feat(abs): add mpris

apparmor.d/abstractions/bus/session/org.mpris.MediaPlayer2.Player

@@ -1,5 +1,5 @@
 # apparmor.d - Full set of apparmor profiles
-# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
+# Copyright (C) 2023-2025 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
   abi <abi/4.0>,
@@ -33,6 +33,6 @@
        member=Seeked
        peer=(name=org.freedesktop.DBus),
 
-  include if exists <abstractions/bus/org.mpris.MediaPlayer2.Player.d>
+  include if exists <abstractions/bus/session/org.mpris.MediaPlayer2.Player.d>
 
 # vim:syntax=apparmor

apparmor.d/abstractions/mpris

@@ -0,0 +1,17 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+# Allow operating as an MPRIS player.
+
+  abi <abi/4.0>,
+
+  include <abstractions/bus/session/org.mpris.MediaPlayer2.Player>
+
+  # Allow binding to the well-known DBus mpris interface based on the app's name
+  # See: https://specifications.freedesktop.org/mpris-spec/latest/
+  #aa:dbus own bus=session name=org.mpris.MediaPlayer2.@{profile_name}
+
+  include if exists <abstractions/mpris.d>
+
+# vim:syntax=apparmor

apparmor.d/profiles-s-z/spotify

@@ -25,6 +25,7 @@ profile spotify @{exec_path} flags=(attach_disconnected) {
   include <abstractions/common/electron>
   include <abstractions/devices-usb-read>
   include <abstractions/mediakeys>
+  include <abstractions/mpris>
   include <abstractions/notifications>
   include <abstractions/screensaver>
   include <abstractions/secrets-service>
@@ -35,8 +36,6 @@ profile spotify @{exec_path} flags=(attach_disconnected) {
   network inet6 stream,
   network netlink raw,
 
-  #aa:dbus own bus=session name=org.mpris.MediaPlayer2.spotify
-
   #aa:dbus talk bus=session name=org.ayatana.NotificationItem label=gnome-shell
   #aa:dbus talk bus=session name=org.freedesktop.portal.{d,D}esktop label=xdg-desktop-portal
   #aa:dbus talk bus=session name=org.gnome.SettingsDaemon.MediaKeys label=gsd-media-keys
@@ -46,7 +45,6 @@ profile spotify @{exec_path} flags=(attach_disconnected) {
        member=RetrieveSecret
        peer=(name=org.freedesktop.portal.Desktop, label=xdg-desktop-portal),
 
-
   @{exec_path} mrix,
 
   @{sh_path} mr,

apparmor.d/profiles-s-z/vlc

@@ -22,6 +22,7 @@ profile vlc @{exec_path} {
   include <abstractions/graphics>
   include <abstractions/gstreamer>
   include <abstractions/ibus>
+  include <abstractions/mpris>
   include <abstractions/nameservice-strict>
   include <abstractions/qt5-settings-write>
   include <abstractions/screensaver>
@@ -35,9 +36,6 @@ profile vlc @{exec_path} {
   network inet6 stream,
   network netlink raw,
 
-  #aa:dbus own bus=session name=org.mpris.MediaPlayer2.vlc
-  #aa:dbus talk bus=session name=org.mpris.MediaPlayer2.Player label=unconfined
-
   @{exec_path} mrix,
 
   @{open_path}           rPx -> child-open-help,