mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 08:58:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): cleanup some dbus path/interfaces

Browse source
This commit is contained in:
Alexandre Pujol 2023-11-30 00:29:37 +00:00
parent 459fe7c905
commit c27ec457d0
Failed to generate hash of commit
23 changed files with 89 additions and 161 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/apt/unattended-upgrade
View file

@ -39,8 +39,8 @@ profile unattended-upgrade @{exec_path} flags=(attach_disconnected) {
interface=org.freedesktop.DBus.Introspectable interface=org.freedesktop.DBus.Introspectable
member=Introspect, member=Introspect,
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member=Inhibit, member=Inhibit,
dbus (send,receive) bus=system path=/org/freedesktop/NetworkManager dbus (send,receive) bus=system path=/org/freedesktop/NetworkManager

10
apparmor.d/groups/apt/unattended-upgrade-shutdown
View file

@ -14,11 +14,11 @@ profile unattended-upgrade-shutdown @{exec_path} flags=(attach_disconnected) {
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member=Inhibit, member=Inhibit,
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.DBus.{Introspectable,Properties} interface=org.freedesktop.DBus.{Introspectable,Properties}
member={Introspect,Get}, member={Introspect,Get},
@ -26,8 +26,8 @@ profile unattended-upgrade-shutdown @{exec_path} flags=(attach_disconnected) {
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll, member=GetAll,
dbus receive bus=system path=/org/freedesktop/login[0-9] dbus receive bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member=PrepareForShutdown, member=PrepareForShutdown,
@{exec_path} mr, @{exec_path} mr,

36
apparmor.d/groups/bus/ibus-extension-gtk3
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,ibus/}ibus-extension-gtk3 @{exec_path} = @{lib}/{,ibus/}ibus-extension-gtk3
profile ibus-extension-gtk3 @{exec_path} flags=(attach_disconnected) { profile ibus-extension-gtk3 @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dconf-write> include <abstractions/dconf-write>
@ -27,46 +28,11 @@ profile ibus-extension-gtk3 @{exec_path} flags=(attach_disconnected) {
network inet6 stream, network inet6 stream,
network netlink raw, network netlink raw,
dbus send bus=session path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={RequestName,ReleaseName}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
dbus send bus=session path=/org/gtk/Settings dbus send bus=session path=/org/gtk/Settings
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll member=GetAll
peer=(name=:*, label=gsd-xsettings), peer=(name=:*, label=gsd-xsettings),
dbus send bus=session path=/org/a11y/bus
interface=org.a11y.Bus
member=GetAddress
peer=(name=org.a11y.Bus, label=at-spi-bus-launcher),
dbus send bus=accessibility path=/org/a11y/atspi/registry
interface=org.a11y.atspi.Registry
member=GetRegisteredEvents
peer=(name=org.a11y.atspi.Registry), # all peer's labels
dbus send bus=accessibility path=/org/a11y/atspi/registry/deviceeventcontroller
interface=org.a11y.atspi.DeviceEventController
member={GetKeystrokeListeners,GetDeviceEventListeners}
peer=(name=org.a11y.atspi.Registry), # all peer's labels
dbus send bus=accessibility path=/org/a11y/atspi/accessible/root
interface=org.a11y.atspi.Socket
member=Embed
peer=(name=org.a11y.atspi.Registry), # all peer's labels
dbus receive bus=accessibility path=/org/a11y/atspi/accessible/root
interface=org.freedesktop.DBus.Properties
member=Set
peer=(name=:*, label=at-spi2-registryd),
dbus receive bus=accessibility path=/org/a11y/atspi/registry
interface=org.a11y.atspi.Registry
member=EventListenerDeregistered
peer=(name=:*, label=at-spi2-registryd),
dbus receive bus=session dbus receive bus=session
interface=org.freedesktop.DBus.Introspectable interface=org.freedesktop.DBus.Introspectable
member=Introspect member=Introspect

3
apparmor.d/groups/bus/ibus-x11
View file

@ -9,8 +9,9 @@ include <tunables/global>
@{exec_path} = @{lib}/{,ibus/}ibus-x11 @{exec_path} = @{lib}/{,ibus/}ibus-x11
profile ibus-x11 @{exec_path} flags=(attach_disconnected) { profile ibus-x11 @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/dbus-session-strict> include <abstractions/bus/atspi>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict>
include <abstractions/dri-common> include <abstractions/dri-common>
include <abstractions/dri-enumerate> include <abstractions/dri-enumerate>
include <abstractions/fonts> include <abstractions/fonts>

