mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(dbus): rename dbus abstractions.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-06 19:38:47 +00:00
parent 401606b1aa
commit 3425419f0e
Failed to generate hash of commit
112 changed files with 263 additions and 223 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/apps/calibre
View file

@ -15,8 +15,8 @@ include <tunables/global>
@{exec_path} += @{bin}/web2disk @{exec_path} += @{bin}/web2disk
profile calibre @{exec_path} { profile calibre @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/chromium-common> include <abstractions/chromium-common>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>

5
apparmor.d/groups/apt/apt
View file

@ -11,8 +11,9 @@ include <tunables/global>
profile apt @{exec_path} flags=(attach_disconnected) { profile apt @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt-common> include <abstractions/apt-common>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.PackageKit>
include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

4
apparmor.d/groups/apt/unattended-upgrade
View file

@ -11,7 +11,9 @@ include <tunables/global>
profile unattended-upgrade @{exec_path} flags=(attach_disconnected) { profile unattended-upgrade @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt-common> include <abstractions/apt-common>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.freedesktop.PackageKit>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

4
apparmor.d/groups/apt/unattended-upgrade-shutdown
View file

@ -9,8 +9,8 @@ include <tunables/global>
@{exec_path} = /usr/share/unattended-upgrades/unattended-upgrade-shutdown @{exec_path} = /usr/share/unattended-upgrades/unattended-upgrade-shutdown
profile unattended-upgrade-shutdown @{exec_path} flags=(attach_disconnected) { profile unattended-upgrade-shutdown @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/network-manager> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>

2
apparmor.d/groups/avahi/avahi-browse
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/avahi-browse @{bin}/avahi-browse-domains @{exec_path} = @{bin}/avahi-browse @{bin}/avahi-browse-domains
profile avahi-browse @{exec_path} { profile avahi-browse @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/avahi> include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

2
apparmor.d/groups/avahi/avahi-resolve
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/avahi-resolve @{bin}/avahi-resolve-address @{bin}/avahi-resolve-host-name @{exec_path} = @{bin}/avahi-resolve @{bin}/avahi-resolve-address @{bin}/avahi-resolve-host-name
profile avahi-resolve @{exec_path} { profile avahi-resolve @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/avahi> include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

9
apparmor.d/groups/browsers/firefox
View file

@ -16,10 +16,11 @@ include <tunables/global>
profile firefox @{exec_path} flags=(attach_disconnected) { profile firefox @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/desktop> include <abstractions/bus/org.freedesktop.FileManager1>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/rtkit> include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/org.freedesktop.RealtimeKit1>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/bus/ibus-daemon
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/ibus-daemon @{exec_path} = @{bin}/ibus-daemon
profile ibus-daemon @{exec_path} flags=(attach_disconnected) { profile ibus-daemon @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/ibus> include <abstractions/ibus>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/bus/ibus-extension-gtk3
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,ibus/}ibus-extension-gtk3 @{exec_path} = @{lib}/{,ibus/}ibus-extension-gtk3
profile ibus-extension-gtk3 @{exec_path} flags=(attach_disconnected) { profile ibus-extension-gtk3 @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/bus/ibus-x11
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,ibus/}ibus-x11 @{exec_path} = @{lib}/{,ibus/}ibus-x11
profile ibus-x11 @{exec_path} flags=(attach_disconnected) { profile ibus-x11 @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dri-common> include <abstractions/dri-common>

2
apparmor.d/groups/freedesktop/accounts-daemon
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,accountsservice/}accounts-daemon @{exec_path} = @{lib}/{,accountsservice/}accounts-daemon
profile accounts-daemon @{exec_path} flags=(attach_disconnected) { profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/wutmp> include <abstractions/wutmp>

4
apparmor.d/groups/freedesktop/at-spi2-registryd
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{lib}/{,at-spi2{,-core}/}at-spi2-registryd @{exec_path} = @{lib}/{,at-spi2{,-core}/}at-spi2-registryd
profile at-spi2-registryd @{exec_path} flags=(attach_disconnected) { profile at-spi2-registryd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/freedesktop/colord
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,colord/}colord @{exec_path} = @{lib}/{,colord/}colord
profile colord @{exec_path} flags=(attach_disconnected) { profile colord @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/devices-usb> include <abstractions/devices-usb>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/freedesktop/colord-sane
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,colord/}colord-sane @{exec_path} = @{lib}/{,colord/}colord-sane
profile colord-sane @{exec_path} flags=(attach_disconnected) { profile colord-sane @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/avahi> include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/devices-usb> include <abstractions/devices-usb>
include <abstractions/openssl> include <abstractions/openssl>

