busname}", label=gvfsd),
dbus send bus=session path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker
member=LookupMount
peer=(name="@{busname}", label=gvfsd),
dbus send bus=session path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker
member=ListMounts2