apparmor/profiles/apparmor.d/abstractions/dbus

# vim:syntax=apparmor
# ------------------------------------------------------------------
#
#    Copyright (C) 2009-2013 Canonical Ltd.
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of version 2 of the GNU General Public
#    License published by the Free Software Foundation.
#
# ------------------------------------------------------------------

  # This abstraction grants full system bus access. Consider using the
  # dbus-strict abstraction for fine-grained bus mediation.

  #include <abstractions/dbus-strict>
  dbus bus=system,

  # Include additions to the abstraction
  #include if exists <abstractions/dbus.d>
some new abstractions from Mathias Gug 2007-08-27 23:49:51 +00:00			`# vim:syntax=apparmor`
pull in Ubuntu updates to profiles/apparmor.d 2009-11-04 14:25:42 -06:00			`# ------------------------------------------------------------------`
			`#`
profiles: Add strict system bus abstraction Move the file rule from the existing permissive system bus abstraction into a new strict system bus abstraction. The strict abstraction only allows for calling the Hello, AddMatch, RemoveMatch, GetNameOwner, NameHasOwner, and StartServiceByName methods that are exported by the D-Bus daemon. The permissive abstraction reuses the strict abstraction and then allows all communications on the system bus. Signed-off-by: Tyler Hicks <tyhicks@canonical.com> Acked-by: John Johansen <john.johansen@canonical.com> 2014-01-10 15:34:45 -06:00			`# Copyright (C) 2009-2013 Canonical Ltd.`
pull in Ubuntu updates to profiles/apparmor.d 2009-11-04 14:25:42 -06:00			`#`
			`# This program is free software; you can redistribute it and/or`
			`# modify it under the terms of version 2 of the GNU General Public`
			`# License published by the Free Software Foundation.`
			`#`
			`# ------------------------------------------------------------------`
some new abstractions from Mathias Gug 2007-08-27 23:49:51 +00:00
profiles: Add strict system bus abstraction Move the file rule from the existing permissive system bus abstraction into a new strict system bus abstraction. The strict abstraction only allows for calling the Hello, AddMatch, RemoveMatch, GetNameOwner, NameHasOwner, and StartServiceByName methods that are exported by the D-Bus daemon. The permissive abstraction reuses the strict abstraction and then allows all communications on the system bus. Signed-off-by: Tyler Hicks <tyhicks@canonical.com> Acked-by: John Johansen <john.johansen@canonical.com> 2014-01-10 15:34:45 -06:00			`# This abstraction grants full system bus access. Consider using the`
			`# dbus-strict abstraction for fine-grained bus mediation.`

			`#include <abstractions/dbus-strict>`
profiles: Allow full D-Bus access in system and session abstractions Before D-Bus mediation support was added to AppArmor, the dbus and dbus-session abstractions granted full access to the system and session buses, respectively. In order to continue granting full access to those buses, bus-specific D-Bus mediation rules need to be added to the abstractions. Signed-off-by: Tyler Hicks <tyhicks@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com> 2013-12-19 23:17:10 -08:00			`dbus bus=system,`
Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com> 2019-01-24 03:03:11 -08:00
			`# Include additions to the abstraction`
			`#include if exists <abstractions/dbus.d>`