8
apparmor.d/groups/freedesktop/geoclue
View file

@ -9,10 +9,10 @@ include <tunables/global>
@{exec_path} = @{lib}/geoclue @{lib}/geoclue-2.0/demos/agent @{exec_path} = @{lib}/geoclue @{lib}/geoclue-2.0/demos/agent
profile geoclue @{exec_path} flags=(attach_disconnected) { profile geoclue @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/avahi> include <abstractions/bus/fi.w1.wpa_supplicant1>
include <abstractions/bus/modem-manager> include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/bus/network-manager> include <abstractions/bus/org.freedesktop.ModemManager1>
include <abstractions/bus/wpa-supplicant> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/p11-kit> include <abstractions/p11-kit>

2
apparmor.d/groups/freedesktop/pipewire
View file

@ -11,7 +11,7 @@ include <tunables/global>
profile pipewire @{exec_path} flags=(attach_disconnected) { profile pipewire @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/bus/rtkit> include <abstractions/bus/org.freedesktop.RealtimeKit1>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/freedesktop/pipewire-media-session
View file

@ -11,7 +11,7 @@ include <tunables/global>
profile pipewire-media-session @{exec_path} { profile pipewire-media-session @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/bus/rtkit> include <abstractions/bus/org.freedesktop.RealtimeKit1>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/devices-usb> include <abstractions/devices-usb>

8
apparmor.d/groups/freedesktop/pulseaudio
View file

@ -12,10 +12,10 @@ include <tunables/global>
profile pulseaudio @{exec_path} { profile pulseaudio @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/bus/avahi> include <abstractions/bus/org.bluez>
include <abstractions/bus/bluetooth> include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/bus/hostname> include <abstractions/bus/org.freedesktop.hostname1>
include <abstractions/bus/rtkit> include <abstractions/bus/org.freedesktop.RealtimeKit1>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

4
apparmor.d/groups/freedesktop/upowerd
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{lib}/{,upower/}upowerd @{exec_path} = @{lib}/{,upower/}upowerd
profile upowerd @{exec_path} flags=(attach_disconnected) { profile upowerd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/bluetooth> include <abstractions/bus/org.bluez>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/devices-usb> include <abstractions/devices-usb>

6
apparmor.d/groups/freedesktop/xdg-dbus-proxy
View file

@ -9,9 +9,9 @@ include <tunables/global>
@{exec_path} = @{bin}/xdg-dbus-proxy @{exec_path} = @{bin}/xdg-dbus-proxy
profile xdg-dbus-proxy @{exec_path} flags=(attach_disconnected) { profile xdg-dbus-proxy @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/avahi> include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/bus/desktop> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/network-manager> include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

7
apparmor.d/groups/freedesktop/xdg-desktop-portal-gnome
View file

@ -9,9 +9,10 @@ include <tunables/global>
@{exec_path} = @{lib}/xdg-desktop-portal-gnome @{exec_path} = @{lib}/xdg-desktop-portal-gnome
profile xdg-desktop-portal-gnome @{exec_path} { profile xdg-desktop-portal-gnome @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/account-daemon> include <abstractions/bus/org.freedesktop.Accounts>
include <abstractions/bus/desktop> include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gnome.Mutter.DisplayConfig>
include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

14
apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk
View file

@ -9,13 +9,13 @@ include <tunables/global>
@{exec_path} = @{lib}/xdg-desktop-portal-gtk @{exec_path} = @{lib}/xdg-desktop-portal-gtk
profile xdg-desktop-portal-gtk @{exec_path} { profile xdg-desktop-portal-gtk @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/account-daemon> include <abstractions/bus/org.a11y>
include <abstractions/bus/atspi> include <abstractions/bus/org.freedesktop.Accounts>
include <abstractions/bus/desktop> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/gnome-screensaver> include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/network-manager> include <abstractions/bus/org.gnome.ScreenSaver>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

1
apparmor.d/groups/freedesktop/xdg-document-portal
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/xdg-document-portal @{exec_path} = @{lib}/xdg-document-portal
profile xdg-document-portal @{exec_path} flags=(attach_disconnected) { profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/org.freedesktop.impl.portal.PermissionStore>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
capability sys_nice, capability sys_nice,

2
apparmor.d/groups/freedesktop/xorg
View file

@ -13,7 +13,7 @@ include <tunables/global>
@{exec_path} += @{lib}/xorg/Xorg{,.wrap} @{exec_path} += @{lib}/xorg/Xorg{,.wrap}
profile xorg @{exec_path} flags=(attach_disconnected) { profile xorg @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/login-session> include <abstractions/bus/org.freedesktop.login1.Session>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/fontconfig-cache-read> include <abstractions/fontconfig-cache-read>
include <abstractions/fonts> include <abstractions/fonts>

