mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 08:58:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profiles): minor dbus improvment.

Browse source
This commit is contained in:
Alexandre Pujol 2023-10-26 22:37:56 +01:00
parent cdf601ca5c
commit 0031c9e86f
Failed to generate hash of commit
3 changed files with 19 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
apparmor.d/groups/apt/apt
View file

@ -43,10 +43,10 @@ profile apt @{exec_path} flags=(attach_disconnected) {
member={StateHasChanged,Introspect}
peer=(name=org.freedesktop.PackageKit),
dbus send bus=system path=/org/freedesktop/login[0-9]
interface=org.freedesktop.login[0-9].Manager
dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login1.Manager
member=Inhibit
peer=(name=org.freedesktop.login[0-9]),
peer=(name=org.freedesktop.login1),
dbus send bus=system path=/org/freedesktop/DBus{,/Bus}
interface=org.freedesktop.DBus{,.Introspectable}
@ -57,8 +57,7 @@ profile apt @{exec_path} flags=(attach_disconnected) {
interface=org.freedesktop.{DBus.Introspectable,PolicyKit1.Authority}
member={CheckAuthorization,Introspect},
dbus bind bus=system
name=org.debian.apt,
dbus bind bus=system name=org.debian.apt,
@{exec_path} mr,

10
apparmor.d/groups/bus/ibus-extension-gtk3
View file

@ -57,6 +57,16 @@ profile ibus-extension-gtk3 @{exec_path} flags=(attach_disconnected) {
member=Embed
peer=(name=org.a11y.atspi.Registry), # all peer's labels
dbus receive bus=accessibility path=/org/a11y/atspi/accessible/root
interface=org.freedesktop.DBus.Properties
member=Set
peer=(name=:*, label=at-spi2-registryd),
dbus receive bus=accessibility path=/org/a11y/atspi/registry
interface=org.a11y.atspi.Registry
member=EventListenerDeregistered
peer=(name=:*, label=at-spi2-registryd),
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect

5
apparmor.d/groups/gnome/gsd-disk-utility-notify
View file

@ -24,6 +24,11 @@ profile gsd-disk-utility-notify @{exec_path} {
interface=org.freedesktop.DBus.ObjectManager
member=GetManagedObjects,
dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=gnome-shell),
dbus bind bus=session
name=org.gnome.Disks.NotificationMonitor,