felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): ensure ca.desrt.dconf.Writer dbus is part of dconf-write only.

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-20 00:30:24 +01:00
parent 50135cf75b
commit a69dc5bc8b
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 20 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

19
apparmor.d/abstractions/bus/ca.desrt.dconf.Writer Normal file
View file

@ -0,0 +1,19 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
dbus send bus=session path=/ca/desrt/dconf/Writer/user
interface=ca.desrt.dconf.Writer
member=Change
peer=(name=ca.desrt.dconf), # no peer's labels
dbus receive bus=session path=/ca/desrt/dconf/Writer/user
interface=ca.desrt.dconf.Writer
member=Notify
peer=(name=@{busname}, label=dconf-service),
include if exists <abstractions/bus/ca.desrt.dconf.Writer.d>
# vim:syntax=apparmor

1
apparmor.d/abstractions/dconf-write
View file

@ -8,6 +8,7 @@
abi <abi/4.0>, abi <abi/4.0>,
include <abstractions/dconf> include <abstractions/dconf>
include <abstractions/bus/ca.desrt.dconf.Writer>
owner @{user_config_dirs}/glib-2.0/settings/keyfile w, owner @{user_config_dirs}/glib-2.0/settings/keyfile w,

10
apparmor.d/abstractions/dconf.d/complete
View file

@ -2,16 +2,6 @@
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
dbus send bus=session path=/ca/desrt/dconf/Writer/user
interface=ca.desrt.dconf.Writer
member=Change
peer=(name=ca.desrt.dconf), # no peer's labels
dbus receive bus=session path=/ca/desrt/dconf/Writer/user
interface=ca.desrt.dconf.Writer
member=Notify
peer=(name=@{busname}, label=dconf-service),
/usr/share/dconf/profile/gdm r, /usr/share/dconf/profile/gdm r,
owner @{user_config_dirs}/glib-2.0/settings/keyfile r, owner @{user_config_dirs}/glib-2.0/settings/keyfile r,