felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): add signal from systemd-user.

Browse source
This commit is contained in:
Alexandre Pujol 2024-02-06 22:37:59 +01:00
parent 968da5518b
commit d0a052b7ae
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
48 changed files with 82 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/gnome/evolution-addressbook-factory
View file

@ -25,6 +25,8 @@ profile evolution-addressbook-factory @{exec_path} {
network inet6 dgram,
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
dbus bind bus=session name=org.gnome.evolution.dataserver.AddressBook@{int},
dbus (send, receive) bus=session path=/org/gnome/evolution/dataserver/**

2
apparmor.d/groups/gnome/evolution-alarm-notify
View file

@ -21,6 +21,8 @@ profile evolution-alarm-notify @{exec_path} {
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
# dbus: own bus=session name=org.gnome.Evolution-alarm-notify
dbus (send, receive) bus=session path=/org/gnome/evolution/dataserver/**

2
apparmor.d/groups/gnome/evolution-calendar-factory
View file

@ -24,6 +24,8 @@ profile evolution-calendar-factory @{exec_path} {
network inet6 dgram,
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
dbus bind bus=session name=org.gnome.evolution.dataserver.Calendar@{int},
dbus (send, receive) bus=session path=/org/gnome/evolution/dataserver/**

2
apparmor.d/groups/gnome/evolution-source-registry
View file

@ -22,6 +22,8 @@ profile evolution-source-registry @{exec_path} {
network inet6 dgram,
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
dbus bind bus=session name=org.gnome.evolution.dataserver.Sources@{int},
dbus receive bus=session path=/org/gnome/evolution/dataserver/SourceManager{,/**}
interface={org.freedesktop.DBus.ObjectManager,org.freedesktop.DBus.Properties}

1
apparmor.d/groups/gnome/gjs-console
View file

@ -27,6 +27,7 @@ profile gjs-console @{exec_path} flags=(attach_disconnected) {
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term hup) peer=gdm*,
# dbus: own bus=session name=org.freedesktop.Notifications

1
apparmor.d/groups/gnome/gnome-keyring-daemon
View file

@ -20,6 +20,7 @@ profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) {
capability ipc_lock,
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term) peer=gdm,
signal (send) set=(term) peer=ssh-agent,

1
apparmor.d/groups/gnome/gnome-session-binary
View file

@ -29,6 +29,7 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
network inet6 dgram,
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
signal (send) set=(term) peer=at-spi-bus-launcher,
signal (send) set=(term) peer=gsd-*,

1
apparmor.d/groups/gnome/gnome-shell
View file

@ -64,6 +64,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
ptrace (read),
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
signal (send),

2
apparmor.d/groups/gnome/gnome-shell-calendar-server
View file

@ -13,6 +13,8 @@ profile gnome-shell-calendar-server @{exec_path} {
include <abstractions/dconf-write>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
# dbus: own bus=session name=org.gnome.Shell.CalendarServer
dbus (send receive) bus=session path=/org/gnome/evolution/dataserver/{,**}

2
apparmor.d/groups/gnome/gnome-software
View file

@ -27,6 +27,8 @@ profile gnome-software @{exec_path} {
mount fstype=fuse.revokefs-fuse options=(rw, nosuid, nodev) -> /var/tmp/flatpak-cache-*/*/,
umount /var/tmp/flatpak-cache-*/*/,
signal (receive) set=(cont, term) peer=systemd-user,
@{exec_path} mr,
@{bin}/baobab rPUx,

1
apparmor.d/groups/gnome/gnome-terminal-server
View file

@ -18,6 +18,7 @@ profile gnome-terminal-server @{exec_path} {
include <abstractions/dconf-write>
include <abstractions/gnome-strict>
signal (receive) set=(cont, term) peer=systemd-user,
signal (send) set=(hup) peer=htop,
signal (send) set=(term hup kill) peer=unconfined,

2
apparmor.d/groups/gnome/goa-daemon
View file

@ -25,6 +25,8 @@ profile goa-daemon @{exec_path} {
network inet6 dgram,
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
# dbus: own bus=session name=org.gnome.OnlineAccounts
dbus send bus=session path=/org/gnome/Identity

2
apparmor.d/groups/gnome/goa-identity-service
View file

@ -12,6 +12,8 @@ profile goa-identity-service @{exec_path} {
include <abstractions/authentication>
include <abstractions/bus-session>
signal (receive) set=(cont, term) peer=systemd-user,
# dbus: own bus=session name=org.gnome.Identity
dbus send bus=session path=/org/gnome/OnlineAccounts

