mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 17:08:09 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): mirnor cleanup on the new dbus profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-16 21:46:02 +00:00
parent 0c5e71f971
commit 14680e736d
Failed to generate hash of commit
3 changed files with 13 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
apparmor.d/groups/bus/dbus-accessibility
View file

@ -43,20 +43,22 @@ profile dbus-accessibility @{exec_path} flags=(attach_disconnected) {
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/etc/machine-id r,
/var/lib/dbus/machine-id r,
/var/lib/gdm{3,}/.config/dconf/user r,
/var/lib/gdm{3,}/greeter-dconf-defaults r,
owner /var/lib/gdm{3,}/.config/dconf/user r,
owner /var/lib/gdm{3,}/greeter-dconf-defaults r,
@{run}/systemd/userdb/ r,
@{run}/systemd/users/@{uid} r,
@{run}/systemd/users/@{uid} r,
owner @{run}/user/@{uid}/gdm/Xauthority r,
@{sys}/kernel/security/apparmor/.access rw,
@{PROC}/@{pid}/cgroup r,
@{PROC}/@{pid}/cmdline r,
@{PROC}/@{pid}/oom_score_adj r,
@{PROC}/sys/kernel/random/boot_id r,
owner @{PROC}/@{pid}/fd/ r,
owner /dev/tty@{int} rw,
include if exists <local/dbus-accessibility>
}

5
apparmor.d/groups/bus/dbus-session
View file

@ -44,7 +44,9 @@ profile dbus-session flags=(attach_disconnected) {
/var/lib/snapd/dbus-1/{,**} r,
@{system_share_dirs}/dbus-1/{,**} r,
@{run}/systemd/userd/b/ r,
/etc/machine-id r,
/var/lib/dbus/machine-id r,
@{run}/systemd/users/@{uid} r,
owner @{run}/user/@{uid}/dbus-1/ rw,
owner @{run}/user/@{uid}/dbus-1/services/ rw,
@ -54,7 +56,6 @@ profile dbus-session flags=(attach_disconnected) {
@{sys}/kernel/security/apparmor/features/dbus/mask r,
@{sys}/module/apparmor/parameters/enabled r,
@{PROC}/sys/kernel/random/boot_id r,
owner @{PROC}/@{pid}/attr/apparmor/current r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/fd/ r,

4
apparmor.d/groups/bus/dbus-system
View file

@ -35,12 +35,14 @@ profile dbus-system flags=(attach_disconnected) {
@{lib}/** PUx,
/usr/share/*/** PUx,
/etc/machine-id r,
/etc/dbus-1/{,**} r,
/usr/share/dbus-1/{,**} r,
/var/lib/snapd/dbus-1/{,**} r,
@{system_share_dirs}/dbus-1/{,**} r,
/etc/machine-id r,
/var/lib/dbus/machine-id r,
@{user_share_dirs}/icc/ r,
@{user_share_dirs}/icc/edid-@{md5}.icc r,
/var/lib/gdm{,3}/.local/share/icc/ r,