felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(dbus): start using the new dbus directive.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-17 14:14:42 +00:00
parent e2682b3072
commit ca85373e3a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
34 changed files with 51 additions and 129 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/profiles-a-f/evince
View file

@ -26,12 +26,7 @@ profile evince @{exec_path} {
deny network inet,
deny network inet6,
dbus bind bus=session name=org.gnome.evince.Daemon,
dbus send bus=session path=/org/gnome/evince/Daemon
interface=org.gnome.evince.Daemon
peer=(name=org.gnome.evince.Daemon),
dbus receive bus=session path=/org/gnome/evince/
peer=(name="{org.gnome.evince.Daemon,org.freedesktop.DBus,:*}", label=@{profile_name}), # all interfaces and members
# dbus: own bus=session name=org.gnome.evince.Daemon
dbus send bus=session path=/org/gtk/vfs/metadata
interface=org.gtk.vfs.Metadata

5
apparmor.d/profiles-a-f/fprintd
View file

@ -19,10 +19,7 @@ profile fprintd @{exec_path} flags=(attach_disconnected) {
network netlink raw,
dbus bind bus=system name=net.reactivated.Fprint,
dbus receive bus=system path=/net/reactivated/Fprint/Manager
interface={org.freedesktop.DBus.Properties,net.reactivated.Fprint.Manager}
peer=(name=:*),
# dbus: own bus=system name=net.reactivated.Fprint
@{exec_path} mr,