feat(dbus): update dbus rules.

apparmor.d/groups/bus/ibus-extension-gtk3

@@ -30,6 +30,11 @@ profile ibus-extension-gtk3 @{exec_path} flags=(attach_disconnected) {
 
   dbus bind bus=session name=org.freedesktop.IBus.Panel.Extension.Gtk3,
 
+  dbus receive bus=session path=/org/gtk/Settings
+       interface=org.freedesktop.DBus.Properties
+       member=PropertiesChanged
+       peer=(name=:*, label=gsd-xsettings),
+
   dbus receive bus=session
        interface=org.freedesktop.DBus.Introspectable
        member=Introspect

apparmor.d/groups/gnome/evolution-calendar-factory

@@ -52,6 +52,11 @@ profile evolution-calendar-factory @{exec_path} {
        member=PropertiesChanged
        peer=(name=org.freedesktop.DBus, label=gnome-shell-calendar-server),
 
+  dbus send bus=session path=/org/gnome/evolution/dataserver/CalendarView/**
+       interface=org.gnome.evolution.dataserver.CalendarView
+       member=Complete
+       peer=(name=org.freedesktop.DBus, label=gnome-calendar),
+
   dbus receive bus=session
        interface=org.freedesktop.DBus.Introspectable
        member=Introspect

apparmor.d/groups/gnome/gnome-calendar

@@ -12,7 +12,6 @@ profile gnome-calendar @{exec_path} {
   include <abstractions/bus-accessibility>
   include <abstractions/bus-session>
   include <abstractions/bus-system>
-  include <abstractions/bus/org.freedesktop.GeoClue2>
   include <abstractions/bus/org.a11y>
   include <abstractions/bus/org.freedesktop.login1>
   include <abstractions/bus/org.freedesktop.NetworkManager>
@@ -30,25 +29,16 @@ profile gnome-calendar @{exec_path} {
 
   network netlink raw,
 
-  dbus bind bus=session name=org.gnome.Calendar,
-  dbus (send, receive) bus=session path=/org/gnome/Calendar
-       interface=org.freedesktop.{Actions,Application}
-       peer=(name="{:*,org.freedesktop.DBus}"),
+  # dbus: own bus=session name=org.gnome.Calendar interface={org.freedesktop.Application,org.gtk.Actions}
 
-  dbus receive bus=session path=/org/gnome/Calendar/SearchProvider
-       interface=org.gnome.Shell.SearchProvider2
-       peer=(name=:*, label=gnome-shell),
+  # dbus: talk bus=session name=org.gnome.evolution.dataserver.CalendarView label=evolution-calendar-factory
+  # dbus: talk bus=session name=org.gnome.evolution.dataserver.Source label=evolution-source-registry
+  # dbus: talk bus=system name=org.freedesktop.GeoClue2 label=geoclue
 
-  dbus send bus=session path=/org/gnome/evolution/dataserver/**
-       interface=org.freedesktop.DBus.Properties
-       peer=(name=:*, label=evolution-*),
-  dbus send bus=session path=/org/gnome/evolution/dataserver/**
-       interface=org.gnome.evolution.dataserver.*
-       peer=(name=:*, label=evolution-*),
-  dbus send bus=session path=/org/gnome/evolution/dataserver/**
+  dbus send bus=session path=/org/gnome/evolution/dataserver/SourceManager{,/**}
        interface=org.freedesktop.DBus.ObjectManager
        member=GetManagedObjects
-       peer=(name=:*, label=evolution-*),
+       peer=(name=:*, label=evolution-source-registry),
 
   @{exec_path} mr,
 

apparmor.d/groups/gnome/gnome-shell

@@ -84,27 +84,10 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
        interface={org.gnome.*,org.freedesktop.{Application,DBus.Properties,DBus.ObjectManager},org.gtk.{Actions,Application}}
        peer=(name="{:*,org.gnome.*,org.freedesktop.DBus}"),
 
+  # dbus: own bus=session name=com.canonical.Unity path=/com/canonical/unity
   # dbus: own bus=session name=org.gtk.MountOperationHandler
-
-  dbus bind bus=session name=com.canonical.Unity,
-  dbus receive bus=session path=/com/canonical/unity/**
-       interface=com.canonical.Unity{,.*}
-       peer=(name=:*),
-
-  dbus bind bus=session name=org.kde.StatusNotifierWatcher,
-  dbus receive bus=session path=/StatusNotifierWatcher
-       interface=org.kde.StatusNotifierWatcher
-       peer=(name=:*),
-
-  dbus bind bus=session name=org.gtk.Notifications,
-  dbus receive bus=session path=/org/gtk/Notifications
-       interface=org.freedesktop.DBus.Properties
-       member=GetAll
-       peer=(name=:*),
-  dbus receive bus=session path=/org/freedesktop/Notifications
-       interface=org.freedesktop.DBus.Properties
-       member=GetAll
-       peer=(name=:*),
+  # dbus: own bus=session name=org.gtk.Notifications
+  # dbus: own bus=session name=org.kde.StatusNotifierWatcher path=/StatusNotifierWatcher
 
   dbus bind bus=session name=com.rastersoft.dingextension,
   dbus (send, receive) bus=session path=/com/rastersoft/ding

apparmor.d/groups/gnome/gsd-media-keys

@@ -81,6 +81,11 @@ profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
        member=PropertiesChanged
        peer=(name=:*, label=gsd-power),
 
