From bc270954d49993374b14bc2af6b89bb37d7d45ce Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 24 Aug 2025 23:53:12 +0200
Subject: [PATCH] feat(abs): add missing bus abs.

---
 .../bus/org.gnome.SettingsDaemon.MediaKeys    | 23 ++++++++++++++++
 .../bus/org.gnome.keyring.internal.Prompter   | 26 +++++++++++++++++++
 2 files changed, 49 insertions(+)
 create mode 100644 apparmor.d/abstractions/bus/org.gnome.SettingsDaemon.MediaKeys
 create mode 100644 apparmor.d/abstractions/bus/org.gnome.keyring.internal.Prompter

diff --git a/apparmor.d/abstractions/bus/org.gnome.SettingsDaemon.MediaKeys b/apparmor.d/abstractions/bus/org.gnome.SettingsDaemon.MediaKeys
new file mode 100644
index 000000000..3a461a85a
--- /dev/null
+++ b/apparmor.d/abstractions/bus/org.gnome.SettingsDaemon.MediaKeys
@@ -0,0 +1,23 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+# Allow requesting interest in receiving media key events. This tells Gnome
+# settings that our application should be notified when key events we are
+# interested in are pressed, and allows us to receive those events.
+
+  abi <abi/4.0>,
+
+  # DBus.Properties: read all properties from the interface
+  dbus send bus=session path=/org/gnome/SettingsDaemon/MediaKeys
+       interface=org.freedesktop.DBus.Properties
+       member={Get,GetAll}
+       peer=(name="{@{busname},org.gnome.SettingsDaemon.MediaKeys}", label=gsd-media-keys),
+
+  dbus (receive, send) bus=session path=/org/gnome/SettingsDaemon/MediaKeys
+       interface=org.gnome.SettingsDaemon.MediaKeys
+       peer=(name="{@{busname},org.gnome.SettingsDaemon.MediaKeys}", label=gsd-media-keys),
+
+  include if exists <abstractions/bus/org.gnome.SettingsDaemon.MediaKeys.d>
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/abstractions/bus/org.gnome.keyring.internal.Prompter b/apparmor.d/abstractions/bus/org.gnome.keyring.internal.Prompter
new file mode 100644
index 000000000..1c3e8f760
--- /dev/null
+++ b/apparmor.d/abstractions/bus/org.gnome.keyring.internal.Prompter
@@ -0,0 +1,26 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+# Allow accessing the GNOME crypto services prompt APIs as used by
+# applications using libgcr (such as pinentry-gnome3) for secure pin
+# entry to unlock GPG keys etc. See:
+# https://developer.gnome.org/gcr/unstable/GcrPrompt.html
+# https://developer.gnome.org/gcr/unstable/GcrSecretExchange.html
+# https://github.com/snapcore/snapd/pull/7673#issuecomment-592229711
+
+  abi <abi/4.0>,
+
+  dbus send bus=session path=/org/gnome/keyring/Prompter
+       interface=org.gnome.keyring.internal.Prompter
+       member={BeginPrompting,PerformPrompt,StopPrompting}
+       peer=(name=@{busname}, label=pinentry-*),
+
+  dbus receive bus=session path=/org/gnome/keyring/Prompt/p@{int}
+       interface=org.gnome.keyring.internal.Prompter.Callback
+       member={PromptReady,PromptDone}
+       peer=(name=@{busname}, label=pinentry-*),
+
+  include if exists <abstractions/bus/org.gnome.keyring.internal.Prompter.d>
+
+# vim:syntax=apparmor