felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update cups-browsed

Browse source
This commit is contained in:
Alexandre Pujol 2025-09-14 13:14:18 +02:00
parent 63c9c8cc2d
commit b471f8359a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 5 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

19
apparmor.d/groups/cups/cups-browsed
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{sbin}/cups-browsed @{exec_path} = @{sbin}/cups-browsed
profile cups-browsed @{exec_path} { profile cups-browsed @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.NetworkManager> include <abstractions/bus/org.freedesktop.NetworkManager>
@ -18,9 +18,8 @@ profile cups-browsed @{exec_path} {
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/p11-kit> include <abstractions/p11-kit>
# capability net_admin, capability net_admin,
capability net_bind_service, capability net_bind_service,
# capability sys_nice,
network inet dgram, network inet dgram,
network inet6 dgram, network inet6 dgram,
@ -28,20 +27,12 @@ profile cups-browsed @{exec_path} {
network inet6 stream, network inet6 stream,
network netlink raw, network netlink raw,
dbus receive bus=system path=/ #aa:dbus talk bus=system name=org.cups.cupsd.Notifier label=cups-notifier-dbus
interface=org.freedesktop.Avahi.Server
member=StateChanged
peer=(name=:*, label="@{p_avahi_daemon}"),
dbus receive bus=system path=/org/freedesktop/NetworkManager dbus receive bus=system path=/org/freedesktop/NetworkManager
interface=org.freedesktop.NetworkManager interface=org.freedesktop.NetworkManager
member=CheckPermissions member=CheckPermissions
peer=(name=:*, label=NetworkManager), peer=(name=@{busname}, label=NetworkManager),
dbus receive bus=system path=/org/cups/cupsd/Notifier
interface=org.cups.cupsd.Notifier
member={PrinterDeleted,PrinterStopped}
peer=(name=@{busname}, label=cups-notifier-dbus),
@{exec_path} mr, @{exec_path} mr,
@ -59,7 +50,7 @@ profile cups-browsed @{exec_path} {
owner @{tmp}/@{hex} rw, owner @{tmp}/@{hex} rw,
@{run}/cups/certs/* r, @{run}/cups/certs/* r,
@{run}/avahi-daemon/socket rw, # TODO: in abs 'avahi' ? @{run}/avahi-daemon/socket rw,
@{PROC}/sys/net/ipv6/conf/all/disable_ipv6 r, @{PROC}/sys/net/ipv6/conf/all/disable_ipv6 r,