felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(dbus): improve dbus introspectable rules.

Browse source
This commit is contained in:
Alexandre Pujol 2023-09-15 18:14:39 +01:00
parent 2d2693bd99
commit f7d1931bdf
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
37 changed files with 51 additions and 69 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/bus/ibus-daemon
View file

@ -34,7 +34,7 @@ profile ibus-daemon @{exec_path} flags=(attach_disconnected) {
member=ListMountableInfo
peer=(name=:*, label=gvfsd),
dbus receive bus=session path=/
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=gnome-shell),

2
apparmor.d/groups/bus/ibus-dconf
View file

@ -19,7 +19,7 @@ profile ibus-dconf @{exec_path} flags=(attach_disconnected) {
unix (send, receive, connect) type=stream peer=(addr="@/home/*/.cache/ibus/dbus-????????", label=ibus-daemon),
unix (send, receive, connect) type=stream peer=(addr="@/var/lib/gdm{3,}/.cache/ibus/dbus-????????", label=ibus-daemon),
dbus receive bus=session path=/
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=gnome-shell),

2
apparmor.d/groups/bus/ibus-extension-gtk3
View file

@ -57,7 +57,7 @@ profile ibus-extension-gtk3 @{exec_path} flags=(attach_disconnected) {
member=Embed
peer=(name=org.a11y.atspi.Registry), # all peer's labels
dbus receive bus=session path=/
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=gnome-shell),

2
apparmor.d/groups/bus/ibus-portal
View file

@ -19,7 +19,7 @@ profile ibus-portal @{exec_path} flags=(attach_disconnected) {
member={RequestName,ReleaseName}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
dbus receive bus=session path=/{,org}
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=gnome-shell),