felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refractor(abs): move gtk bus interfaces.

Browse source
This commit is contained in:
Alexandre Pujol 2025-09-14 16:26:28 +02:00
parent ff21c9157c
commit bf3b8345fc
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
7 changed files with 45 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/abstractions/bus/session/org.gtk.MountOperationHandler Normal file
View file

@ -0,0 +1,14 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023-2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
dbus send bus=session path=/org/gtk/MountOperationHandler
interface=org.freedesktop.DBus.Properties
member=GetAll
peer=(name=@{busname}, label=gnome-shell),
include if exists <abstractions/bus/session/org.gtk.MountOperationHandler.d>
# vim:syntax=apparmor

2
apparmor.d/abstractions/bus/org.gtk.Private.RemoteVolumeMonitor → apparmor.d/abstractions/bus/session/org.gtk.Private.RemoteVolumeMonitor
View file

@ -19,6 +19,6 @@
member={VolumeAdded,DriveDisconnected,DriveConnected,DriveChanged} member={VolumeAdded,DriveDisconnected,DriveConnected,DriveChanged}
peer=(name="@{busname}", label=gvfs-*-volume-monitor), peer=(name="@{busname}", label=gvfs-*-volume-monitor),
include if exists <abstractions/bus/org.gtk.Private.RemoteVolumeMonitor.d> include if exists <abstractions/bus/session/org.gtk.Private.RemoteVolumeMonitor.d>
# vim:syntax=apparmor # vim:syntax=apparmor

6
apparmor.d/abstractions/bus/org.gtk.vfs.Daemon → apparmor.d/abstractions/bus/session/org.gtk.vfs.Daemon
View file

@ -1,7 +1,9 @@
# apparmor.d - Full set of apparmor profiles # apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2023-2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
# Each daemon (main and for mounts) implement this.
abi <abi/4.0>, abi <abi/4.0>,
dbus send bus=session path=/org/gtk/vfs/Daemon dbus send bus=session path=/org/gtk/vfs/Daemon
@ -14,6 +16,6 @@
member=GetConnection member=GetConnection
peer=(name=@{busname}), peer=(name=@{busname}),
include if exists <abstractions/bus/org.gtk.vfs.Daemon.d> include if exists <abstractions/bus/session/org.gtk.vfs.Daemon.d>
# vim:syntax=apparmor # vim:syntax=apparmor

6
apparmor.d/abstractions/bus/org.gtk.vfs.Metadata → apparmor.d/abstractions/bus/session/org.gtk.vfs.Metadata
View file

@ -13,13 +13,13 @@
dbus send bus=session path=/org/gtk/vfs/metadata dbus send bus=session path=/org/gtk/vfs/metadata
interface=org.gtk.vfs.Metadata interface=org.gtk.vfs.Metadata
member={Set,Move,GetTreeFromDevice,Remove} member={Set,Move,GetTreeFromDevice,Remove}
peer=(name="@{busname}", label=gvfsd-metadata), peer=(name=@{busname}, label=gvfsd-metadata),
dbus receive bus=session path=/org/gtk/vfs/metadata dbus receive bus=session path=/org/gtk/vfs/metadata
interface=org.gtk.vfs.Metadata interface=org.gtk.vfs.Metadata
member=AttributeChanged member=AttributeChanged
peer=(name="@{busname}", label=gvfsd-metadata), peer=(name=@{busname}, label=gvfsd-metadata),
include if exists <abstractions/bus/org.gtk.vfs.Metadata.d> include if exists <abstractions/bus/session/org.gtk.vfs.Metadata.d>
# vim:syntax=apparmor # vim:syntax=apparmor

2
apparmor.d/abstractions/bus/session/org.gtk.vfs.MountOperation
View file

@ -6,7 +6,7 @@
dbus receive bus=session path=/org/gtk/gvfs/mountop/@{int} dbus receive bus=session path=/org/gtk/gvfs/mountop/@{int}
interface=org.gtk.vfs.MountOperation interface=org.gtk.vfs.MountOperation
member={AskQuestion,AskPassword} member={AskPassword,AskQuestion}
peer=(name=@{busname}, label=gvfsd-*), peer=(name=@{busname}, label=gvfsd-*),
include if exists <abstractions/bus/session/org.gtk.vfs.MountOperation.d> include if exists <abstractions/bus/session/org.gtk.vfs.MountOperation.d>

14
apparmor.d/abstractions/bus/org.gtk.vfs.MountTracker → apparmor.d/abstractions/bus/session/org.gtk.vfs.MountTracker
View file

@ -2,12 +2,9 @@
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>, # The mount tracking interface.
dbus send bus=session path=/org/gtk/vfs/mounttracker abi <abi/4.0>,
interface=org.gtk.vfs.MountTracker
member=ListMountableInfo
peer=(name="@{busname}", label=gvfsd),
dbus send bus=session path=/org/gtk/vfs/mounttracker dbus send bus=session path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker interface=org.gtk.vfs.MountTracker
@ -19,11 +16,16 @@
member=ListMounts2 member=ListMounts2
peer=(name="@{busname}", label=gvfsd), peer=(name="@{busname}", label=gvfsd),
dbus send bus=session path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker
member=ListMountableInfo
peer=(name="@{busname}", label=gvfsd),
dbus receive bus=session path=/org/gtk/vfs/mounttracker dbus receive bus=session path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker interface=org.gtk.vfs.MountTracker
member={Mounted,Unmounted} member={Mounted,Unmounted}
peer=(name="@{busname}", label=gvfsd), peer=(name="@{busname}", label=gvfsd),
include if exists <abstractions/bus/org.gtk.vfs.MountTracker.d> include if exists <abstractions/bus/session/org.gtk.vfs.MountTracker.d>
# vim:syntax=apparmor # vim:syntax=apparmor

14
apparmor.d/abstractions/bus/session/org.gtk.vfs.Spawner Normal file
View file

@ -0,0 +1,14 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023-2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
dbus send bus=session path=/org/gtk/gvfs/exec_spaw/@{int}
interface=org.gtk.vfs.Spawner
member=Spawned
peer=(name=@{busname}, label=gvfsd),
include if exists <abstractions/bus/session/org.gtk.vfs.Spawner.d>
# vim:syntax=apparmor