6
apparmor.d/groups/freedesktop/accounts-daemon
View file

@ -25,11 +25,11 @@ profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
dbus (send,receive) bus=system path=/org/freedesktop/Accounts{,/User[0-9]*} dbus (send,receive) bus=system path=/org/freedesktop/Accounts{,/User[0-9]*}
interface=org.freedesktop.{DBus.{Properties,Introspectable},Accounts{,.User}}, interface=org.freedesktop.{DBus.{Properties,Introspectable},Accounts{,.User}},
dbus (send,receive) bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus (send,receive) bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit[0-9].Authority interface=org.freedesktop.PolicyKit1.Authority
member={CheckAuthorization,Changed}, member={CheckAuthorization,Changed},
dbus send bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll, member=GetAll,

4
apparmor.d/groups/freedesktop/pipewire-media-session
View file

@ -22,12 +22,12 @@ profile pipewire-media-session @{exec_path} {
network bluetooth stream, network bluetooth stream,
network netlink raw, network netlink raw,
dbus send bus=system path=/org/freedesktop/RealtimeKit[0-9] dbus send bus=system path=/org/freedesktop/RealtimeKit1
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=Get member=Get
peer=(name=org.freedesktop.RealtimeKit1), peer=(name=org.freedesktop.RealtimeKit1),
dbus send bus=system path=/org/freedesktop/RealtimeKit[0-9] dbus send bus=system path=/org/freedesktop/RealtimeKit1
interface=org.freedesktop.RealtimeKit1 interface=org.freedesktop.RealtimeKit1
member=MakeThreadRealtime member=MakeThreadRealtime
peer=(name=org.freedesktop.RealtimeKit1), peer=(name=org.freedesktop.RealtimeKit1),

6
apparmor.d/groups/freedesktop/polkit-agent-helper
View file

@ -30,13 +30,13 @@ profile polkit-agent-helper @{exec_path} {
signal (receive) set=(term, kill) peer=pkttyagent, signal (receive) set=(term, kill) peer=pkttyagent,
signal (receive) set=(term, kill) peer=polkit-*-authentication-agent, signal (receive) set=(term, kill) peer=polkit-*-authentication-agent,
dbus (send) bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus (send) bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll member=GetAll
peer=(name=:*), peer=(name=:*),
dbus (send) bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus (send) bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit[0-9].Authority interface=org.freedesktop.PolicyKit1.Authority
member=AuthenticationAgentResponse2 member=AuthenticationAgentResponse2
peer=(name=:*), peer=(name=:*),

31
apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/xdg-desktop-portal-gtk @{exec_path} = @{lib}/xdg-desktop-portal-gtk
profile xdg-desktop-portal-gtk @{exec_path} { profile xdg-desktop-portal-gtk @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus/atspi>
include <abstractions/dbus-accessibility-strict> include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-session-strict> include <abstractions/dbus-session-strict>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
@ -28,11 +29,6 @@ profile xdg-desktop-portal-gtk @{exec_path} {
unix (send, receive, connect) type=stream peer=(addr="@/tmp/.X11-unix/*", label=gnome-shell), unix (send, receive, connect) type=stream peer=(addr="@/tmp/.X11-unix/*", label=gnome-shell),
dbus send bus=session path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={RequestName,ReleaseName}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
dbus send bus=system path=/org/freedesktop/Accounts/User[0-9]* dbus send bus=system path=/org/freedesktop/Accounts/User[0-9]*
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll, member=GetAll,
@ -88,31 +84,6 @@ profile xdg-desktop-portal-gtk @{exec_path} {
member={RunningApplicationsChanged,WindowsChanged} member={RunningApplicationsChanged,WindowsChanged}
peer=(name=:*, label=gnome-shell), peer=(name=:*, label=gnome-shell),
dbus send bus=accessibility path=/org/a11y/atspi/registry/deviceeventcontroller
interface=org.a11y.atspi.DeviceEventController
member={GetKeystrokeListeners,GetDeviceEventListeners}
peer=(name=org.a11y.atspi.Registry), # all peer's labels
dbus send bus=accessibility path=/org/a11y/atspi/registry
interface=org.a11y.atspi.Registry
member=GetRegisteredEvents
peer=(name=org.a11y.atspi.Registry), # all peer's labels
dbus receive bus=accessibility path=/org/a11y/atspi/registry
interface=org.a11y.atspi.Registry
member=EventListenerDeregistered
peer=(name=:*, label=at-spi2-registryd),
dbus send bus=accessibility path=/org/a11y/atspi/accessible/root
interface=org.a11y.atspi.Socket
member=Embed
peer=(name=org.a11y.atspi.Registry), # all peer's labels
dbus send bus=session path=/org/a11y/bus
interface=org.a11y.Bus
member=GetAddress
peer=(name=org.a11y.Bus, label=at-spi-bus-launcher),
dbus send bus=session path=/org/gtk/vfs/mounttracker dbus send bus=session path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker interface=org.gtk.vfs.MountTracker
member=ListMountableInfo member=ListMountableInfo