6
apparmor.d/groups/gnome/evolution-addressbook-factory
View file

@ -9,9 +9,9 @@ include <tunables/global>
@{exec_path} = @{lib}/{,evolution-data-server/}evolution-addressbook-factory @{exec_path} = @{lib}/{,evolution-data-server/}evolution-addressbook-factory
profile evolution-addressbook-factory @{exec_path} { profile evolution-addressbook-factory @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/locale> include <abstractions/bus/org.freedesktop.locale1>
include <abstractions/bus/network-manager> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

6
apparmor.d/groups/gnome/evolution-alarm-notify
View file

@ -9,9 +9,9 @@ include <tunables/global>
@{exec_path} = @{lib}/evolution-data-server/{,evolution-data-server/}evolution-alarm-notify @{exec_path} = @{lib}/evolution-data-server/{,evolution-data-server/}evolution-alarm-notify
profile evolution-alarm-notify @{exec_path} { profile evolution-alarm-notify @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/accessibility>
include <abstractions/dbus-accessibility-strict> include <abstractions/bus/org.a11y>
include <abstractions/dbus-session-strict> include <abstractions/bus/session>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/fontconfig-cache-read> include <abstractions/fontconfig-cache-read>
include <abstractions/gnome> include <abstractions/gnome>

3
apparmor.d/groups/gnome/evolution-calendar-factory
View file

@ -9,7 +9,8 @@ include <tunables/global>
@{exec_path} = @{lib}/{,evolution-data-server/}evolution-calendar-factory @{exec_path} = @{lib}/{,evolution-data-server/}evolution-calendar-factory
profile evolution-calendar-factory @{exec_path} { profile evolution-calendar-factory @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/network-manager> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/gnome/evolution-source-registry
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,evolution-data-server/}evolution-source-registry @{exec_path} = @{lib}/{,evolution-data-server/}evolution-source-registry
profile evolution-source-registry @{exec_path} { profile evolution-source-registry @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/gnome/gdm-session-worker
View file

@ -10,7 +10,7 @@ include <tunables/global>
profile gdm-session-worker @{exec_path} flags=(attach_disconnected) { profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/authentication> include <abstractions/authentication>
include <abstractions/bus/account-daemon> include <abstractions/bus/org.freedesktop.Accounts>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/gnome/gdm-wayland-session
View file

@ -10,7 +10,7 @@ include <tunables/global>
profile gdm-wayland-session @{exec_path} { profile gdm-wayland-session @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bash> include <abstractions/bash>
include <abstractions/bus/systemd-session> include <abstractions/bus/org.freedesktop.systemd1-session>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

8
apparmor.d/groups/gnome/gnome-calendar
View file

@ -9,10 +9,10 @@ include <tunables/global>
@{exec_path} = @{bin}/gnome-calendar @{exec_path} = @{bin}/gnome-calendar
profile gnome-calendar @{exec_path} { profile gnome-calendar @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/desktop> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/network-manager> include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/timedate> include <abstractions/bus/org.freedesktop.timedate1>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/gnome/gnome-characters
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = /usr/share/org.gnome.Characters/org.gnome.Characters @{exec_path} = /usr/share/org.gnome.Characters/org.gnome.Characters
profile gnome-characters @{exec_path} { profile gnome-characters @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/desktop> include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/gnome/gnome-control-center
View file

@ -10,7 +10,7 @@ include <tunables/global>
profile gnome-control-center @{exec_path} flags=(attach_disconnected) { profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session> include <abstractions/dbus-session>
include <abstractions/dbus> include <abstractions/dbus>

4
apparmor.d/groups/gnome/gnome-control-center-goa-helper
View file

@ -9,8 +9,8 @@ include <tunables/global>
@{exec_path} = @{lib}/gnome-control-center-goa-helper @{exec_path} = @{lib}/gnome-control-center-goa-helper
profile gnome-control-center-goa-helper @{exec_path} { profile gnome-control-center-goa-helper @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/avahi> include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/gnome/gnome-control-center-print-renderer
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gnome-control-center-print-renderer @{exec_path} = @{lib}/gnome-control-center-print-renderer
profile gnome-control-center-print-renderer @{exec_path} { profile gnome-control-center-print-renderer @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

12
apparmor.d/groups/gnome/gnome-extension-ding
View file

@ -9,11 +9,13 @@ include <tunables/global>
@{exec_path} = /usr/share/gnome-shell/extensions/ding@rastersoft.com/{,app/}ding.js @{exec_path} = /usr/share/gnome-shell/extensions/ding@rastersoft.com/{,app/}ding.js
profile gnome-extension-ding @{exec_path} { profile gnome-extension-ding @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/net.hadess.SwitcherooControl>
include <abstractions/bus/notification> include <abstractions/bus/org.a11y>
include <abstractions/bus/vfs/daemon> include <abstractions/bus/org.freedesktop.FileManager1>
include <abstractions/bus/vfs/metadata> include <abstractions/bus/org.freedesktop.Notifications>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.Daemon>
include <abstractions/bus/org.gtk.vfs.Metadata>
include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

