From b532929f5d92c6839c0f88688a1faa75c2dd4ac6 Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Sat, 5 Apr 2025 19:19:56 +0200 Subject: [PATCH] fix(ci): ensure dbus session is confined during tests --- .github/workflows/main.yml | 1 + apparmor.d/groups/flatpak/flatpak | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 5334a2ca1..289d8223c 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -124,6 +124,7 @@ jobs: for service in "${services[@]}"; do sudo systemctl restart "$service" || systemctl status "$service.service" || true done + systemctl restart --user dbus || systemctl status --user "dbus.service" || true sudo ps auxZ | grep -v '\[.*\]' sudo aa-log -s --raw diff --git a/apparmor.d/groups/flatpak/flatpak b/apparmor.d/groups/flatpak/flatpak index 5ae5f8e96..adfd4b49b 100644 --- a/apparmor.d/groups/flatpak/flatpak +++ b/apparmor.d/groups/flatpak/flatpak @@ -41,6 +41,7 @@ profile flatpak @{exec_path} flags=(attach_disconnected,mediate_deleted,complain signal send peer=flatpak-app, #aa:dbus talk bus=session name=org.freedesktop.Flatpak.SessionHelper label=flatpak-session-helper + #aa:dbus talk bus=session name=org.freedesktop.portal.Documents path=/org/freedesktop/portal/documents label=xdg-document-portal #aa:dbus talk bus=system name=org.freedesktop.Accounts label=accounts-daemon #aa:dbus talk bus=system name=org.freedesktop.PolicyKit1 label=polkitd