4
apparmor.d/groups/gnome/gdm-session-worker
View file

@ -55,8 +55,8 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
member=UserAdded member=UserAdded
peer=(name=:*, label=accounts-daemon), peer=(name=:*, label=accounts-daemon),
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member={CreateSession,ReleaseSession}, member={CreateSession,ReleaseSession},
@{exec_path} mrix, @{exec_path} mrix,

17
apparmor.d/groups/gnome/gnome-keyring-daemon
View file

@ -19,25 +19,20 @@ profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) {
signal (receive) set=(term) peer=gdm, signal (receive) set=(term) peer=gdm,
signal (send) set=(term) peer=ssh-agent, signal (send) set=(term) peer=ssh-agent,
dbus send bus=session path=/org/freedesktop/DBus dbus send bus=system path=/org/freedesktop/login1/session/*
interface=org.freedesktop.DBus
member={RequestName,ReleaseName}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
dbus send bus=system path=/org/freedesktop/login[0-9]/session/*
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=Get member=Get
peer=(name=org.freedesktop.login[0-9]), peer=(name=org.freedesktop.login1),
dbus receive bus=system path=/org/freedesktop/login[0-9]/session/* dbus receive bus=system path=/org/freedesktop/login1/session/*
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=PropertiesChanged member=PropertiesChanged
peer=(name=:*, label=systemd-logind), peer=(name=:*, label=systemd-logind),
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member=GetSession member=GetSession
peer=(name=org.freedesktop.login[0-9]), peer=(name=org.freedesktop.login1),
dbus send bus=session path=/org/gnome/SessionManager dbus send bus=session path=/org/gnome/SessionManager
interface=org.gnome.SessionManager interface=org.gnome.SessionManager

18
apparmor.d/groups/gnome/gnome-session-binary
View file

@ -39,20 +39,20 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
member={RequestName,ReleaseName,UpdateActivationEnvironment,GetConnectionUnixUser,GetConnectionUnixProcessID} member={RequestName,ReleaseName,UpdateActivationEnvironment,GetConnectionUnixUser,GetConnectionUnixProcessID}
peer=(name=org.freedesktop.DBus label=dbus-daemon), peer=(name=org.freedesktop.DBus label=dbus-daemon),
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member={CanPowerOff,GetSession,PowerOff,Inhibit,Reboot} member={CanPowerOff,GetSession,PowerOff,Inhibit,Reboot}
peer=(name=:*, label=systemd-logind), peer=(name=:*, label=systemd-logind),
dbus receive bus=system path=/org/freedesktop/login[0-9] dbus receive bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member={SessionNew,PrepareForShutdown,SessionRemoved,UserNew,UserRemoved,PrepareForSleep} member={SessionNew,PrepareForShutdown,SessionRemoved,UserNew,UserRemoved,PrepareForSleep}
peer=(name=:*, label=systemd-logind), peer=(name=:*, label=systemd-logind),
dbus send bus=system path=/org/freedesktop/login[0-9]/session/* dbus send bus=system path=/org/freedesktop/login1/session/*
interface=org.freedesktop.login[0-9].Session interface=org.freedesktop.login1.Session
member=SetIdleHint member=SetIdleHint
peer=(name=org.freedesktop.login[0-9], label=systemd-logind), peer=(name=org.freedesktop.login1, label=systemd-logind),
dbus (send,receive) bus=session path=/org/gnome/SessionManager{,/**} dbus (send,receive) bus=session path=/org/gnome/SessionManager{,/**}
interface={org.freedesktop.DBus.Introspectable,org.gnome.SessionManager**}, interface={org.freedesktop.DBus.Introspectable,org.gnome.SessionManager**},
@ -62,7 +62,7 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
member=GetAll member=GetAll
peer=(name=:*, label=at-spi2-registryd), peer=(name=:*, label=at-spi2-registryd),
dbus send bus=session path=/org/gnome/SessionManager/Client[0-9]* dbus send bus=session path=/org/gnome/SessionManager/Client@{int}
interface=org.gnome.SessionManager.ClientPrivate interface=org.gnome.SessionManager.ClientPrivate
member=CancelEndSession member=CancelEndSession
peer=(name=org.freedesktop.DBus, label=gsd-*), peer=(name=org.freedesktop.DBus, label=gsd-*),
@ -82,7 +82,7 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
member=GetAll member=GetAll
peer=(name=:*, label=gnome-shell), peer=(name=:*, label=gnome-shell),
dbus (send, receive) bus=system path=/org/freedesktop/login[0-9]* dbus (send, receive) bus=system path=/org/freedesktop/login1*
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member={GetAll,PropertiesChanged} member={GetAll,PropertiesChanged}
peer=(name=:*, label=systemd-logind), peer=(name=:*, label=systemd-logind),

