diff --git a/apparmor.d/abstractions/dbus-gtk b/apparmor.d/abstractions/dbus-gtk index 6d66796c..c845a747 100644 --- a/apparmor.d/abstractions/dbus-gtk +++ b/apparmor.d/abstractions/dbus-gtk @@ -28,7 +28,7 @@ dbus (send, receive) bus=session path=/org/freedesktop/Notifications interface=org.freedesktop.Notifications - peer=(name=:*), + peer=(name="{org.freedesktop.Notifications,:*}"), dbus (receive) bus=accessibility path=/org/a11y/atspi/registry interface=org.a11y.atspi.Registry diff --git a/apparmor.d/groups/apps/thunderbird b/apparmor.d/groups/apps/thunderbird index f82ef340..55756ea3 100644 --- a/apparmor.d/groups/apps/thunderbird +++ b/apparmor.d/groups/apps/thunderbird @@ -32,7 +32,7 @@ profile thunderbird @{exec_path} { include include include - include + include include include include @@ -223,13 +223,6 @@ profile thunderbird @{exec_path} { owner /dev/tty[0-9]* rw, owner @{HOME}/.xsession-errors w, - # dconf write - owner @{HOME}/.config/dconf/ rw, - owner @{HOME}/.config/dconf/user rw, - owner @{run}/user/@{uids}/dconf/user rw, - - owner @{run}/user/@{uid}/ICEauthority r, - @{sys}/cgroup/cpu,cpuacct/user.slice/cpu.cfs_quota_us r, @{sys}/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us r, diff --git a/apparmor.d/profiles-m-r/qbittorrent b/apparmor.d/profiles-m-r/qbittorrent index 6de10530..a96663ec 100644 --- a/apparmor.d/profiles-m-r/qbittorrent +++ b/apparmor.d/profiles-m-r/qbittorrent @@ -22,7 +22,7 @@ profile qbittorrent @{exec_path} { include include include - include + include include include include @@ -46,54 +46,54 @@ profile qbittorrent @{exec_path} { network netlink raw, dbus (send) bus=session path=/StatusNotifierWatcher - interface=org.freedesktop.DBus.Introspectable - member=Introspect - peer=(name=org.kde.StatusNotifierWatcher), - + interface=org.freedesktop.DBus.Introspectable + member=Introspect + peer=(name=org.kde.StatusNotifierWatcher), + dbus (send) bus=session path=/StatusNotifierWatcher - interface=org.freedesktop.DBus.Properties - member=Get - peer=(name=org.kde.StatusNotifierWatcher), - + interface=org.freedesktop.DBus.Properties + member=Get + peer=(name=org.kde.StatusNotifierWatcher), + dbus (send) bus=session path=/StatusNotifierWatcher - interface=org.kde.StatusNotifierWatcher - member=RegisterStatusNotifierItem - peer=(name=org.kde.StatusNotifierWatcher), - + interface=org.kde.StatusNotifierWatcher + member=RegisterStatusNotifierItem + peer=(name=org.kde.StatusNotifierWatcher), + dbus (send) bus=session path=/StatusNotifierItem - interface=org.kde.StatusNotifierItem - member={NewToolTip,NewIcon} - peer=(name=org.freedesktop.DBus), - + interface=org.kde.StatusNotifierItem + member={NewToolTip,NewIcon} + peer=(name=org.freedesktop.DBus), + dbus (receive) bus=session path=/StatusNotifierItem - interface=org.kde.StatusNotifierItem - member=Activate - peer=(name=:*), - + interface=org.kde.StatusNotifierItem + member=Activate + peer=(name=:*), + dbus (receive) bus=session path=/StatusNotifierItem - interface=org.freedesktop.DBus.Properties - member=GetAll - peer=(name=:*), - + interface=org.freedesktop.DBus.Properties + member=GetAll + peer=(name=:*), + dbus (receive) bus=session path=/MenuBar - interface=org.freedesktop.DBus.Properties - member=GetAll - peer=(name=:*), - + interface=org.freedesktop.DBus.Properties + member=GetAll + peer=(name=:*), + dbus (send) bus=session path=/MenuBar - interface=com.canonical.dbusmenu - member=ItemsPropertiesUpdated - peer=(name=org.freedesktop.DBus), - + interface=com.canonical.dbusmenu + member=ItemsPropertiesUpdated + peer=(name=org.freedesktop.DBus), + dbus (receive) bus=session path=/MenuBar - interface=com.canonical.dbusmenu - member={GetLayout,GetGroupProperties,AboutToShow,AboutToShowGroup,EventGroup,Event} - peer=(name=:*), - + interface=com.canonical.dbusmenu + member={GetLayout,GetGroupProperties,AboutToShow,AboutToShowGroup,EventGroup,Event} + peer=(name=:*), + dbus (send) bus=session path=/org/freedesktop/DBus - interface=org.freedesktop.DBus - member={RequestName,ReleaseName} - peer=(name=org.freedesktop.DBus), + interface=org.freedesktop.DBus + member={RequestName,ReleaseName} + peer=(name=org.freedesktop.DBus), dbus (send) bus=accessibility path=/org/a11y/atspi/accessible/root interface=org.a11y.atspi.Socket @@ -109,7 +109,6 @@ profile qbittorrent @{exec_path} { name=org.kde.StatusNotifierItem-*, owner /tmp/dbus-[0-9a-zA-Z]* rw, - owner @{run}/user/@{uid}/at-spi/bus{,_[0-9]*} rw, @{exec_path} mr, @@ -172,8 +171,7 @@ profile qbittorrent @{exec_path} { # file_inherit owner /dev/tty[0-9]* rw, - # dconf write - owner @{run}/user/@{uid}/dconf/user rw, + # X-tiny owner @{run}/user/@{uid}/ICEauthority r, # gnome-tiny