diff --git a/apparmor.d/abstractions/bus/org.freedesktop.ColorManager b/apparmor.d/abstractions/bus/org.freedesktop.ColorManager index 81ef373c..c8563e40 100644 --- a/apparmor.d/abstractions/bus/org.freedesktop.ColorManager +++ b/apparmor.d/abstractions/bus/org.freedesktop.ColorManager @@ -3,11 +3,11 @@ # SPDX-License-Identifier: GPL-2.0-only dbus send bus=system path=/org/freedesktop/ColorManager - interface=org.freedesktop.DBus.Properties - member=GetAll + interface=org.freedesktop.ColorManager + member=GetDevices peer=(name=:*, label=colord), - dbus send bus=system path=/org/freedesktop/ColorManager/devices/* + dbus send bus=system path=/org/freedesktop/ColorManager{,/**} interface=org.freedesktop.DBus.Properties member=GetAll peer=(name=:*, label=colord), diff --git a/apparmor.d/abstractions/bus/org.freedesktop.systemd1-session b/apparmor.d/abstractions/bus/org.freedesktop.systemd1-session index 2f6387c8..fda67e03 100644 --- a/apparmor.d/abstractions/bus/org.freedesktop.systemd1-session +++ b/apparmor.d/abstractions/bus/org.freedesktop.systemd1-session @@ -10,11 +10,11 @@ dbus send bus=session path=/org/freedesktop/systemd1 interface=org.freedesktop.DBus.Properties member={Get,GetAll} - peer=(name="{:*,org.freedesktop.systemd1}", label="@{systemd}"), + peer=(name="{:*,org.freedesktop.systemd1}", label="@{systemd_user}"), dbus send bus=session path=/org/freedesktop/systemd1 interface=org.freedesktop.systemd1.Manager member=GetUnit - peer=(name="{:*,org.freedesktop.systemd1}", label="@{systemd}"), + peer=(name="{:*,org.freedesktop.systemd1}", label="@{systemd_user}"), include if exists diff --git a/apparmor.d/abstractions/bus/org.freedesktop.timedate1 b/apparmor.d/abstractions/bus/org.freedesktop.timedate1 index 763ea9d4..d483aec6 100644 --- a/apparmor.d/abstractions/bus/org.freedesktop.timedate1 +++ b/apparmor.d/abstractions/bus/org.freedesktop.timedate1 @@ -2,6 +2,11 @@ # Copyright (C) 2023-2024 Alexandre Pujol # SPDX-License-Identifier: GPL-2.0-only + dbus send bus=system path=/org/freedesktop/timedate1 + interface=org.freedesktop.DBus.Properties + member=Get + peer=(name=org.freedesktop.timedate1, label=systemd-timedated), + dbus send bus=system path=/org/freedesktop/timedate1 interface=org.freedesktop.DBus.Properties member=GetAll diff --git a/apparmor.d/abstractions/bus/org.gnome.ArchiveManager1 b/apparmor.d/abstractions/bus/org.gnome.ArchiveManager1 new file mode 100644 index 00000000..087a8f08 --- /dev/null +++ b/apparmor.d/abstractions/bus/org.gnome.ArchiveManager1 @@ -0,0 +1,15 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2023-2024 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + + dbus send bus=session path=/org/gnome/ArchiveManager1 + interface=org.freedesktop.DBus.Properties + member=GetAll + peer=(name=:*, label=file-roller), + + dbus send bus=session path=/org/gnome/ArchiveManager1 + interface=org.gnome.ArchiveManager1 + member=GetSupportedTypes + peer=(name=:*, label=file-roller), + + include if exists diff --git a/apparmor.d/abstractions/bus/org.gnome.Mutter.DisplayConfig b/apparmor.d/abstractions/bus/org.gnome.Mutter.DisplayConfig index 6676cf4e..04d55076 100644 --- a/apparmor.d/abstractions/bus/org.gnome.Mutter.DisplayConfig +++ b/apparmor.d/abstractions/bus/org.gnome.Mutter.DisplayConfig @@ -22,4 +22,9 @@ member=PropertiesChanged peer=(name=:*, label=gnome-shell), + dbus receive bus=session path=/org/gnome/Mutter/DisplayConfig + interface=org.gnome.Mutter.DisplayConfig + member=MonitorsChanged + peer=(name=:*, label=gnome-shell), + include if exists diff --git a/apparmor.d/abstractions/bus/org.gnome.Nautilus.FileOperations2 b/apparmor.d/abstractions/bus/org.gnome.Nautilus.FileOperations2 index a43658db..1a3dc2e0 100644 --- a/apparmor.d/abstractions/bus/org.gnome.Nautilus.FileOperations2 +++ b/apparmor.d/abstractions/bus/org.gnome.Nautilus.FileOperations2 @@ -7,4 +7,14 @@ member=GetAll peer=(name=:*, label=nautilus), + dbus send bus=session path=/org/gnome/Nautilus/FileOperations2 + interface=org.freedesktop.DBus.Introspectable + member=Introspect + peer=(name=:*, label=nautilus), + + dbus receive bus=session path=/org/gnome/Nautilus/FileOperations2 + interface=org.freedesktop.DBus.Properties + member=PropertiesChanged + peer=(name=:*, label=nautilus), + include if exists