apparmor/profiles/apparmor.d/abstractions/dbus-network-manager-strict

# vim:syntax=apparmor

  abi <abi/3.0>,

  dbus send
       bus=system
       path=/org/freedesktop/NetworkManager
       interface=org.freedesktop.DBus.Properties
       member=GetAll
       peer=(name=org.freedesktop.NetworkManager),

  dbus send
       bus=system
       path=/org/freedesktop/NetworkManager
       interface=org.freedesktop.NetworkManager
       member=GetDevices
       peer=(name=org.freedesktop.NetworkManager),

  dbus send
       bus=system
       path=/org/freedesktop/NetworkManager/ActiveConnection/[0-9]*
       interface=org.freedesktop.DBus.Properties
       member=GetAll
       peer=(name=org.freedesktop.NetworkManager),

  dbus send
       bus=system
       path=/org/freedesktop/NetworkManager/Devices/[0-9]*
       interface=org.freedesktop.DBus.Properties
       member=GetAll
       peer=(name=org.freedesktop.NetworkManager),

  dbus send
       bus=system
       path=/org/freedesktop/NetworkManager/Settings
       interface=org.freedesktop.NetworkManager.Settings
       member={GetDevices,ListConnections}
       peer=(name=org.freedesktop.NetworkManager),

  dbus send
       bus=system
       path=/org/freedesktop/NetworkManager/Settings/[0-9]*
       interface=org.freedesktop.NetworkManager.Settings.Connection
       member=GetSettings
       peer=(name=org.freedesktop.NetworkManager),

  #include if exists <abstractions/dbus-network-manager-strict.d>
Add dbus-network-manager-strict abstraction Some applications queries network configuration (using QNetworkConfigurationManager class in Qt and similar), and that produces DBus denials under AppArmor confinement when NetworkManager backend is used. Add abstraction that allows most common read-only DBus queries for getting current network configuration from NetworkManager backend. 2019-08-05 15:24:36 +03:00			`# vim:syntax=apparmor`

policy: tag policy with the AppArmor 3.0 abi Tag profiles and abstractions with abi information. Tagging abstractions is not strictly necessary but allows the parser to detect when their is a mismatch and that policy will need an update for abi. We do not currently tag the tunables because variable declarations are not currently affected by abi. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/491 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com> 2020-05-05 00:08:39 -07:00			`abi <abi/3.0>,`

Add dbus-network-manager-strict abstraction Some applications queries network configuration (using QNetworkConfigurationManager class in Qt and similar), and that produces DBus denials under AppArmor confinement when NetworkManager backend is used. Add abstraction that allows most common read-only DBus queries for getting current network configuration from NetworkManager backend. 2019-08-05 15:24:36 +03:00			`dbus send`
			`bus=system`
			`path=/org/freedesktop/NetworkManager`
			`interface=org.freedesktop.DBus.Properties`
			`member=GetAll`
			`peer=(name=org.freedesktop.NetworkManager),`

			`dbus send`
			`bus=system`
			`path=/org/freedesktop/NetworkManager`
			`interface=org.freedesktop.NetworkManager`
			`member=GetDevices`
			`peer=(name=org.freedesktop.NetworkManager),`

			`dbus send`
			`bus=system`
			`path=/org/freedesktop/NetworkManager/ActiveConnection/[0-9]*`
			`interface=org.freedesktop.DBus.Properties`
			`member=GetAll`
			`peer=(name=org.freedesktop.NetworkManager),`

			`dbus send`
			`bus=system`
			`path=/org/freedesktop/NetworkManager/Devices/[0-9]*`
			`interface=org.freedesktop.DBus.Properties`
			`member=GetAll`
			`peer=(name=org.freedesktop.NetworkManager),`

			`dbus send`
			`bus=system`
			`path=/org/freedesktop/NetworkManager/Settings`
			`interface=org.freedesktop.NetworkManager.Settings`
			`member={GetDevices,ListConnections}`
			`peer=(name=org.freedesktop.NetworkManager),`

			`dbus send`
			`bus=system`
			`path=/org/freedesktop/NetworkManager/Settings/[0-9]*`
			`interface=org.freedesktop.NetworkManager.Settings.Connection`
			`member=GetSettings`
			`peer=(name=org.freedesktop.NetworkManager),`

add missing *.d include to dbus-network-manager-strict abstraction 2020-01-25 19:54:09 +01:00			`#include if exists <abstractions/dbus-network-manager-strict.d>`