mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-24 20:08:11 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(abs): use dconf in dconf-write.

Browse source
This commit is contained in:
Alexandre Pujol 2024-10-22 11:20:45 +01:00
parent 3285de675f
commit 75f25ebaec
Failed to generate hash of commit
2 changed files with 18 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
apparmor.d/abstractions/dconf-write
View file

@ -7,25 +7,12 @@
abi <abi/4.0>, abi <abi/4.0>,
dbus send bus=session path=/ca/desrt/dconf/Writer/user include <abstractions/dconf>
interface=ca.desrt.dconf.Writer
member=Change
peer=(name=ca.desrt.dconf), # no peer's labels
dbus receive bus=session path=/ca/desrt/dconf/Writer/user owner @{user_config_dirs}/glib-2.0/settings/keyfile w,
interface=ca.desrt.dconf.Writer
member=Notify
peer=(name=:*, label=dconf-service),
/usr/share/dconf/profile/gdm r, owner @{run}/user/@{uid}/dconf/ w,
owner @{run}/user/@{uid}/dconf/user w,
/etc/dconf/** r,
owner @{user_config_dirs}/dconf/user r,
owner @{user_config_dirs}/glib-2.0/settings/keyfile rw,
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
include if exists <abstractions/dconf-write.d> include if exists <abstractions/dconf-write.d>

14
apparmor.d/abstractions/dconf.d/complete
View file

@ -2,6 +2,20 @@
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
dbus send bus=session path=/ca/desrt/dconf/Writer/user
interface=ca.desrt.dconf.Writer
member=Change
peer=(name=ca.desrt.dconf), # no peer's labels
dbus receive bus=session path=/ca/desrt/dconf/Writer/user
interface=ca.desrt.dconf.Writer
member=Notify
peer=(name=:*, label=dconf-service),
/usr/share/dconf/profile/gdm r,
owner @{user_config_dirs}/glib-2.0/settings/keyfile r, owner @{user_config_dirs}/glib-2.0/settings/keyfile r,
owner @{run}/user/@{uid}/dconf/ r,
# vim:syntax=apparmor # vim:syntax=apparmor