From 0031c9e86f01c80202d35bd475b448a474abfb97 Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Thu, 26 Oct 2023 22:37:56 +0100 Subject: [PATCH] feat(profiles): minor dbus improvment. --- apparmor.d/groups/apt/apt | 9 ++++----- apparmor.d/groups/bus/ibus-extension-gtk3 | 10 ++++++++++ apparmor.d/groups/gnome/gsd-disk-utility-notify | 5 +++++ 3 files changed, 19 insertions(+), 5 deletions(-) diff --git a/apparmor.d/groups/apt/apt b/apparmor.d/groups/apt/apt index 7eec8460..9f057e79 100644 --- a/apparmor.d/groups/apt/apt +++ b/apparmor.d/groups/apt/apt @@ -43,10 +43,10 @@ profile apt @{exec_path} flags=(attach_disconnected) { member={StateHasChanged,Introspect} peer=(name=org.freedesktop.PackageKit), - dbus send bus=system path=/org/freedesktop/login[0-9] - interface=org.freedesktop.login[0-9].Manager + dbus send bus=system path=/org/freedesktop/login1 + interface=org.freedesktop.login1.Manager member=Inhibit - peer=(name=org.freedesktop.login[0-9]), + peer=(name=org.freedesktop.login1), dbus send bus=system path=/org/freedesktop/DBus{,/Bus} interface=org.freedesktop.DBus{,.Introspectable} @@ -57,8 +57,7 @@ profile apt @{exec_path} flags=(attach_disconnected) { interface=org.freedesktop.{DBus.Introspectable,PolicyKit1.Authority} member={CheckAuthorization,Introspect}, - dbus bind bus=system - name=org.debian.apt, + dbus bind bus=system name=org.debian.apt, @{exec_path} mr, diff --git a/apparmor.d/groups/bus/ibus-extension-gtk3 b/apparmor.d/groups/bus/ibus-extension-gtk3 index 95b038d1..4c622e7f 100644 --- a/apparmor.d/groups/bus/ibus-extension-gtk3 +++ b/apparmor.d/groups/bus/ibus-extension-gtk3 @@ -57,6 +57,16 @@ profile ibus-extension-gtk3 @{exec_path} flags=(attach_disconnected) { member=Embed peer=(name=org.a11y.atspi.Registry), # all peer's labels + dbus receive bus=accessibility path=/org/a11y/atspi/accessible/root + interface=org.freedesktop.DBus.Properties + member=Set + peer=(name=:*, label=at-spi2-registryd), + + dbus receive bus=accessibility path=/org/a11y/atspi/registry + interface=org.a11y.atspi.Registry + member=EventListenerDeregistered + peer=(name=:*, label=at-spi2-registryd), + dbus receive bus=session interface=org.freedesktop.DBus.Introspectable member=Introspect diff --git a/apparmor.d/groups/gnome/gsd-disk-utility-notify b/apparmor.d/groups/gnome/gsd-disk-utility-notify index 5e3a67a2..dc8d223e 100644 --- a/apparmor.d/groups/gnome/gsd-disk-utility-notify +++ b/apparmor.d/groups/gnome/gsd-disk-utility-notify @@ -24,6 +24,11 @@ profile gsd-disk-utility-notify @{exec_path} { interface=org.freedesktop.DBus.ObjectManager member=GetManagedObjects, + dbus receive bus=session + interface=org.freedesktop.DBus.Introspectable + member=Introspect + peer=(name=:*, label=gnome-shell), + dbus bind bus=session name=org.gnome.Disks.NotificationMonitor,