6
apparmor.d/groups/gnome/gnome-keyring-daemon
View file

@ -10,9 +10,9 @@ include <tunables/global>
@{exec_path} = @{bin}/gnome-keyring-daemon @{exec_path} = @{bin}/gnome-keyring-daemon
profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) { profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/desktop> include <abstractions/bus/org.freedesktop.login1.Session>
include <abstractions/bus/login-session> include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/openssl> include <abstractions/openssl>

10
apparmor.d/groups/gnome/gnome-session-binary
View file

@ -9,11 +9,11 @@ include <tunables/global>
@{exec_path} = @{lib}/gnome-session-binary @{exec_path} = @{lib}/gnome-session-binary
profile gnome-session-binary @{exec_path} flags=(attach_disconnected) { profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/gnome-screensaver> include <abstractions/bus/org.freedesktop.login1.Session>
include <abstractions/bus/login-session> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.systemd1-session>
include <abstractions/bus/systemd-session> include <abstractions/bus/org.gnome.ScreenSaver>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

34
apparmor.d/groups/gnome/gnome-shell
View file

@ -11,16 +11,30 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/app-launcher-user> include <abstractions/app-launcher-user>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/bus/account-daemon> include <abstractions/bus/net.hadess.PowerProfiles>
include <abstractions/bus/atspi> include <abstractions/bus/net.hadess.SwitcherooControl>
include <abstractions/bus/desktop> include <abstractions/bus/net.reactivated.Fprint>
include <abstractions/bus/gnome-screensaver> include <abstractions/bus/org.a11y>
include <abstractions/bus/network-manager> include <abstractions/bus/org.freedesktop.Accounts>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.ColorManager>
include <abstractions/bus/session-manager> include <abstractions/bus/org.freedesktop.FileManager1>
include <abstractions/bus/upower> include <abstractions/bus/org.freedesktop.GeoClue2>
include <abstractions/bus/vfs/metadata> include <abstractions/bus/org.freedesktop.impl.portal.PermissionStore>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.freedesktop.locale1>
include <abstractions/bus/org.freedesktop.login1.Session>
include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.freedesktop.PackageKit>
include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/org.freedesktop.RealtimeKit1>
include <abstractions/bus/org.freedesktop.secrets>
include <abstractions/bus/org.freedesktop.systemd1>
include <abstractions/bus/org.freedesktop.UPower>
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/bus/org.gtk.vfs.Daemon>
include <abstractions/bus/org.gtk.vfs.Metadata>
include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

6
apparmor.d/groups/gnome/gnome-terminal-server
View file

@ -9,9 +9,9 @@ include <tunables/global>
@{exec_path} = @{lib}/gnome-terminal-server @{exec_path} = @{lib}/gnome-terminal-server
profile gnome-terminal-server @{exec_path} { profile gnome-terminal-server @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/desktop> include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>

2
apparmor.d/groups/gnome/goa-daemon
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/goa-daemon @{exec_path} = @{lib}/goa-daemon
profile goa-daemon @{exec_path} { profile goa-daemon @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/network-manager> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/gnome/gsd-a11y-settings
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-a11y-settings @{exec_path} = @{lib}/gsd-a11y-settings
profile gsd-a11y-settings @{exec_path} flags=(attach_disconnected) { profile gsd-a11y-settings @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

8
apparmor.d/groups/gnome/gsd-color
View file

@ -9,9 +9,11 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-color @{exec_path} = @{lib}/gsd-color
profile gsd-color @{exec_path} flags=(attach_disconnected) { profile gsd-color @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/session-manager> include <abstractions/bus/org.freedesktop.ColorManager>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gnome.Mutter.DisplayConfig>
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

2
apparmor.d/groups/gnome/gsd-datetime
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-datetime @{exec_path} = @{lib}/gsd-datetime
profile gsd-datetime @{exec_path} flags=(attach_disconnected) { profile gsd-datetime @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/gnome/gsd-disk-utility-notify
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-disk-utility-notify @{exec_path} = @{lib}/gsd-disk-utility-notify
profile gsd-disk-utility-notify @{exec_path} { profile gsd-disk-utility-notify @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/udisk> include <abstractions/bus/org.freedesktop.UDisks2>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

