diff --git a/apparmor.d/groups/ubuntu/ubuntu-advantage-desktop-daemon b/apparmor.d/groups/ubuntu/ubuntu-advantage-desktop-daemon new file mode 100644 index 00000000..cd8016de --- /dev/null +++ b/apparmor.d/groups/ubuntu/ubuntu-advantage-desktop-daemon @@ -0,0 +1,40 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{libexec}/ubuntu-advantage-desktop-daemon +profile ubuntu-advantage-desktop-daemon @{exec_path} flags=(attach_disconnected) { + include + include + include + + capability sys_nice, + + dbus send bus=system path=/org/freedesktop/DBus + interface=org.freedesktop.DBus + member=RequestName + peer=(name=org.freedesktop.DBus), + + dbus receive bus=system path=/com/canonical/UbuntuAdvantage/Manager + interface=org.freedesktop.DBus.Introspectable + member=Introspect, + + dbus receive bus=system path=/ + interface=org.freedesktop.DBus.Introspectable + member=Introspect, + + dbus receive bus=system path=/ + interface=org.freedesktop.DBus.ObjectManager + member=GetManagedObjects, + + dbus bind bus=system + name=com.canonical.UbuntuAdvantage, + + @{exec_path} mr, + + include if exists +} \ No newline at end of file