feat(profile): add some dbus rules.

apparmor.d/profiles-a-f/atrild

@@ -11,10 +11,7 @@ profile atrild @{exec_path} {
   include <abstractions/base>
   include <abstractions/bus-session>
 
-  dbus bind bus=session name=org.mate.atril.Daemon,
-
-  dbus (send, receive) bus=session path=/org/mate/atril/**
-       peer=(name="{:*,org.freedesktop.DBus}", label=atril),  # all interfaces and members
+  # dbus: own bus=session name=org.mate.atril.Daemon
 
   @{exec_path} mr,
 

apparmor.d/profiles-a-f/bluetoothd

@@ -22,13 +22,7 @@ profile bluetoothd @{exec_path} flags=(attach_disconnected) {
   network alg seqpacket,
   network netlink raw,
 
-  dbus bind bus=system name=org.bluez,
-  dbus send bus=system path=/org/bluez{,/**}
-       interface=org.freedesktop.DBus.Properties
-       peer=(name=org.freedesktop.DBus),
-  dbus receive bus=system path=/org/bluez{,/**}
-       interface=org.bluez{,.*}
-       peer=(name=:*),
+  # dbus: own bus=system name=org.bluez
 
   @{exec_path} mr,
 

apparmor.d/profiles-a-f/cups-browsed

@@ -25,6 +25,11 @@ profile cups-browsed @{exec_path} {
   network inet6 stream,
   network netlink raw,
 
+  dbus receive bus=system path=/
+       interface=org.freedesktop.Avahi.Server
+       member=StateChanged
+       peer=(name=:*, label=avahi-daemon),
+
   @{exec_path} mr,
 
   /usr/share/cups/locale/{,**} r,

apparmor.d/profiles-a-f/cups-pk-helper-mechanism

@@ -20,10 +20,7 @@ profile cups-pk-helper-mechanism @{exec_path} {
   network inet stream,
   network inet6 stream,
 
-  dbus bind bus=system name=org.opensuse.CupsPkHelper.Mechanism,
-  dbus receive bus=system path=/
-       interface=org.opensuse.CupsPkHelper.Mechanism
-       peer=(name=:*),
+  # dbus: own bus=system name=org.opensuse.CupsPkHelper.Mechanism path=/
 
   @{exec_path} mr,
 

apparmor.d/profiles-a-f/file-roller

@@ -21,9 +21,8 @@ profile file-roller @{exec_path} {
   include <abstractions/wayland>
   include <abstractions/X-strict>
 
-  dbus bind bus=session name=org.gnome.ArchiveManager1,
-
-  dbus bind bus=session name=org.gnome.FileRoller,
+  # dbus: own bus=session name=org.gnome.ArchiveManager1
+  # dbus: own bus=session name=org.gnome.FileRoller
 
   @{exec_path} mr,