From 39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Fri, 20 Mar 2026 19:16:32 +0100 Subject: feat: first fully successful run e2e on straper --- .../apparmor.d/abstractions/dbus-session-strict | 39 ++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 straper/db/public/apparmor/apparmor.d/abstractions/dbus-session-strict (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/dbus-session-strict') diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/dbus-session-strict b/straper/db/public/apparmor/apparmor.d/abstractions/dbus-session-strict new file mode 100644 index 0000000..1796a55 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/abstractions/dbus-session-strict @@ -0,0 +1,39 @@ +# vim:syntax=apparmor +# ------------------------------------------------------------------ +# +# Copyright (C) 2011-2013 Canonical Ltd. +# +# This program is free software; you can redistribute it and/or +# modify it under the terms of version 2 of the GNU General Public +# License published by the Free Software Foundation. +# +# ------------------------------------------------------------------ + + abi , + + # unique per-machine identifier + /etc/machine-id r, + /var/lib/dbus/machine-id r, + + unix (connect, receive, send, accept) type=stream peer=(addr="@/tmp/dbus-*"), + + unix (connect, send, receive, accept) type=stream addr="@/tmp/dbus-*", + unix (bind, listen) type=stream addr="@/tmp/dbus-*", + + # dbus with systemd and --enable-user-session + owner @{run}/user/[0-9]*/bus rw, + + dbus send + bus=session + path=/org/freedesktop/DBus + interface=org.freedesktop.DBus + member={Hello,AddMatch,RemoveMatch,GetNameOwner,NameHasOwner,StartServiceByName} + peer=(name=org.freedesktop.DBus), + + owner @{run}/user/@{uid}/at-spi/ rw, + owner @{run}/user/@{uid}/at-spi/bus{,_[0-9]*} rw, + + owner /tmp/dbus-[0-9a-zA-Z]* rw, + + # Include additions to the abstraction + include if exists -- cgit v1.3