1
apparmor.d/groups/gnome/gsd-a11y-settings
View file

@ -13,6 +13,7 @@ profile gsd-a11y-settings @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dconf-write>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.A11ySettings

1
apparmor.d/groups/gnome/gsd-color
View file

@ -22,6 +22,7 @@ profile gsd-color @{exec_path} flags=(attach_disconnected) {
include <abstractions/gnome-strict>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Color

1
apparmor.d/groups/gnome/gsd-datetime
View file

@ -13,6 +13,7 @@ profile gsd-datetime @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dconf-write>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Datetime

2
apparmor.d/groups/gnome/gsd-disk-utility-notify
View file

@ -13,6 +13,8 @@ profile gsd-disk-utility-notify @{exec_path} {
include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.UDisks2>
signal (receive) set=(cont, term) peer=systemd-user,
# dbus: own bus=session name=org.gnome.Disks.NotificationMonitor
dbus receive bus=session

1
apparmor.d/groups/gnome/gsd-housekeeping
View file

@ -16,6 +16,7 @@ profile gsd-housekeeping @{exec_path} flags=(attach_disconnected) {
include <abstractions/dconf-write>
include <abstractions/thumbnails-cache-read>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
signal (receive) set=(term, hup) peer=gnome*,

1
apparmor.d/groups/gnome/gsd-keyboard
View file

@ -21,6 +21,7 @@ profile gsd-keyboard @{exec_path} flags=(attach_disconnected) {
include <abstractions/gnome-strict>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Keyboard

1
apparmor.d/groups/gnome/gsd-media-keys
View file

@ -24,6 +24,7 @@ profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
include <abstractions/gnome-strict>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
network netlink raw,

1
apparmor.d/groups/gnome/gsd-power
View file

@ -31,6 +31,7 @@ profile gsd-power @{exec_path} flags=(attach_disconnected) {
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Power

1
apparmor.d/groups/gnome/gsd-print-notifications
View file

@ -18,6 +18,7 @@ profile gsd-print-notifications @{exec_path} flags=(attach_disconnected) {
network inet stream,
network inet6 stream,
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
signal (send) set=(hup) peer=gsd-printer,

1
apparmor.d/groups/gnome/gsd-printer
View file

@ -14,6 +14,7 @@ profile gsd-printer @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
signal (receive) set=(hup) peer=gsd-print-notifications,

1
apparmor.d/groups/gnome/gsd-rfkill
View file

@ -16,6 +16,7 @@ profile gsd-rfkill @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.gnome.SessionManager>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
network netlink raw,

1
apparmor.d/groups/gnome/gsd-screensaver-proxy
View file

@ -12,6 +12,7 @@ profile gsd-screensaver-proxy @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus-session>
include <abstractions/bus/org.gnome.SessionManager>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.freedesktop.ScreenSaver

1
apparmor.d/groups/gnome/gsd-sharing
View file

@ -15,6 +15,7 @@ profile gsd-sharing @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dconf-write>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Sharing

1
apparmor.d/groups/gnome/gsd-smartcard
View file

@ -15,6 +15,7 @@ profile gsd-smartcard @{exec_path} flags=(attach_disconnected) {
include <abstractions/nameservice-strict>
include <abstractions/p11-kit>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Smartcard

1
apparmor.d/groups/gnome/gsd-sound
View file

@ -15,6 +15,7 @@ profile gsd-sound @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dconf-write>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Sound

2
apparmor.d/groups/gnome/gsd-usb-protection
View file

@ -11,6 +11,8 @@ profile gsd-usb-protection @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>
signal (receive) set=(cont, term) peer=systemd-user,
@{exec_path} mr,
/usr/share/glib-2.0/schemas/gschemas.compiled r,

1
apparmor.d/groups/gnome/gsd-wacom
View file

@ -19,6 +19,7 @@ profile gsd-wacom @{exec_path} flags=(attach_disconnected) {
include <abstractions/gnome-strict>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Wacom

2
apparmor.d/groups/gnome/gsd-xsettings
View file

@ -30,6 +30,8 @@ profile gsd-xsettings @{exec_path} {
network inet6 dgram,
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
# dbus: own bus=session name=org.gnome.SettingsDaemon.XSettings
# dbus: own bus=session name=org.gtk.Settings

2
apparmor.d/groups/gnome/mutter-x11-frames
View file

@ -17,6 +17,8 @@ profile mutter-x11-frames @{exec_path} {
include <abstractions/graphics>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
@{exec_path} mr,
/usr/share/dconf/profile/gdm r,