diff --git a/apparmor.d/abstractions/audio-server b/apparmor.d/abstractions/audio-server index 05697e50..8f504e26 100644 --- a/apparmor.d/abstractions/audio-server +++ b/apparmor.d/abstractions/audio-server @@ -34,6 +34,7 @@ /dev/sequencer2 rw, /dev/smpte* rw, + /dev/snd/ r, /dev/snd/* rw, /dev/sound/* rw, diff --git a/apparmor.d/abstractions/bus/org.freedesktop.login1 b/apparmor.d/abstractions/bus/org.freedesktop.login1 index 8d68238b..05083b80 100644 --- a/apparmor.d/abstractions/bus/org.freedesktop.login1 +++ b/apparmor.d/abstractions/bus/org.freedesktop.login1 @@ -14,7 +14,7 @@ dbus send bus=system path=/org/freedesktop/login1 interface=org.freedesktop.login1.Manager - member={Inhibit,CanHibernate,CanHybridSleep,CanPowerOff,CanReboot,CanSuspend,CreateSession} + member={Inhibit,CanHibernate,CanHybridSleep,CanPowerOff,CanReboot,CanSuspend,CreateSession,GetSessionByPID} peer=(name="{:*,org.freedesktop.login1}", label=systemd-logind), dbus receive bus=system path=/org/freedesktop/login1 diff --git a/apparmor.d/abstractions/common/apt b/apparmor.d/abstractions/common/apt index b45b0be8..bfded36b 100644 --- a/apparmor.d/abstractions/common/apt +++ b/apparmor.d/abstractions/common/apt @@ -27,5 +27,6 @@ owner /tmp/#@{int} rw, owner /tmp/clearsigned.message.* rw, + owner /tmp/user/@{uid}/#@{int} rw, include if exists \ No newline at end of file diff --git a/apparmor.d/abstractions/gtk.d/complete b/apparmor.d/abstractions/gtk.d/complete index 0d1bb59e..94271315 100644 --- a/apparmor.d/abstractions/gtk.d/complete +++ b/apparmor.d/abstractions/gtk.d/complete @@ -2,9 +2,31 @@ # Copyright (C) 2022-2024 Alexandre Pujol # SPDX-License-Identifier: GPL-2.0-only + dbus send bus=session + interface=org.gtk.Actions + member=DescribeAll + peer=(name=:*), + dbus send bus=session + interface=org.gtk.Actions + member=DescribeAll + peer=(label=gnome-shell), + + dbus receive bus=session + interface=org.gtk.Actions + member=Changed + peer=(name=:*), + dbus receive bus=session + interface=org.gtk.Actions + member=Changed + peer=(label=gnome-shell), + dbus send bus=session path=/org/gtk/Settings interface=org.freedesktop.DBus.Properties - member={GetAll,PropertiesChanged} + member=GetAll + peer=(name=:*, label=gsd-xsettings), + dbus receive bus=session path=/org/gtk/Settings + interface=org.freedesktop.DBus.Properties + member=PropertiesChanged peer=(name=:*, label=gsd-xsettings), @{lib}/{,@{multiarch}/}gtk*/** mr,