From bf973760fd43059e2853923b4327785dfa97cc80 Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Tue, 5 Dec 2023 20:37:31 +0000 Subject: [PATCH] feat(dbus): update some abs (2) --- apparmor.d/abstractions/bus/vfs/mount | 5 +++++ apparmor.d/groups/gvfs/gvfsd-fuse | 5 ----- apparmor.d/groups/gvfs/gvfsd-network | 2 +- apparmor.d/groups/gvfs/gvfsd-smb-browse | 5 ----- 4 files changed, 6 insertions(+), 11 deletions(-) diff --git a/apparmor.d/abstractions/bus/vfs/mount b/apparmor.d/abstractions/bus/vfs/mount index 65d25e48..2b95ada4 100644 --- a/apparmor.d/abstractions/bus/vfs/mount +++ b/apparmor.d/abstractions/bus/vfs/mount @@ -12,4 +12,9 @@ member=ListMounts2 peer=(name=:*, label=gvfsd), + dbus receive bus=session path=/org/gtk/vfs/mounttracker + interface=org.gtk.vfs.MountTracker + member=Mounted + peer=(name=:*, label=gvfsd), + include if exists diff --git a/apparmor.d/groups/gvfs/gvfsd-fuse b/apparmor.d/groups/gvfs/gvfsd-fuse index d4645090..9d5174a3 100644 --- a/apparmor.d/groups/gvfs/gvfsd-fuse +++ b/apparmor.d/groups/gvfs/gvfsd-fuse @@ -17,11 +17,6 @@ profile gvfsd-fuse @{exec_path} { mount fstype={fuse,fuse.*} -> @{run}/user/@{uid}/gvfs/, - dbus receive bus=session path=/org/gtk/vfs/mounttracker - interface=org.gtk.vfs.MountTracker - member=Mounted - peer=(name=:*, label=gvfsd), - dbus send bus=session path=/org/gtk/vfs/mounttracker interface=org.gtk.vfs.MountTracker member=RegisterFuse diff --git a/apparmor.d/groups/gvfs/gvfsd-network b/apparmor.d/groups/gvfs/gvfsd-network index 541e98ff..b8c65a14 100644 --- a/apparmor.d/groups/gvfs/gvfsd-network +++ b/apparmor.d/groups/gvfs/gvfsd-network @@ -25,7 +25,7 @@ profile gvfsd-network @{exec_path} { dbus send bus=session path=/org/gtk/vfs/mounttracker interface=org.gtk.vfs.MountTracker - member={MountLocation,LookupMount,RegisterMount,ListMountableInfo} + member={MountLocation,LookupMount,RegisterMount} peer=(name=:*, label=gvfsd), dbus send bus=session path=/org/gtk/vfs/Daemon diff --git a/apparmor.d/groups/gvfs/gvfsd-smb-browse b/apparmor.d/groups/gvfs/gvfsd-smb-browse index 213dee61..7836b81c 100644 --- a/apparmor.d/groups/gvfs/gvfsd-smb-browse +++ b/apparmor.d/groups/gvfs/gvfsd-smb-browse @@ -23,11 +23,6 @@ profile gvfsd-smb-browse @{exec_path} { dbus bind bus=session name=org.gtk.vfs.mountpoint_smb_browse, - dbus receive bus=session path=/org/gtk/vfs/mounttracker - interface=org.gtk.vfs.MountTracker - member=Mounted - peer=(name=:*, label=gvfsd), - dbus receive bus=session path=/org/gtk/vfs/mountable interface=org.gtk.vfs.Mountable member=Mount