4
apparmor.d/groups/gnome/gsd-housekeeping
View file

@ -10,8 +10,8 @@ include <tunables/global>
profile gsd-housekeeping @{exec_path} flags=(attach_disconnected) { profile gsd-housekeeping @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/app-launcher-user> include <abstractions/app-launcher-user>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/thumbnails-cache-read> include <abstractions/thumbnails-cache-read>

8
apparmor.d/groups/gnome/gsd-keyboard
View file

@ -9,10 +9,10 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-keyboard @{exec_path} = @{lib}/gsd-keyboard
profile gsd-keyboard @{exec_path} flags=(attach_disconnected) { profile gsd-keyboard @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/locale> include <abstractions/bus/org.freedesktop.locale1>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

10
apparmor.d/groups/gnome/gsd-media-keys
View file

@ -10,11 +10,11 @@ include <tunables/global>
profile gsd-media-keys @{exec_path} flags=(attach_disconnected) { profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/hostname> include <abstractions/bus/org.freedesktop.hostname1>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

16
apparmor.d/groups/gnome/gsd-power
View file

@ -10,13 +10,15 @@ include <tunables/global>
profile gsd-power @{exec_path} flags=(attach_disconnected) { profile gsd-power @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/bus/atspi> include <abstractions/bus/net.hadess.PowerProfiles>
include <abstractions/bus/gnome-screensaver> include <abstractions/bus/org.a11y>
include <abstractions/bus/login-session> include <abstractions/bus/org.freedesktop.login1.Session>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/session-manager> include <abstractions/bus/org.freedesktop.UPower>
include <abstractions/bus/upower> include <abstractions/bus/org.gnome.Mutter.DisplayConfig>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gnome.ScreenSaver>
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

4
apparmor.d/groups/gnome/gsd-print-notifications
View file

@ -9,8 +9,8 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-print-notifications @{exec_path} = @{lib}/gsd-print-notifications
profile gsd-print-notifications @{exec_path} flags=(attach_disconnected) { profile gsd-print-notifications @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/avahi> include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/gnome/gsd-printer
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-printer @{exec_path} = @{lib}/gsd-printer
profile gsd-printer @{exec_path} flags=(attach_disconnected) { profile gsd-printer @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

8
apparmor.d/groups/gnome/gsd-rfkill
View file

@ -9,10 +9,10 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-rfkill @{exec_path} = @{lib}/gsd-rfkill
profile gsd-rfkill @{exec_path} flags=(attach_disconnected) { profile gsd-rfkill @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/hostname> include <abstractions/bus/org.freedesktop.hostname1>
include <abstractions/bus/modem-manager> include <abstractions/bus/org.freedesktop.ModemManager1>
include <abstractions/bus/network-manager> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

2
apparmor.d/groups/gnome/gsd-screensaver-proxy
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-screensaver-proxy @{exec_path} = @{lib}/gsd-screensaver-proxy
profile gsd-screensaver-proxy @{exec_path} flags=(attach_disconnected) { profile gsd-screensaver-proxy @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
signal (receive) set=(term, hup) peer=gdm*, signal (receive) set=(term, hup) peer=gdm*,

4
apparmor.d/groups/gnome/gsd-sharing
View file

@ -9,8 +9,8 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-sharing @{exec_path} = @{lib}/gsd-sharing
profile gsd-sharing @{exec_path} flags=(attach_disconnected) { profile gsd-sharing @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/session-manager> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/network-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/gnome/gsd-smartcard
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-smartcard @{exec_path} = @{lib}/gsd-smartcard
profile gsd-smartcard @{exec_path} flags=(attach_disconnected) { profile gsd-smartcard @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

4
apparmor.d/groups/gnome/gsd-sound
View file

@ -10,8 +10,8 @@ include <tunables/global>
profile gsd-sound @{exec_path} flags=(attach_disconnected) { profile gsd-sound @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

6
apparmor.d/groups/gnome/gsd-wacom
View file

@ -9,9 +9,9 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-wacom @{exec_path} = @{lib}/gsd-wacom
profile gsd-wacom @{exec_path} flags=(attach_disconnected) { profile gsd-wacom @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

9
apparmor.d/groups/gnome/gsd-xsettings
View file

@ -9,10 +9,11 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-xsettings @{exec_path} = @{lib}/gsd-xsettings
profile gsd-xsettings @{exec_path} { profile gsd-xsettings @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/account-daemon> include <abstractions/bus/org.a11y>
include <abstractions/bus/atspi> include <abstractions/bus/org.freedesktop.Accounts>
include <abstractions/bus/session-manager> include <abstractions/bus/org.gnome.Mutter.DisplayConfig>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

