felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): initial dbus integration (no dbus rule yet).

Browse source
This commit is contained in:
Alexandre Pujol 2022-06-03 20:38:23 +01:00
parent aa606bbdc4
commit a6a72cd5c3
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
46 changed files with 64 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/profiles-m-r/pkexec
View file

@ -10,9 +10,10 @@ include <tunables/global>
profile pkexec @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/authentication>
include <abstractions/wutmp>
include <abstractions/nameservice-strict>
include <abstractions/consoles>
include <abstractions/dbus-strict>
include <abstractions/nameservice-strict>
include <abstractions/wutmp>
signal (send) set=(term, kill) peer=polkit-agent-helper,

1
apparmor.d/profiles-m-r/pkttyagent
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = /{usr/,}bin/pkttyagent
profile pkttyagent @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-strict>
capability sys_nice,

1
apparmor.d/profiles-m-r/power-profiles-daemon
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{libexec}/power-profiles-daemon
profile power-profiles-daemon @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-strict>
include <abstractions/nameservice-strict>
capability sys_nice,

1
apparmor.d/profiles-m-r/rtkit-daemon
View file

@ -11,6 +11,7 @@ include <tunables/global>
@{exec_path} = @{libexec}/rtkit-daemon
profile rtkit-daemon @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-strict>
include <abstractions/nameservice-strict>
capability dac_read_search,