diff --git a/apparmor.d/abstractions/dconf-write b/apparmor.d/abstractions/dconf-write index b83a585e..e84ffcb2 100644 --- a/apparmor.d/abstractions/dconf-write +++ b/apparmor.d/abstractions/dconf-write @@ -7,25 +7,12 @@ abi , - dbus send bus=session path=/ca/desrt/dconf/Writer/user - interface=ca.desrt.dconf.Writer - member=Change - peer=(name=ca.desrt.dconf), # no peer's labels + include - dbus receive bus=session path=/ca/desrt/dconf/Writer/user - interface=ca.desrt.dconf.Writer - member=Notify - peer=(name=:*, label=dconf-service), + owner @{user_config_dirs}/glib-2.0/settings/keyfile w, - /usr/share/dconf/profile/gdm r, - - /etc/dconf/** r, - - owner @{user_config_dirs}/dconf/user r, - owner @{user_config_dirs}/glib-2.0/settings/keyfile rw, - - owner @{run}/user/@{uid}/dconf/ rw, - owner @{run}/user/@{uid}/dconf/user rw, + owner @{run}/user/@{uid}/dconf/ w, + owner @{run}/user/@{uid}/dconf/user w, include if exists diff --git a/apparmor.d/abstractions/dconf.d/complete b/apparmor.d/abstractions/dconf.d/complete index 108f6b8c..ed8fa33e 100644 --- a/apparmor.d/abstractions/dconf.d/complete +++ b/apparmor.d/abstractions/dconf.d/complete @@ -2,6 +2,20 @@ # Copyright (C) 2024 Alexandre Pujol # SPDX-License-Identifier: GPL-2.0-only + dbus send bus=session path=/ca/desrt/dconf/Writer/user + interface=ca.desrt.dconf.Writer + member=Change + peer=(name=ca.desrt.dconf), # no peer's labels + + dbus receive bus=session path=/ca/desrt/dconf/Writer/user + interface=ca.desrt.dconf.Writer + member=Notify + peer=(name=:*, label=dconf-service), + + /usr/share/dconf/profile/gdm r, + owner @{user_config_dirs}/glib-2.0/settings/keyfile r, + owner @{run}/user/@{uid}/dconf/ r, + # vim:syntax=apparmor