apparmor/profiles/apparmor.d
Seth Arnold d3774684c0 dbus-session-strict: allow access to the user bus socket
From: Simon McVittie <simon.mcvittie@collabora.co.uk>
Date: Wed, 4 May 2016 13:48:36 +0100
Subject: dbus-session-strict: allow access to the user bus socket

If dbus is configured with --enable-user-bus (for example in the
dbus-user-session package in Debian and its derivatives), and the user
session is started with systemd, then the "dbus-daemon --session" will be
started by "systemd --user" and listen on $XDG_RUNTIME_DIR/bus. Similarly,
on systems where dbus-daemon has been replaced with kdbus, the
bridge/proxy used to provide compatibility with the traditional D-Bus
protocol listens on that same socket.

In practice, $XDG_RUNTIME_DIR is /run/user/$uid on all systemd systems,
where $uid represents the numeric uid. I have not used /{var/,}run here,
because systemd does not support configurations where /var/run and /run
are distinct; in practice, /var/run is a symbolic link.

Based on a patch by Sjoerd Simons, which originally used the historical
path /run/user/*/dbus/user_bus_socket. That path was popularized by the
user-session-units git repository, but has never been used in a released
version of dbus and should be considered unsupported.

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
2016-05-11 16:01:41 -07:00
..
abstractions dbus-session-strict: allow access to the user bus socket 2016-05-11 16:01:41 -07:00
apache2.d Change /bin/ paths in profiles to also match on /usr/bin/ 2015-10-20 23:12:35 +02:00
local exported smbd files need to have 'k' to work properly with certain applications 2010-09-14 14:12:49 -05:00
tunables = Background = 2014-02-14 16:24:52 -06:00
bin.ping Change /bin/ paths in profiles to also match on /usr/bin/ 2015-10-20 23:12:35 +02:00
sbin.klogd klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE. 2015-03-07 21:16:11 +01:00
sbin.syslog-ng syslog-ng profile: allow /run/log/journal/ 2015-11-11 16:44:47 +01:00
sbin.syslogd klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE. 2015-03-07 21:16:11 +01:00
usr.lib.apache2.mpm-prefork.apache2 profiles: Allow CAP_CHOWN in usr.lib.apache2.mpm-prefork.apache2 2016-03-19 03:10:00 -05:00
usr.lib.dovecot.anvil profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.auth dovecot/auth: allow access to /var/run/dovecot/stats-user 2016-04-07 00:53:06 +02:00
usr.lib.dovecot.config profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.deliver profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dict profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-auth profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-lda dovecot-lda profile: allow tempfiles and executing sendmail 2016-02-20 01:15:20 +01:00
usr.lib.dovecot.imap Dovecot imap needs to read /run/dovecot/mounts 2015-09-03 18:27:00 +02:00
usr.lib.dovecot.imap-login Add some missing /run/dovecot/* to usr.lib.dovecot.imap{, -login} 2014-12-22 17:41:59 +01:00
usr.lib.dovecot.lmtp usr.lib.dovecot.lmtp: add openssl and ssl_keys abstractions 2015-04-27 21:33:06 +02:00
usr.lib.dovecot.log profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.managesieve dovecot profile update 2014-07-07 23:35:18 +02:00
usr.lib.dovecot.managesieve-login dovecot profile update 2014-07-07 23:35:18 +02:00
usr.lib.dovecot.pop3 profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.pop3-login profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.ssl-params profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.sbin.apache2 Update phpsysinfo instructions in usr.sbin.apache2. Incorporate feedback from 2014-09-08 20:39:34 -05:00
usr.sbin.avahi-daemon profiles/apparmor.d/usr.sbin.avahi-daemon: allow write access to 2015-07-24 15:03:30 -05:00
usr.sbin.dnsmasq profiles: Add attach_disconnected flag to dnsmasq profile 2016-04-12 16:36:43 -05:00
usr.sbin.dovecot update and cleanup usr.sbin.dovecot profile 2014-12-22 17:49:28 +01:00
usr.sbin.identd identd pid file location on Debian/Ubuntu 2014-09-03 14:47:33 -05:00
usr.sbin.mdnsd mdnsd update for fine-grained netlink mediation 2014-09-03 14:49:50 -05:00
usr.sbin.nmbd Update samba profiles for samba 4.x 2013-11-20 01:17:52 +01:00
usr.sbin.nscd nscd profile: allow paranoia mode 2016-03-21 21:30:19 +01:00
usr.sbin.ntpd Allow ntpd to read directory listings of $PATH 2015-09-15 14:24:57 +02:00
usr.sbin.smbd usr.sbin.smbd: new lock dir used by recent versions (4.3.8) 2016-04-13 09:24:46 -04:00
usr.sbin.smbldap-useradd Change /bin/ paths in profiles to also match on /usr/bin/ 2015-10-20 23:12:35 +02:00
usr.sbin.traceroute /usr/sbin/traceroute6 is a symlink to /usr/sbin/traceroute. 2011-11-30 13:15:21 +01:00
usr.sbin.winbindd winbindd profile: allow k for /etc/samba/smbd.tmp/msg/* 2015-07-30 22:03:02 +02:00