apparmor/profiles/apparmor.d/abstractions/libpam-systemd

# vim:syntax=apparmor
# ------------------------------------------------------------------
#
#    Copyright (C) 2015-2016 Simon Deziel
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of version 2 of the GNU General Public
#    License published by the Free Software Foundation.
#
# ------------------------------------------------------------------

  abi <abi/3.0>,

include <abstractions/dbus-strict>

  # libpam-systemd notifies systemd-logind about session logins/logouts
  dbus send
    bus=system
    path=/org/freedesktop/login1
    interface=org.freedesktop.login1.Manager
    member={CreateSession,ReleaseSession},

  # Include additions to the abstraction
  include if exists <abstractions/libpam-systemd.d>
usr.sbin.sshd: refresh profile and add libpam-systemd abstractions 2016-01-08 20:43:56 -05:00			`# vim:syntax=apparmor`
			`# ------------------------------------------------------------------`
			`#`
			`# Copyright (C) 2015-2016 Simon Deziel`
			`#`
			`# This program is free software; you can redistribute it and/or`
			`# modify it under the terms of version 2 of the GNU General Public`
			`# License published by the Free Software Foundation.`
			`#`
			`# ------------------------------------------------------------------`

policy: tag policy with the AppArmor 3.0 abi Tag profiles and abstractions with abi information. Tagging abstractions is not strictly necessary but allows the parser to detect when their is a mismatch and that policy will need an update for abi. We do not currently tag the tunables because variable declarations are not currently affected by abi. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/491 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com> 2020-05-05 00:08:39 -07:00			`abi <abi/3.0>,`

Change `#include` to `include` in abstractions and tunables 2020-06-09 23:28:41 +02:00			`include <abstractions/dbus-strict>`
usr.sbin.sshd: refresh profile and add libpam-systemd abstractions 2016-01-08 20:43:56 -05:00
			`# libpam-systemd notifies systemd-logind about session logins/logouts`
			`dbus send`
			`bus=system`
			`path=/org/freedesktop/login1`
			`interface=org.freedesktop.login1.Manager`
			`member={CreateSession,ReleaseSession},`
Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com> 2019-01-24 03:03:11 -08:00
			`# Include additions to the abstraction`
abstractions: remove '#' from 'include if exists' This matches what we use in the profiles for local abstractions. Also adjust the check in the Makefile to expect the variant without '#'. 2020-05-30 19:46:08 +02:00			`include if exists <abstractions/libpam-systemd.d>`