felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): add mpris

Browse source
This commit is contained in:
Alexandre Pujol 2025-09-14 20:43:39 +02:00
parent 8c66d39a1e
commit d2e941163f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
4 changed files with 21 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/abstractions/bus/org.mpris.MediaPlayer2.Player → apparmor.d/abstractions/bus/session/org.mpris.MediaPlayer2.Player
View file

@ -1,5 +1,5 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2023-2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
@ -33,6 +33,6 @@
member=Seeked
peer=(name=org.freedesktop.DBus),
include if exists <abstractions/bus/org.mpris.MediaPlayer2.Player.d>
include if exists <abstractions/bus/session/org.mpris.MediaPlayer2.Player.d>
# vim:syntax=apparmor

17
apparmor.d/abstractions/mpris Normal file
View file

@ -0,0 +1,17 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# Allow operating as an MPRIS player.
abi <abi/4.0>,
include <abstractions/bus/session/org.mpris.MediaPlayer2.Player>
# Allow binding to the well-known DBus mpris interface based on the app's name
# See: https://specifications.freedesktop.org/mpris-spec/latest/
#aa:dbus own bus=session name=org.mpris.MediaPlayer2.@{profile_name}
include if exists <abstractions/mpris.d>
# vim:syntax=apparmor

4
apparmor.d/profiles-s-z/spotify
View file

@ -25,6 +25,7 @@ profile spotify @{exec_path} flags=(attach_disconnected) {
include <abstractions/common/electron>
include <abstractions/devices-usb-read>
include <abstractions/mediakeys>
include <abstractions/mpris>
include <abstractions/notifications>
include <abstractions/screensaver>
include <abstractions/secrets-service>
@ -35,8 +36,6 @@ profile spotify @{exec_path} flags=(attach_disconnected) {
network inet6 stream,
network netlink raw,
#aa:dbus own bus=session name=org.mpris.MediaPlayer2.spotify
#aa:dbus talk bus=session name=org.ayatana.NotificationItem label=gnome-shell
#aa:dbus talk bus=session name=org.freedesktop.portal.{d,D}esktop label=xdg-desktop-portal
#aa:dbus talk bus=session name=org.gnome.SettingsDaemon.MediaKeys label=gsd-media-keys
@ -46,7 +45,6 @@ profile spotify @{exec_path} flags=(attach_disconnected) {
member=RetrieveSecret
peer=(name=org.freedesktop.portal.Desktop, label=xdg-desktop-portal),
@{exec_path} mrix,
@{sh_path} mr,

4
apparmor.d/profiles-s-z/vlc
View file

@ -22,6 +22,7 @@ profile vlc @{exec_path} {
include <abstractions/graphics>
include <abstractions/gstreamer>
include <abstractions/ibus>
include <abstractions/mpris>
include <abstractions/nameservice-strict>
include <abstractions/qt5-settings-write>
include <abstractions/screensaver>
@ -35,9 +36,6 @@ profile vlc @{exec_path} {
network inet6 stream,
network netlink raw,
#aa:dbus own bus=session name=org.mpris.MediaPlayer2.vlc
#aa:dbus talk bus=session name=org.mpris.MediaPlayer2.Player label=unconfined
@{exec_path} mrix,
@{open_path} rPx -> child-open-help,