6
apparmor.d/groups/gnome/gnome-session-ctl
View file

@ -15,10 +15,10 @@ profile gnome-session-ctl @{exec_path} {
unix (send, receive, connect) type=stream peer=(addr=@/tmp/dbus-????????, label=dbus-daemon), unix (send, receive, connect) type=stream peer=(addr=@/tmp/dbus-????????, label=dbus-daemon),
dbus send bus=session path=/org/freedesktop/systemd[0-9]* dbus send bus=session path=/org/freedesktop/systemd1
interface=org.freedesktop.systemd[0-9]*.Manager interface=org.freedesktop.systemd1.Manager
member={StartUnit,StopUnit} member={StartUnit,StopUnit}
peer=(name=org.freedesktop.systemd[0-9]*), peer=(name=org.freedesktop.systemd1),
dbus send bus=session path=/org/gnome/SessionManager dbus send bus=session path=/org/gnome/SessionManager
interface=org.gnome.SessionManager interface=org.gnome.SessionManager

16
apparmor.d/groups/gnome/gsd-media-keys
View file

@ -31,24 +31,24 @@ profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
member={RequestName,ReleaseName} member={RequestName,ReleaseName}
peer=(name=org.freedesktop.DBus, label=dbus-daemon), peer=(name=org.freedesktop.DBus, label=dbus-daemon),
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll, member=GetAll,
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member=Inhibit, member=Inhibit,
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member=PowerOff, member=PowerOff,
dbus receive bus=system path=/org/freedesktop/login[0-9] dbus receive bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member={SessionNew,SessionRemoved,PrepareForShutdown,UserNew,UserRemoved,PrepareForSleep} member={SessionNew,SessionRemoved,PrepareForShutdown,UserNew,UserRemoved,PrepareForSleep}
peer=(name=:*, label=systemd-logind), peer=(name=:*, label=systemd-logind),
dbus receive bus=system path=/org/freedesktop/login[0-9] dbus receive bus=system path=/org/freedesktop/login1
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=PropertiesChanged, member=PropertiesChanged,

