diff --git a/apparmor.d/abstractions/bus/vfs/mount b/apparmor.d/abstractions/bus/vfs/mount index 65d25e48e..2b95ada4b 100644 --- a/apparmor.d/abstractions/bus/vfs/mount +++ b/apparmor.d/abstractions/bus/vfs/mount @@ -12,4 +12,9 @@ member=ListMounts2 peer=(name=:*, label=gvfsd), + dbus receive bus=session path=/org/gtk/vfs/mounttracker + interface=org.gtk.vfs.MountTracker + member=Mounted + peer=(name=:*, label=gvfsd), + include if exists diff --git a/apparmor.d/groups/gvfs/gvfsd-fuse b/apparmor.d/groups/gvfs/gvfsd-fuse index d46450908..9d5174a3a 100644 --- a/apparmor.d/groups/gvfs/gvfsd-fuse +++ b/apparmor.d/groups/gvfs/gvfsd-fuse @@ -17,11 +17,6 @@ profile gvfsd-fuse @{exec_path} { mount fstype={fuse,fuse.*} -> @{run}/user/@{uid}/gvfs/, - dbus receive bus=session path=/org/gtk/vfs/mounttracker - interface=org.gtk.vfs.MountTracker - member=Mounted - peer=(name=:*, label=gvfsd), - dbus send bus=session path=/org/gtk/vfs/mounttracker interface=org.gtk.vfs.MountTracker member=RegisterFuse diff --git a/apparmor.d/groups/gvfs/gvfsd-network b/apparmor.d/groups/gvfs/gvfsd-network index 541e98ff8..b8c65a144 100644 --- a/apparmor.d/groups/gvfs/gvfsd-network +++ b/apparmor.d/groups/gvfs/gvfsd-network @@ -25,7 +25,7 @@ profile gvfsd-network @{exec_path} { dbus send bus=session path=/org/gtk/vfs/mounttracker interface=org.gtk.vfs.MountTracker - member={MountLocation,LookupMount,RegisterMount,ListMountableInfo} + member={MountLocation,LookupMount,RegisterMount} peer=(name=:*, label=gvfsd), dbus send bus=session path=/org/gtk/vfs/Daemon diff --git a/apparmor.d/groups/gvfs/gvfsd-smb-browse b/apparmor.d/groups/gvfs/gvfsd-smb-browse index 213dee61b..7836b81ca 100644 --- a/apparmor.d/groups/gvfs/gvfsd-smb-browse +++ b/apparmor.d/groups/gvfs/gvfsd-smb-browse @@ -23,11 +23,6 @@ profile gvfsd-smb-browse @{exec_path} { dbus bind bus=session name=org.gtk.vfs.mountpoint_smb_browse, - dbus receive bus=session path=/org/gtk/vfs/mounttracker - interface=org.gtk.vfs.MountTracker - member=Mounted - peer=(name=:*, label=gvfsd), - dbus receive bus=session path=/org/gtk/vfs/mountable interface=org.gtk.vfs.Mountable member=Mount