mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-12-25 14:36:33 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

feat(profile): gnome: allow receiving signal from gdm-session-worker as well as gdm.

Browse source
This commit is contained in:
Alexandre Pujol 2024-11-10 19:00:45 +00:00
parent 51dfe0d35f
commit 7b9d412f02
Failed to generate hash of commit
4 changed files with 8 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/groups/bus/at-spi2-registryd
View file

@ -16,7 +16,8 @@ profile at-spi2-registryd @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/X-strict>
signal (receive) set=(term) peer=gdm,
signal receive set=term peer=gdm,
signal receive set=hup peer=gdm-session-worker,
#aa:dbus own bus=accessibility name=org.a11y.atspi
#aa:dbus talk bus=session name=org.a11y.{B,b}us label=dbus-accessibility

1
apparmor.d/groups/freedesktop/xdg-desktop-portal
View file

@ -32,6 +32,7 @@ profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
ptrace read,
signal receive set=term peer=gdm,
signal receive set=hup peer=gdm-session-worker,
#aa:dbus own bus=session name=org.freedesktop.portal.Desktop path=/org/freedesktop/portal/desktop interface={org.freedesktop.DBus.Properties,org.freedesktop{,.impl}.portal.{Settings,Background}}
dbus receive bus=session path=/org/freedesktop/portal/desktop

3
apparmor.d/groups/freedesktop/xdg-document-portal
View file

@ -22,7 +22,8 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
mount fstype=fuse.portal -> @{run}/user/@{uid}/doc/,
signal (receive) set=(term) peer=gdm,
signal receive set=term peer=gdm,
signal receive set=hup peer=gdm-session-worker,
ptrace (read),

5
apparmor.d/groups/freedesktop/xdg-permission-store
View file

@ -15,8 +15,9 @@ profile xdg-permission-store @{exec_path} flags=(attach_disconnected) {
capability sys_nice,
signal (receive) set=(term hup kill) peer=dbus-session,
signal (receive) set=(term hup kill) peer=gdm,
signal receive set=(term hup kill) peer=dbus-session,
signal receive set=(term hup kill) peer=gdm,
signal receive set=(term hup kill) peer=gdm-session-worker,
#aa:dbus own bus=session name=org.freedesktop.impl.portal.PermissionStore