felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): add signal from systemd-user.

Browse source
This commit is contained in:
Alexandre Pujol 2024-02-06 22:37:59 +01:00
parent 968da5518b
commit d0a052b7ae
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
48 changed files with 82 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

12
apparmor.d/groups/gvfs/gvfsd-fuse
View file

@ -13,10 +13,12 @@ profile gvfsd-fuse @{exec_path} {
include <abstractions/bus-session>
include <abstractions/bus/org.gtk.vfs.MountTracker>
unix (send,receive) type=stream addr=none peer=(label=gvfsd-fuse//fusermount),
mount fstype={fuse,fuse.*} -> @{run}/user/@{uid}/gvfs/,
signal (receive) set=(cont, term) peer=systemd-user,
unix (send,receive) type=stream addr=none peer=(label=gvfsd-fuse//fusermount),
dbus send bus=session path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker
member=RegisterFuse
@ -42,11 +44,13 @@ profile gvfsd-fuse @{exec_path} {
capability dac_read_search,
capability sys_admin, # To mount anything
unix (send,receive) type=stream addr=none peer=(label=gvfsd-fuse),
mount fstype={fuse,fuse.*} -> @{run}/user/@{uid}/gvfs/,
umount @{run}/user/@{uid}/**/,
signal (receive) set=(cont, term) peer=systemd-user,
unix (send,receive) type=stream addr=none peer=(label=gvfsd-fuse),
@{bin}/fusermount{,3} mr,
/etc/fuse{,3}.conf r,