diff --git a/apparmor.d/groups/ubuntu/software-properties-dbus b/apparmor.d/groups/ubuntu/software-properties-dbus new file mode 100644 index 00000000..dd542213 --- /dev/null +++ b/apparmor.d/groups/ubuntu/software-properties-dbus @@ -0,0 +1,36 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}lib/software-properties/software-properties-dbus +profile software-properties-dbus @{exec_path} { + include + include + include + include + include + + dbus bind bus=system + name=com.ubuntu.SoftwareProperties, + + @{exec_path} mr, + + /{usr/,}bin/python3.[0-9]* rix, + /{usr/,}bin/env rix, + /{usr/,}bin/lsb_release rPx -> lsb_release, + + /usr/share/python-apt/{,**} r, + /usr/share/distro-info/*.csv r, + /usr/share/xml/iso-codes/{,**} r, + + owner /tmp/[a-z0-9]* rw, + owner /tmp/tmp*/{,apt.conf} rw, + + owner @{PROC}/@{pid}/fd/ r, + + include if exists +} \ No newline at end of file