mirror of
https://github.com/qTox/qTox.git
synced 2024-03-22 14:00:36 +08:00
fix(apparmor): Fix dbus access
Add rules to allow DBus access (send & receive) to various DBus interfaces. Detected on Ubuntu 18.04.
This commit is contained in:
parent
577aeb8fa3
commit
a6c01eb007
|
@ -48,6 +48,83 @@ profile qtox /usr{,/local}/bin/qtox {
|
||||||
member=Get
|
member=Get
|
||||||
peer=(label=unconfined),
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus receive
|
||||||
|
bus=session
|
||||||
|
path=/
|
||||||
|
interface=org.freedesktop.DBus.Introspectable
|
||||||
|
member=Introspect
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=session
|
||||||
|
path=/StatusNotifierWatcher
|
||||||
|
interface=org.freedesktop.DBus.Introspectable
|
||||||
|
member=Introspect
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=session
|
||||||
|
path=/StatusNotifierWatcher
|
||||||
|
interface=org.freedesktop.DBus.Properties
|
||||||
|
member=Get
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager
|
||||||
|
interface=org.freedesktop.DBus.Properties
|
||||||
|
member=GetAll
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager
|
||||||
|
interface=org.freedesktop.NetworkManager
|
||||||
|
member=GetDevices
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus receive
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager
|
||||||
|
interface=org.freedesktop.NetworkManager
|
||||||
|
member=PropertiesChanged
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager/Settings
|
||||||
|
interface=org.freedesktop.NetworkManager.Settings
|
||||||
|
member=ListConnections
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager/Settings/[0-9]*
|
||||||
|
interface=org.freedesktop.NetworkManager.Settings.Connection
|
||||||
|
member=GetSettings
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager/ActiveConnection/[0-9]*
|
||||||
|
interface=org.freedesktop.DBus.Properties
|
||||||
|
member=GetAll
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus receive
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager/ActiveConnection/[0-9]*
|
||||||
|
interface=org.freedesktop.NetworkManager.Connection.Active
|
||||||
|
member=PropertiesChanged
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager/Devices/[0-9]*
|
||||||
|
interface=org.freedesktop.DBus.Properties
|
||||||
|
member=GetAll
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
# System files
|
# System files
|
||||||
|
|
||||||
/usr/share/hunspell/* r,
|
/usr/share/hunspell/* r,
|
||||||
|
|
|
@ -54,6 +54,83 @@ profile qtox /usr{,/local}/bin/qtox {
|
||||||
member=Get
|
member=Get
|
||||||
peer=(label=unconfined),
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus receive
|
||||||
|
bus=session
|
||||||
|
path=/
|
||||||
|
interface=org.freedesktop.DBus.Introspectable
|
||||||
|
member=Introspect
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=session
|
||||||
|
path=/StatusNotifierWatcher
|
||||||
|
interface=org.freedesktop.DBus.Introspectable
|
||||||
|
member=Introspect
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=session
|
||||||
|
path=/StatusNotifierWatcher
|
||||||
|
interface=org.freedesktop.DBus.Properties
|
||||||
|
member=Get
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager
|
||||||
|
interface=org.freedesktop.DBus.Properties
|
||||||
|
member=GetAll
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager
|
||||||
|
interface=org.freedesktop.NetworkManager
|
||||||
|
member=GetDevices
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus receive
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager
|
||||||
|
interface=org.freedesktop.NetworkManager
|
||||||
|
member=PropertiesChanged
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager/Settings
|
||||||
|
interface=org.freedesktop.NetworkManager.Settings
|
||||||
|
member=ListConnections
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager/Settings/[0-9]*
|
||||||
|
interface=org.freedesktop.NetworkManager.Settings.Connection
|
||||||
|
member=GetSettings
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager/ActiveConnection/[0-9]*
|
||||||
|
interface=org.freedesktop.DBus.Properties
|
||||||
|
member=GetAll
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus receive
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager/ActiveConnection/[0-9]*
|
||||||
|
interface=org.freedesktop.NetworkManager.Connection.Active
|
||||||
|
member=PropertiesChanged
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
|
dbus send
|
||||||
|
bus=system
|
||||||
|
path=/org/freedesktop/NetworkManager/Devices/[0-9]*
|
||||||
|
interface=org.freedesktop.DBus.Properties
|
||||||
|
member=GetAll
|
||||||
|
peer=(label=unconfined),
|
||||||
|
|
||||||
# System files
|
# System files
|
||||||
|
|
||||||
/usr/share/hunspell/* r,
|
/usr/share/hunspell/* r,
|
||||||
|
|
Loading…
Reference in New Issue
Block a user