apparmor/profiles/apparmor.d/abstractions/dbus

# vim:syntax=apparmor
# ------------------------------------------------------------------
#
#    Copyright (C) 2009-2010 Canonical Ltd.
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of version 2 of the GNU General Public
#    License published by the Free Software Foundation.
#
# ------------------------------------------------------------------

  # System socket. Be careful when including this abstraction.
  /{,var/}run/dbus/system_bus_socket rw,
  dbus bus=system,
some new abstractions from Mathias Gug 2007-08-27 23:49:51 +00:00			`# vim:syntax=apparmor`
pull in Ubuntu updates to profiles/apparmor.d 2009-11-04 14:25:42 -06:00			`# ------------------------------------------------------------------`
			`#`
tighten up the dbus abstractions 2010-08-03 12:04:37 -05:00			`# Copyright (C) 2009-2010 Canonical Ltd.`
pull in Ubuntu updates to profiles/apparmor.d 2009-11-04 14:25:42 -06:00			`#`
			`# This program is free software; you can redistribute it and/or`
			`# modify it under the terms of version 2 of the GNU General Public`
			`# License published by the Free Software Foundation.`
			`#`
			`# ------------------------------------------------------------------`
some new abstractions from Mathias Gug 2007-08-27 23:49:51 +00:00
tighten up the dbus abstractions 2010-08-03 12:04:37 -05:00			`# System socket. Be careful when including this abstraction.`
profiles: rw file perms are now needed on AF_UNIX socket files The AppArmor kernel now checks for both read and write permissions when a process calls connect() on a UNIX domain socket. The patch updates four abstractions that were found to be needing changes after the change in AF_UNIX kernel mediation. Signed-off-by: Tyler Hicks <tyhicks@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com> 2013-12-19 23:19:40 -08:00			`/{,var/}run/dbus/system_bus_socket rw,`
profiles: Allow full D-Bus access in system and session abstractions Before D-Bus mediation support was added to AppArmor, the dbus and dbus-session abstractions granted full access to the system and session buses, respectively. In order to continue granting full access to those buses, bus-specific D-Bus mediation rules need to be added to the abstractions. Signed-off-by: Tyler Hicks <tyhicks@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com> 2013-12-19 23:17:10 -08:00			`dbus bus=system,`