diff --git a/apparmor.d/groups/freedesktop/polkitd b/apparmor.d/groups/freedesktop/polkitd index d153b6ba..b88b613c 100644 --- a/apparmor.d/groups/freedesktop/polkitd +++ b/apparmor.d/groups/freedesktop/polkitd @@ -22,29 +22,14 @@ profile polkitd @{exec_path} { ptrace (read), + dbus (send,receive) bus=system path=/org/freedesktop/PolicyKit[0-9]/* + interface=org.freedesktop.{DBus.Introspectable,DBus.Properties,PolicyKit[0-9].*}, # all members + dbus (send) bus=system path=/org/freedesktop/DBus interface=org.freedesktop.DBus member={GetConnectionUnixProcessID,GetConnectionUnixUser,RequestName} peer=(name=org.freedesktop.DBus), - dbus (send) bus=system path=/org/freedesktop/PolicyKit[0-9]{,/**} - interface=org.freedesktop.PolicyKit[0-9]{,.**} - peer=(name="{org.freedesktop.DBus,:*}"), # all members - - dbus (receive) bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority - interface=org.freedesktop.DBus.Properties - member=GetAll - peer=(name=:*), - - dbus (send) bus=system path=/org/gnome/PolicyKit[0-9]/AuthenticationAgent - interface=org.freedesktop.PolicyKit[0-9].AuthenticationAgent - peer=(name=:*), # all members - - dbus (receive) bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority - interface=org.freedesktop.PolicyKit[0-9].Authority - member={EnumerateActions,CheckAuthorization,CancelCheckAuthorization,RegisterAuthenticationAgent,UnregisterAuthenticationAgent,AuthenticationAgentResponse2} - peer=(name=:*), - dbus (bind) bus=system name=org.freedesktop.PolicyKit[0-9],