6
apparmor.d/groups/gnome/nautilus
View file

@ -9,9 +9,9 @@ include <tunables/global>
@{exec_path} = @{bin}/nautilus @{exec_path} = @{bin}/nautilus
profile nautilus @{exec_path} flags=(attach_disconnected) { profile nautilus @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/desktop> include <abstractions/bus/org.freedesktop.hostname1>
include <abstractions/bus/hostname> include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

6
apparmor.d/groups/gnome/seahorse
View file

@ -9,8 +9,10 @@ include <tunables/global>
@{exec_path} = @{bin}/seahorse @{exec_path} = @{bin}/seahorse
profile seahorse @{exec_path} { profile seahorse @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/avahi> include <abstractions/bus/org.a11y>
include <abstractions/bus/desktop> include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/org.freedesktop.secrets>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

4
apparmor.d/groups/gnome/tracker-extract
View file

@ -9,8 +9,8 @@ include <tunables/global>
@{exec_path} = @{lib}/tracker-extract-3 @{exec_path} = @{lib}/tracker-extract-3
profile tracker-extract @{exec_path} flags=(attach_disconnected) { profile tracker-extract @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/vfs/daemon> include <abstractions/bus/org.gtk.vfs.Daemon>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/deny-sensitive-home> include <abstractions/deny-sensitive-home>

4
apparmor.d/groups/gvfs/gvfs-udisks2-volume-monitor
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{lib}/{,gvfs/}gvfs-udisks2-volume-monitor @{exec_path} = @{lib}/{,gvfs/}gvfs-udisks2-volume-monitor
profile gvfs-udisks2-volume-monitor @{exec_path} flags=(attach_disconnected) { profile gvfs-udisks2-volume-monitor @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/udisk> include <abstractions/bus/org.freedesktop.UDisks2>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

4
apparmor.d/groups/gvfs/gvfsd-dnssd
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{lib}/{,gvfs/}gvfsd-dnssd @{exec_path} = @{lib}/{,gvfs/}gvfsd-dnssd
profile gvfsd-dnssd @{exec_path} { profile gvfsd-dnssd @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/avahi> include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

2
apparmor.d/groups/gvfs/gvfsd-fuse
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,gvfs/}gvfsd-fuse @{exec_path} = @{lib}/{,gvfs/}gvfsd-fuse
profile gvfsd-fuse @{exec_path} { profile gvfsd-fuse @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
unix (send,receive) type=stream addr=none peer=(label=gvfsd-fuse//fusermount), unix (send,receive) type=stream addr=none peer=(label=gvfsd-fuse//fusermount),

2
apparmor.d/groups/gvfs/gvfsd-smb-browse
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,gvfs/}gvfsd-smb-browse @{exec_path} = @{lib}/{,gvfs/}gvfsd-smb-browse
profile gvfsd-smb-browse @{exec_path} { profile gvfsd-smb-browse @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/kde/kded5
View file

@ -10,7 +10,7 @@ include <tunables/global>
profile kded5 @{exec_path} { profile kded5 @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/bus/bluetooth> include <abstractions/bus/org.bluez>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/kde/plasmashell
View file

@ -11,7 +11,7 @@ profile plasmashell @{exec_path} flags=(mediate_deleted) {
include <abstractions/base> include <abstractions/base>
include <abstractions/app-launcher-user> include <abstractions/app-launcher-user>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/bus/upower> include <abstractions/bus/org.freedesktop.UPower>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

4
apparmor.d/groups/network/ModemManager
View file

@ -9,8 +9,8 @@ include <tunables/global>
@{exec_path} = @{bin}/ModemManager @{exec_path} = @{bin}/ModemManager
profile ModemManager @{exec_path} flags=(attach_disconnected) { profile ModemManager @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/devices-usb> include <abstractions/devices-usb>

15
apparmor.d/groups/network/NetworkManager
View file

@ -9,14 +9,13 @@ include <tunables/global>
@{exec_path} = @{bin}/NetworkManager @{exec_path} = @{bin}/NetworkManager
profile NetworkManager @{exec_path} flags=(attach_disconnected) { profile NetworkManager @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/bluetooth> include <abstractions/bus/fi.w1.wpa_supplicant1>
include <abstractions/bus/hostname> include <abstractions/bus/org.bluez>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.hostname1>
include <abstractions/bus/modem-manager> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/network-manager> include <abstractions/bus/org.freedesktop.ModemManager1>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/bus/wpa-supplicant> include <abstractions/bus/system>
include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/openssl> include <abstractions/openssl>
include <abstractions/ssl_certs> include <abstractions/ssl_certs>

2
apparmor.d/groups/systemd/hostnamectl
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/hostnamectl @{exec_path} = @{bin}/hostnamectl
profile hostnamectl @{exec_path} { profile hostnamectl @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/hostname> include <abstractions/bus/org.freedesktop.hostname1>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