+  dbus send bus=session path=/org/mpris/MediaPlayer2
+       interface=org.freedesktop.DBus.Properties
+       member=GetAll
+       peer=(name=:*),
+
   @{exec_path} mr,
 
   @{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop  rPx -> child-open,

apparmor.d/groups/gnome/gsd-wacom

@@ -26,11 +26,6 @@ profile gsd-wacom @{exec_path} flags=(attach_disconnected) {
        interface=org.freedesktop.DBus.Properties
        peer=(name=:*),
 
-  dbus receive bus=session
-       interface=org.freedesktop.DBus.Introspectable
-       member=Introspect
-       peer=(name=:*, label=gnome-shell),
-
   @{exec_path} mr,
 
   /usr/share/dconf/profile/gdm r,

apparmor.d/groups/gnome/tracker-miner

@@ -36,7 +36,7 @@ profile tracker-miner @{exec_path} flags=(attach_disconnected) {
   # Talk from tracker-extract
   dbus receive bus=session path=/org/freedesktop/Tracker3/{Files,Endpoint,Miner/Extract}
        interface={org.freedesktop.Tracker3.{Miner,Endpoint,Files},org.freedesktop.DBus.{Peer,Properties}}
-       peer=(name=:*, label=tracker-extract),
+       peer=(name="{:*,org.freedesktop.DBus}", label=tracker-extract),
 
   @{exec_path} mr,
 

apparmor.d/groups/ubuntu/software-properties-dbus

@@ -24,6 +24,10 @@ profile software-properties-dbus @{exec_path} {
        interface=org.freedesktop.DBus.Introspectable
        member=Introspect
        peer=(name=:*, label=gnome-shell),
+  dbus receive bus=system
+       interface=org.freedesktop.DBus.Introspectable
+       member=Introspect
+       peer=(name=:*, label=software-properties-gtk),
 
   @{exec_path} mr,
 

apparmor.d/groups/ubuntu/software-properties-gtk

@@ -25,6 +25,9 @@ profile software-properties-gtk @{exec_path} {
   dbus (send, receive) bus=system path=/com/ubuntu/SoftwareProperties
        interface={com.ubuntu.SoftwareProperties,org.gtk.{Application,Actions}}
        peer=(name="{:*,com.ubuntu.SoftwareProperties}", label=software-properties-gtk),
+  dbus send bus=system path=/
+       interface=com.ubuntu.SoftwareProperties
+       peer=(name=:*, label=software-properties-dbus),
 
   dbus send bus=system path=/
        interface=org.freedesktop.DBus.Introspectable

apparmor.d/groups/ubuntu/update-manager

@@ -16,6 +16,7 @@ profile update-manager @{exec_path} flags=(attach_disconnected) {
   include <abstractions/bus/org.a11y>
   include <abstractions/bus/org.freedesktop.login1>
   include <abstractions/bus/org.freedesktop.NetworkManager>
+  include <abstractions/bus/org.freedesktop.portal.Desktop>
   include <abstractions/bus/org.freedesktop.UPower>
   include <abstractions/consoles>
   include <abstractions/dconf-write>
@@ -33,9 +34,9 @@ profile update-manager @{exec_path} flags=(attach_disconnected) {
 
   signal (send) peer=apt-methods-http,
 
-  dbus (send,receive) bus=system path=/org/debian/apt{,/transaction/*}
-       interface={org.debian{,.apt*},org.freedesktop.DBus.{Introspectable,Properties}}
-       member={CommitPackages,Run,PropertyChanged,Introspect,Set,GetAll,UpdateCache},
+  # dbus: own bus=session name=org.freedesktop.UpdateManager
+
+  # dbus: talk bus=system name=org.debian.apt
 
   @{exec_path} mr,
 

apparmor.d/groups/ubuntu/update-notifier

@@ -30,6 +30,15 @@ profile update-notifier @{exec_path} {
        member=RegisterStatusNotifierItem
        peer=(name=:*, label=gnome-shell),
 
+  dbus send bus=system path=/org/debian/apt
+       interface=org.debian.apt
+       member=GetActiveTransactions
+       peer=(name=:*, label=apt),
+  dbus send bus=system path=/org/debian/apt
+       interface=org.freedesktop.DBus.Properties
+       member=GetAll
+       peer=(name=:*, label=apt),
+
   @{exec_path} mr,
 
   @{bin}/{,ba,da}sh                              rix,

apparmor.d/profiles-a-f/cups-notifier-dbus

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = @{lib}/cups/notifier/dbus
 profile cups-notifier-dbus @{exec_path} {
   include <abstractions/base>
+  include <abstractions/bus-session>
 
   signal (receive) set=(term) peer=cupsd,
 

apparmor.d/profiles-m-r/packagekitd

@@ -38,10 +38,7 @@ profile packagekitd @{exec_path} flags=(attach_disconnected) {
 
   signal send set=int peer=apt-methods-*,
 
-  dbus bind bus=system name=org.freedesktop.PackageKit,
-  dbus receive bus=system path=/org/freedesktop/PackageKit
-       interface=org.freedesktop.DBus.Properties 
-       peer=(name=:*, label=gnome-shell),
+  # dbus: own bus=system name=org.freedesktop.PackageKit
 
   dbus send bus=system path=/org/freedesktop/DBus
        interface=org.freedesktop.DBus