23
apparmor.d/groups/gnome/gsd-power
View file

@ -25,11 +25,6 @@ profile gsd-power @{exec_path} flags=(attach_disconnected) {
signal (receive) set=(term, hup) peer=gdm*, signal (receive) set=(term, hup) peer=gdm*,
dbus send bus=session path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={RequestName,ReleaseName}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
dbus (send,receive) bus=system path=/org/freedesktop/UPower{,/**} dbus (send,receive) bus=system path=/org/freedesktop/UPower{,/**}
interface=org.freedesktop.{DBus.Properties,UPower*}, interface=org.freedesktop.{DBus.Properties,UPower*},
@ -37,28 +32,28 @@ profile gsd-power @{exec_path} flags=(attach_disconnected) {
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=Get, member=Get,
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll, member=GetAll,
dbus send bus=system path=/org/freedesktop/login[0-9]/session/auto dbus send bus=system path=/org/freedesktop/login1/session/auto
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll, member=GetAll,
dbus send bus=system path=/org/freedesktop/login[0-9]/session/auto dbus send bus=system path=/org/freedesktop/login1/session/auto
interface=org.freedesktop.login[0-9].Session interface=org.freedesktop.login1.Session
member=SetBrightness, member=SetBrightness,
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member=Inhibit, member=Inhibit,
dbus receive bus=system path=/org/freedesktop/login[0-9] dbus receive bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member={SessionNew,SessionRemoved,PrepareForShutdown,UserNew,UserRemoved,PrepareForSleep} member={SessionNew,SessionRemoved,PrepareForShutdown,UserNew,UserRemoved,PrepareForSleep}
peer=(name=:*, label=systemd-logind), peer=(name=:*, label=systemd-logind),
dbus receive bus=system path=/org/freedesktop/login[0-9] dbus receive bus=system path=/org/freedesktop/login1
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=PropertiesChanged, member=PropertiesChanged,

2
apparmor.d/groups/systemd/systemd-localed
View file

@ -22,7 +22,7 @@ profile systemd-localed @{exec_path} flags=(attach_disconnected) {
member={ReleaseName,RequestName} member={ReleaseName,RequestName}
peer=(name=org.freedesktop.DBus), peer=(name=org.freedesktop.DBus),
dbus receive bus=system path=/org/freedesktop/locale[0-9] dbus receive bus=system path=/org/freedesktop/locale1
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll, member=GetAll,

4
apparmor.d/groups/ubuntu/update-manager
View file

@ -47,8 +47,8 @@ profile update-manager @{exec_path} flags=(attach_disconnected) {
interface=org.freedesktop.DBus.{Properties,Introspectable} interface=org.freedesktop.DBus.{Properties,Introspectable}
member={Get,Introspect}, member={Get,Introspect},
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member=Inhibit, member=Inhibit,
dbus receive bus=system path=/org/freedesktop/NetworkManager dbus receive bus=system path=/org/freedesktop/NetworkManager

6
apparmor.d/profiles-a-f/fprintd
View file

@ -26,10 +26,10 @@ profile fprintd @{exec_path} flags=(attach_disconnected) {
member={RequestName,ReleaseName} member={RequestName,ReleaseName}
peer=(name=org.freedesktop.DBus), peer=(name=org.freedesktop.DBus),
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member=Inhibit member=Inhibit
peer=(name=org.freedesktop.login[0-9]), peer=(name=org.freedesktop.login1),
dbus bind bus=system dbus bind bus=system
name=net.reactivated.Fprint, name=net.reactivated.Fprint,

10
apparmor.d/profiles-m-r/packagekitd
View file

@ -62,18 +62,18 @@ profile packagekitd @{exec_path} flags=(attach_disconnected) {
member={CheckPermissions,DeviceAdded,DeviceRemoved,StateChanged} member={CheckPermissions,DeviceAdded,DeviceRemoved,StateChanged}
peer=(name=:*, label=NetworkManager), peer=(name=:*, label=NetworkManager),
dbus send bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll member=GetAll
peer=(name=:*, label=polkitd), peer=(name=:*, label=polkitd),
dbus receive bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus receive bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit[0-9].Authority interface=org.freedesktop.PolicyKit1.Authority
member=Changed member=Changed
peer=(name=:*, label=polkitd), peer=(name=:*, label=polkitd),
dbus receive bus=system path=/org/freedesktop/login[0-9] dbus receive bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member={SessionNew,PrepareForShutdown,SessionRemoved,UserNew,UserRemoved,PrepareForSleep} member={SessionNew,PrepareForShutdown,SessionRemoved,UserNew,UserRemoved,PrepareForSleep}
peer=(name=:*, label=systemd-logind), peer=(name=:*, label=systemd-logind),

