feat(profiles): dbus abstactions and related rules.

This commit is contained in:
Alexandre Pujol 2022-06-05 22:57:29 +01:00
parent 63e5980d8d
commit e949654614
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
62 changed files with 101 additions and 66 deletions

View file

@ -19,6 +19,7 @@ include <tunables/global>
profile sshd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/authentication>
include <abstractions/dbus-strict>
include <abstractions/consoles>
include <abstractions/hosts_access>
include <abstractions/nameservice-strict>
@ -98,24 +99,5 @@ profile sshd @{exec_path} flags=(attach_disconnected) {
/dev/ptmx rw,
@{run}/systemd/userdb/io.systemd.DynamicUser w,
# DBus
@{run}/dbus/system_bus_socket rw,
dbus send
bus=system
path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member=Hello
peer=(name=org.freedesktop.DBus),
dbus send
bus=system
path=/org/freedesktop/login1
interface=org.freedesktop.login1.Manager
member={CreateSession,ReleaseSession}
peer=(name=org.freedesktop.login1),
include if exists <local/sshd>
}