4
apparmor.d/groups/systemd/loginctl
View file

@ -9,8 +9,8 @@ include <tunables/global>
@{exec_path} = @{bin}/loginctl @{exec_path} = @{bin}/loginctl
profile loginctl @{exec_path} { profile loginctl @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/login-session> include <abstractions/bus/org.freedesktop.login1.Session>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/systemd-common> include <abstractions/systemd-common>

2
apparmor.d/groups/systemd/systemd-hostnamed
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/systemd/systemd-hostnamed @{exec_path} = @{lib}/systemd/systemd-hostnamed
profile systemd-hostnamed @{exec_path} flags=(attach_disconnected) { profile systemd-hostnamed @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/systemd-common> include <abstractions/systemd-common>

2
apparmor.d/groups/systemd/systemd-logind
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/systemd/systemd-logind @{exec_path} = @{lib}/systemd/systemd-logind
profile systemd-logind @{exec_path} flags=(attach_disconnected,complain) { profile systemd-logind @{exec_path} flags=(attach_disconnected,complain) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/devices-usb> include <abstractions/devices-usb>

2
apparmor.d/groups/systemd/systemd-networkd
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/systemd/systemd-networkd @{exec_path} = @{lib}/systemd/systemd-networkd
profile systemd-networkd @{exec_path} flags=(attach_disconnected,complain) { profile systemd-networkd @{exec_path} flags=(attach_disconnected,complain) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/hostname> include <abstractions/bus/org.freedesktop.hostname1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/systemd-common> include <abstractions/systemd-common>

2
apparmor.d/groups/systemd/systemd-resolved
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/systemd/systemd-resolved @{exec_path} = @{lib}/systemd/systemd-resolved
profile systemd-resolved @{exec_path} flags=(attach_disconnected) { profile systemd-resolved @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/openssl> include <abstractions/openssl>

2
apparmor.d/groups/systemd/systemd-user-runtime-dir
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/systemd/systemd-user-runtime-dir @{exec_path} = @{lib}/systemd/systemd-user-runtime-dir
profile systemd-user-runtime-dir @{exec_path} { profile systemd-user-runtime-dir @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/systemd-common> include <abstractions/systemd-common>

2
apparmor.d/groups/ubuntu/check-new-release-gtk
View file

@ -10,7 +10,7 @@ include <tunables/global>
profile check-new-release-gtk @{exec_path} { profile check-new-release-gtk @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt-common> include <abstractions/apt-common>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/ubuntu/software-properties-gtk
View file

@ -10,6 +10,8 @@ include <tunables/global>
profile software-properties-gtk @{exec_path} { profile software-properties-gtk @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt-common> include <abstractions/apt-common>
include <abstractions/bus/org.a11y>
include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/ubuntu/ubuntu-advantage-notification
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/update-notifier/ubuntu-advantage-notification @{exec_path} = @{lib}/update-notifier/ubuntu-advantage-notification
profile ubuntu-advantage-notification @{exec_path} { profile ubuntu-advantage-notification @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

6
apparmor.d/groups/ubuntu/update-manager
View file

@ -10,9 +10,9 @@ include <tunables/global>
profile update-manager @{exec_path} flags=(attach_disconnected) { profile update-manager @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt-common> include <abstractions/apt-common>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/network-manager> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/upower> include <abstractions/bus/org.freedesktop.UPower>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

2
apparmor.d/groups/ubuntu/update-notifier
View file

@ -11,7 +11,7 @@ profile update-notifier @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt-common> include <abstractions/apt-common>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

4
apparmor.d/profiles-a-f/atril
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{bin}/atril{,-*} @{exec_path} = @{bin}/atril{,-*}
profile atril @{exec_path} { profile atril @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/profiles-a-f/boltd
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/boltd @{exec_path} = @{lib}/boltd
profile boltd @{exec_path} flags=(attach_disconnected) { profile boltd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

1
apparmor.d/profiles-a-f/cups-backend-dnssd
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/cups/backend/dnssd @{exec_path} = @{lib}/cups/backend/dnssd
profile cups-backend-dnssd @{exec_path} { profile cups-backend-dnssd @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/org.freedesktop.Avahi>
@{exec_path} mr, @{exec_path} mr,

2
apparmor.d/profiles-a-f/cups-browsed
View file

@ -9,6 +9,8 @@ include <tunables/global>
@{exec_path} = @{bin}/cups-browsed @{exec_path} = @{bin}/cups-browsed
profile cups-browsed @{exec_path} { profile cups-browsed @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/cups-client> include <abstractions/cups-client>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/profiles-a-f/cups-pk-helper-mechanism
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} += @{lib}/@{multiarch}/cups-pk-helper-mechanism @{exec_path} += @{lib}/@{multiarch}/cups-pk-helper-mechanism
profile cups-pk-helper-mechanism @{exec_path} { profile cups-pk-helper-mechanism @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

