felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use new dbus profile in dbus label.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-16 13:10:25 +00:00
parent 61e2cb55ac
commit c6717d2bab
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
32 changed files with 44 additions and 44 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/freedesktop/accounts-daemon
View file

@ -28,7 +28,7 @@ profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={GetConnectionUnixUser,GetConnectionUnixProcessID}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
peer=(name=org.freedesktop.DBus, label=dbus-system),
@{exec_path} mr,

2
apparmor.d/groups/freedesktop/colord
View file

@ -25,7 +25,7 @@ profile colord @{exec_path} flags=(attach_disconnected) {
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={GetConnectionUnixUser,GetConnectionUnixProcessID}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
peer=(name=org.freedesktop.DBus, label=dbus-system),
@{exec_path} mrix,

4
apparmor.d/groups/freedesktop/dconf-service
View file

@ -13,8 +13,8 @@ profile dconf-service @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus-session>
include <abstractions/dconf-write>
signal (receive) set=(term kill hup) peer=dbus-daemon,
signal (receive) set=(term hup) peer=gdm*,
signal (receive) set=(term kill hup) peer=dbus-session,
signal (receive) set=(term hup) peer=gdm,
# dbus: own bus=session name=ca.desrt.dconf

2
apparmor.d/groups/freedesktop/geoclue
View file

@ -29,7 +29,7 @@ profile geoclue @{exec_path} flags=(attach_disconnected) {
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={GetConnectionUnixUser,GetConnectionUnixProcessID}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
peer=(name=org.freedesktop.DBus, label=dbus-system),
@{exec_path} mr,

2
apparmor.d/groups/freedesktop/pipewire
View file

@ -28,7 +28,7 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
dbus send bus=session path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={GetConnectionUnixUser,GetConnectionUnixProcessID}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
peer=(name=org.freedesktop.DBus, label=dbus-session),
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable

2
apparmor.d/groups/freedesktop/pipewire-media-session
View file

@ -26,7 +26,7 @@ profile pipewire-media-session @{exec_path} {
dbus send bus=session path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member=GetConnectionUnixProcessID
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
peer=(name=org.freedesktop.DBus, label=dbus-session),
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable

2
apparmor.d/groups/freedesktop/polkitd
View file

@ -26,7 +26,7 @@ profile polkitd @{exec_path} flags=(attach_disconnected) {
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={GetConnectionUnixProcessID,GetConnectionUnixUser,GetConnectionCredentials}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
peer=(name=org.freedesktop.DBus, label=dbus-system),
@{exec_path} mr,

2
apparmor.d/groups/freedesktop/xdg-desktop-portal
View file

@ -49,7 +49,7 @@ profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
dbus send bus=session path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={GetConnectionUnixUser,GetConnectionUnixProcessID}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
peer=(name=org.freedesktop.DBus, label=dbus-session),
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable