felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(dbus): improve dbus introspectable rules.

Browse source
This commit is contained in:
Alexandre Pujol 2023-09-15 18:14:39 +01:00
parent 2d2693bd99
commit f7d1931bdf
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
37 changed files with 51 additions and 69 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/freedesktop/at-spi2-registryd
View file

@ -73,7 +73,7 @@ profile at-spi2-registryd @{exec_path} flags=(attach_disconnected) {
member=GetAddress
peer=(name=org.a11y.Bus, label=at-spi-bus-launcher),
dbus receive bus=session path=/
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=gnome-shell),

2
apparmor.d/groups/freedesktop/dconf-service
View file

@ -29,7 +29,7 @@ profile dconf-service @{exec_path} flags=(attach_disconnected) {
member=Change
peer=(name=:*), # all peer's labels
dbus receive bus=session path=/
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=gnome-shell),

2
apparmor.d/groups/freedesktop/pipewire
View file

@ -38,7 +38,7 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
member=Get
peer=(name=org.freedesktop.RealtimeKit[0-9]),
dbus receive bus=session path=/
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=gnome-shell),

2
apparmor.d/groups/freedesktop/pipewire-media-session
View file

@ -31,7 +31,7 @@ profile pipewire-media-session @{exec_path} {
member=MakeThreadRealtime
peer=(name=org.freedesktop.RealtimeKit1),
dbus receive bus=session path=/
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=gnome-shell),

3
apparmor.d/groups/freedesktop/pulseaudio
View file

@ -75,7 +75,8 @@ profile pulseaudio @{exec_path} {
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect,
member=Introspect
peer=(name=:*, label=gnome-shell),
dbus bind bus=session
name=org.freedesktop.ReserveDevice[0-9].Audio[0-9],

2
apparmor.d/groups/freedesktop/xdg-desktop-portal
View file

@ -97,7 +97,7 @@ profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
member=Lookup
peer=(name=:*, label=xdg-permission-store),
dbus receive bus=session path=/
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=gnome-shell),

2
apparmor.d/groups/freedesktop/xdg-desktop-portal-gnome
View file

@ -117,7 +117,7 @@ profile xdg-desktop-portal-gnome @{exec_path} {
member=Read
peer=(name=:*, label=xdg-desktop-portal),
dbus receive bus=session path=/
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=gnome-shell),