felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): add some missing dbus own definition.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-15 15:03:42 +00:00
parent a6d263d304
commit bdeb62d17d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
23 changed files with 49 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/gnome/evolution-addressbook-factory
View file

@ -25,7 +25,7 @@ profile evolution-addressbook-factory @{exec_path} {
network inet6 dgram,
network netlink raw,
dbus bind bus=session name=org.gnome.evolution.dataserver.AddressBook@{int},
# dbus: own bus=session name=org.gnome.evolution.dataserver.AddressBook10
dbus (send, receive) bus=session path=/org/gnome/evolution/dataserver/**
interface=org.gnome.evolution.dataserver.*

2
apparmor.d/groups/gnome/evolution-calendar-factory
View file

@ -24,7 +24,7 @@ profile evolution-calendar-factory @{exec_path} {
network inet6 dgram,
network netlink raw,
dbus bind bus=session name=org.gnome.evolution.dataserver.Calendar@{int},
# dbus: own bus=session name=org.gnome.evolution.dataserver.Calendar8
dbus (send, receive) bus=session path=/org/gnome/evolution/dataserver/**
interface=org.gnome.evolution.dataserver.*

1
apparmor.d/groups/gnome/evolution-source-registry
View file

@ -22,6 +22,7 @@ profile evolution-source-registry @{exec_path} {
network inet6 dgram,
network netlink raw,
# dbus: own bus=session name=org.gnome.evolution.dataserver.Sources5
dbus receive bus=session path=/org/gnome/evolution/dataserver/SourceManager{,/**}
interface={org.freedesktop.DBus.ObjectManager,org.freedesktop.DBus.Properties}

7
apparmor.d/groups/gnome/gnome-remote-desktop-daemon
View file

@ -11,16 +11,15 @@ profile gnome-remote-desktop-daemon @{exec_path} {
include <abstractions/base>
include <abstractions/bus-session>
include <abstractions/dconf-write>
include <abstractions/gnome-strict>
include <abstractions/graphics>
network inet stream,
network inet6 stream,
# dbus: own bus=session name=org.gnome.RemoteDesktop.User
@{exec_path} mr,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
owner @{run}/user/@{uid}/wayland-@{int} rw,
include if exists <local/gnome-remote-desktop-daemon>
}

3
apparmor.d/groups/gnome/gsd-usb-protection
View file

@ -9,8 +9,11 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-usb-protection
profile gsd-usb-protection @{exec_path} {
include <abstractions/base>
include <abstractions/bus-session>
include <abstractions/dconf-write>
# dbus: own bus=session name=org.gnome.SettingsDaemon.UsbProtection
@{exec_path} mr,
/usr/share/glib-2.0/schemas/gschemas.compiled r,

6
apparmor.d/groups/gnome/tracker-miner
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/tracker-miner-fs-{,control-}3
@{exec_path} = @{lib}/tracker-miner-fs-{,control-,rss-}3
profile tracker-miner @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus-session>
@ -28,7 +28,9 @@ profile tracker-miner @{exec_path} flags=(attach_disconnected) {
signal (receive) set=(term, kill) peer=gdm,
signal (receive) set=(hup) peer=gdm-session-worker,
# dbus: own bus=session name=org.freedesktop.Tracker3 interface=org.freedesktop.DBus.{Properties,Peer}
# dbus: own bus=session name=org.freedesktop.Tracker3.Miner.Files interface=org.freedesktop.DBus.{Properties,Peer}
# dbus: own bus=session name=org.freedesktop.Tracker3.Miner.Files.Control
# dbus: own bus=session name=org.freedesktop.Tracker3.Miner.RSS
@{exec_path} mr,