14
apparmor.d/profiles-m-r/pkexec
View file

@ -31,23 +31,23 @@ profile pkexec @{exec_path} {
ptrace (read), ptrace (read),
dbus (send) bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus (send) bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll member=GetAll
peer=(name=:*), peer=(name=:*),
dbus (send) bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus (send) bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit[0-9].Authority interface=org.freedesktop.PolicyKit1.Authority
member={EnumerateActions,CheckAuthorization,RegisterAuthenticationAgent,UnregisterAuthenticationAgent} member={EnumerateActions,CheckAuthorization,RegisterAuthenticationAgent,UnregisterAuthenticationAgent}
peer=(name=:*), peer=(name=:*),
dbus (receive) bus=system path=/org/freedesktop/PolicyKit[0-9]*/Authority dbus (receive) bus=system path=/org/freedesktop/PolicyKit1*/Authority
interface=org.freedesktop.PolicyKit[0-9]*.Authority interface=org.freedesktop.PolicyKit1*.Authority
member=Changed member=Changed
peer=(name=:*), peer=(name=:*),
dbus (receive) bus=system path=/org/freedesktop/PolicyKit[0-9]*/AuthenticationAgent dbus (receive) bus=system path=/org/freedesktop/PolicyKit1*/AuthenticationAgent
interface=org.freedesktop.PolicyKit[0-9]*.AuthenticationAgent interface=org.freedesktop.PolicyKit1*.AuthenticationAgent
member=BeginAuthentication member=BeginAuthentication
peer=(name=:*), peer=(name=:*),

12
apparmor.d/profiles-m-r/pkttyagent
View file

@ -20,21 +20,21 @@ profile pkttyagent @{exec_path} {
ptrace (read), ptrace (read),
signal (send,receive), signal (send,receive),
dbus send bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll, member=GetAll,
dbus send bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit[0-9].Authority interface=org.freedesktop.PolicyKit1.Authority
member=RegisterAuthenticationAgentWithOptions, member=RegisterAuthenticationAgentWithOptions,
dbus receive bus=system path=/org/freedesktop/PolicyKit[0-9]/AuthenticationAgent dbus receive bus=system path=/org/freedesktop/PolicyKit1/AuthenticationAgent
interface=org.freedesktop.PolicyKit1.AuthenticationAgent interface=org.freedesktop.PolicyKit1.AuthenticationAgent
member={BeginAuthentication,CancelAuthentication} member={BeginAuthentication,CancelAuthentication}
peer=(name=:*, label=polkitd), peer=(name=:*, label=polkitd),
dbus receive bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus receive bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit[0-9].Authority interface=org.freedesktop.PolicyKit1.Authority
member=Changed, member=Changed,
@{exec_path} mr, @{exec_path} mr,

4
apparmor.d/profiles-s-z/su
View file

@ -37,8 +37,8 @@ profile su @{exec_path} {
network netlink raw, network netlink raw,
dbus (send) bus=system path=/org/freedesktop/login[0-9] dbus (send) bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member={CreateSession,ReleaseSession}, member={CreateSession,ReleaseSession},
@{exec_path} mr, @{exec_path} mr,

6
apparmor.d/profiles-s-z/system-config-printer
View file

@ -27,12 +27,12 @@ profile system-config-printer @{exec_path} flags=(complain) {
network inet6 stream, network inet6 stream,
network netlink raw, network netlink raw,
dbus send bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.DBus.Properties interface=org.freedesktop.DBus.Properties
member=GetAll, member=GetAll,
dbus send bus=system path=/org/freedesktop/PolicyKit[0-9]/Authority dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.PolicyKit[0-9].Authority interface=org.freedesktop.PolicyKit1.Authority
member=CheckAuthorization, member=CheckAuthorization,
dbus send bus=system path=/org/freedesktop/hostname[0-9] dbus send bus=system path=/org/freedesktop/hostname[0-9]

8
apparmor.d/profiles-s-z/udisksd
View file

@ -76,12 +76,12 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
interface=org.freedesktop.DBus interface=org.freedesktop.DBus
member={ReleaseName,GetConnectionUnixUser,RequestName}, member={ReleaseName,GetConnectionUnixUser,RequestName},
dbus send bus=system path=/org/freedesktop/login[0-9] dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login[0-9].Manager interface=org.freedesktop.login1.Manager
member=Inhibit, member=Inhibit,
dbus receive bus=system path=/org/freedesktop/login[0-9]* dbus receive bus=system path=/org/freedesktop/login1*
interface=org.freedesktop.login[0-9]*.Manager interface=org.freedesktop.login1*.Manager
member={PrepareForSleep,PrepareForShutdown} member={PrepareForSleep,PrepareForShutdown}
peer=(name=:*, label=systemd-logind), peer=(name=:*, label=systemd-logind),