felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(dbus): add initial polkit abstraction.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-01 20:42:41 +00:00
parent 7f38dd255e
commit d6888a65c4
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
16 changed files with 35 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/profiles-a-f/boltd
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/boltd
profile boltd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/polkit>
include <abstractions/dbus-strict>
include <abstractions/nameservice-strict>

6
apparmor.d/profiles-a-f/fwupd
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,fwupd/}fwupd
profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
include <abstractions/base>
include <abstractions/bus/polkit>
include <abstractions/consoles>
include <abstractions/dbus-strict>
include <abstractions/disks-read>
@ -60,11 +61,6 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
member=Changed
peer=(label=fwupdmgr),
dbus receive bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.DBus.Properties
member={Changed,GetAll}
peer=(label=polkitd),
dbus receive bus=system path=/
interface=org.freedesktop.DBus.Properties
member={GetAll,SetHints,GetPlugins,GetRemotes}