3
apparmor.d/profiles-a-f/cupsd
View file

@ -8,7 +8,8 @@ include <tunables/global>
profile cupsd @{exec_path} flags=(attach_disconnected) { profile cupsd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/authentication> include <abstractions/authentication>
include <abstractions/dbus-strict> include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/bus/system>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/openssl> include <abstractions/openssl>
include <abstractions/python> include <abstractions/python>

4
apparmor.d/profiles-a-f/engrampa
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{bin}/engrampa @{exec_path} = @{bin}/engrampa
profile engrampa @{exec_path} { profile engrampa @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/vfs/mount> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

4
apparmor.d/profiles-a-f/evince
View file

@ -9,8 +9,8 @@ include <tunables/global>
@{exec_path} = @{bin}/evince @{lib}/evinced @{exec_path} = @{bin}/evince @{lib}/evinced
profile evince @{exec_path} { profile evince @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/desktop> include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/profiles-a-f/fprintd
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/fprintd @{exec_path} = @{lib}/fprintd
profile fprintd @{exec_path} flags=(attach_disconnected) { profile fprintd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/devices-usb> include <abstractions/devices-usb>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

8
apparmor.d/profiles-a-f/fwupd
View file

@ -10,10 +10,10 @@ include <tunables/global>
@{exec_path} = @{lib}/{,fwupd/}fwupd @{exec_path} = @{lib}/{,fwupd/}fwupd
profile fwupd @{exec_path} flags=(complain,attach_disconnected) { profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/modem-manager> include <abstractions/bus/org.freedesktop.ModemManager1>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/bus/udisk> include <abstractions/bus/org.freedesktop.UDisks2>
include <abstractions/bus/upower> include <abstractions/bus/org.freedesktop.UPower>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/disks-read> include <abstractions/disks-read>

2
apparmor.d/profiles-g-l/login
View file

@ -10,7 +10,7 @@ include <tunables/global>
profile login @{exec_path} flags=(attach_disconnected) { profile login @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/authentication> include <abstractions/authentication>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/profiles-m-r/murmurd
View file

@ -7,7 +7,7 @@ include <tunables/global>
@{exec_path} = @{bin}/murmurd @{exec_path} = @{bin}/murmurd
profile murmurd @{exec_path} { profile murmurd @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/avahi> include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/openssl> include <abstractions/openssl>

2
apparmor.d/profiles-m-r/needrestart-apt-pinvoke
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/needrestart/apt-pinvoke @{exec_path} = @{lib}/needrestart/apt-pinvoke
profile needrestart-apt-pinvoke @{exec_path} { profile needrestart-apt-pinvoke @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

5
apparmor.d/profiles-m-r/packagekitd
View file

@ -9,8 +9,9 @@ include <tunables/global>
@{exec_path} = @{lib}/packagekitd @{exec_path} = @{lib}/packagekitd
profile packagekitd @{exec_path} flags=(attach_disconnected) { profile packagekitd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/openssl> include <abstractions/openssl>

2
apparmor.d/profiles-m-r/pkexec
View file

@ -11,7 +11,7 @@ include <tunables/global>
profile pkexec @{exec_path} { profile pkexec @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/authentication> include <abstractions/authentication>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/profiles-m-r/pkttyagent
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/pkttyagent @{exec_path} = @{bin}/pkttyagent
profile pkttyagent @{exec_path} { profile pkttyagent @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

4
apparmor.d/profiles-m-r/power-profiles-daemon
View file

@ -9,8 +9,8 @@ include <tunables/global>
@{exec_path} = @{lib}/power-profiles-daemon @{exec_path} = @{lib}/power-profiles-daemon
profile power-profiles-daemon @{exec_path} flags=(attach_disconnected) { profile power-profiles-daemon @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/login> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/polkit> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/profiles-m-r/qbittorrent
View file

@ -13,7 +13,7 @@ include <tunables/global>
@{exec_path} = @{bin}/qbittorrent @{exec_path} = @{bin}/qbittorrent
profile qbittorrent @{exec_path} { profile qbittorrent @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>

5
apparmor.d/profiles-m-r/remmina
View file

@ -9,8 +9,9 @@ include <tunables/global>
@{exec_path} = @{bin}/remmina @{exec_path} = @{bin}/remmina
profile remmina @{exec_path} { profile remmina @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi> include <abstractions/bus/org.a11y>
include <abstractions/bus/hostname> include <abstractions/bus/org.freedesktop.hostname1>
include <abstractions/bus/org.freedesktop.secrets>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>

Some files were not shown because too many files have changed in this diff Show more