feat(dbus): add new unified main dbus abstraction.
specify the aa profile in the peer label.
This commit is contained in:
parent
6a3cc952e1
commit
aa1491a3c0
3 changed files with 63 additions and 0 deletions
17
apparmor.d/abstractions/bus/system
Normal file
17
apparmor.d/abstractions/bus/system
Normal file
|
|
@ -0,0 +1,17 @@
|
|||
# apparmor.d - Full set of apparmor profiles
|
||||
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
dbus send bus=system path=/org/freedesktop/DBus
|
||||
interface=org.freedesktop.DBus
|
||||
member={Hello,AddMatch,RemoveMatch,GetNameOwner,NameHasOwner,StartServiceByName}
|
||||
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
|
||||
|
||||
dbus send bus=system path=/org/freedesktop/DBus
|
||||
interface=org.freedesktop.DBus
|
||||
member={RequestName,ReleaseName}
|
||||
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
|
||||
|
||||
@{run}/dbus/system_bus_socket rw,
|
||||
|
||||
include if exists <abstractions/bus/system.d>
|
||||
Loading…
Add table
Add a link
Reference in a new issue