diff --git a/apparmor.d/groups/freedesktop/colord b/apparmor.d/groups/freedesktop/colord index 71d92b16..6149b8a7 100644 --- a/apparmor.d/groups/freedesktop/colord +++ b/apparmor.d/groups/freedesktop/colord @@ -44,7 +44,7 @@ profile colord @{exec_path} flags=(attach_disconnected) { member=GetAll peer=(name=:*, label="{gsd-color,colord-sane,gnome-control-center}"), - dbus send bus=system path=/org/freedesktop/ColorManager + dbus (send, receive) bus=system path=/org/freedesktop/ColorManager interface=org.freedesktop.DBus.Properties member=GetAll peer=(name=:*, label=colord), diff --git a/apparmor.d/groups/freedesktop/xdg-desktop-portal b/apparmor.d/groups/freedesktop/xdg-desktop-portal index 15e2d5bb..9d3ef99d 100644 --- a/apparmor.d/groups/freedesktop/xdg-desktop-portal +++ b/apparmor.d/groups/freedesktop/xdg-desktop-portal @@ -67,6 +67,11 @@ profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) { member=SettingChanged peer=(name=org.freedesktop.DBus), # all peer's labels + dbus receive bus=session path=/org/freedesktop/portal/desktop + interface=org.freedesktop.portal.Settings + member={ReadAll,GetAll} + peer=(name=:*, label=snap.snapd-desktop-integration.snapd-desktop-integration), + dbus receive bus=session path=/org/freedesktop/portal/desktop interface=org.freedesktop.impl.portal.Settings member=SettingChanged diff --git a/apparmor.d/groups/gnome/gnome-shell b/apparmor.d/groups/gnome/gnome-shell index 02c9e636..d608e2b5 100644 --- a/apparmor.d/groups/gnome/gnome-shell +++ b/apparmor.d/groups/gnome/gnome-shell @@ -200,7 +200,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) { member=JobRemoved peer=(name=:*), - dbus send bus=system path=/org/freedesktop/login[0-9]{,/**} + dbus (send, receive) bus=system path=/org/freedesktop/login[0-9]{,/**} interface=org.freedesktop.{DBus.Properties,login[0-9].{Manager,Session}} peer=(name=:*, label=systemd-logind),