apparmor/profiles/apparmor.d/abstractions/dbus-session

# vim:syntax=apparmor
# ------------------------------------------------------------------
#
#    Copyright (C) 2011 Canonical Ltd.
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of version 2 of the GNU General Public
#    License published by the Free Software Foundation.
#
# ------------------------------------------------------------------

  /usr/bin/dbus-launch ix,
  /var/lib/dbus/machine-id r,
add dbus-session abstraction 2010-04-19 12:38:17 -05:00			`# vim:syntax=apparmor`
			`# ------------------------------------------------------------------`
			`#`
profiles/apparmor.d/abstractions/dbus-session: Per discussion with John Johansen, use 'ix' instead of 'Pix' for dbus-launch since if someone happens to define a profile for dbus-launch and it is loosely confined, then users of this abstraction could end up launching a program via dbus-launch in a less confined manner than intended. This sort of thing should not be possible via an abstraction (and people are always free to profile using Pix if they prefer). 2011-05-09 18:09:24 +02:00			`# Copyright (C) 2011 Canonical Ltd.`
add dbus-session abstraction 2010-04-19 12:38:17 -05:00			`#`
			`# This program is free software; you can redistribute it and/or`
			`# modify it under the terms of version 2 of the GNU General Public`
			`# License published by the Free Software Foundation.`
			`#`
			`# ------------------------------------------------------------------`

profiles/apparmor.d/abstractions/dbus-session: Per discussion with John Johansen, use 'ix' instead of 'Pix' for dbus-launch since if someone happens to define a profile for dbus-launch and it is loosely confined, then users of this abstraction could end up launching a program via dbus-launch in a less confined manner than intended. This sort of thing should not be possible via an abstraction (and people are always free to profile using Pix if they prefer). 2011-05-09 18:09:24 +02:00			`/usr/bin/dbus-launch ix,`
tighten up the dbus abstractions 2010-08-03 12:04:37 -05:00			`/var/lib/dbus/machine-id r,`