Add a dbus directory to the apparmor securityfs features subdirectory to
contain a mask file with the supported D-Bus mediation rules.

Signed-off-by: Tyler Hicks <[email protected]>
Ackedy-by: John Johansen <[email protected]>
Acked-by: Seth Arnold <[email protected]>
---
 security/apparmor/apparmorfs.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/security/apparmor/apparmorfs.c b/security/apparmor/apparmorfs.c
index e3bef94..5121596 100644
--- a/security/apparmor/apparmorfs.c
+++ b/security/apparmor/apparmorfs.c
@@ -902,6 +902,11 @@ static struct aa_fs_entry aa_fs_entry_namespaces[] = {
        { }
 };
 
+static struct aa_fs_entry aa_fs_entry_dbus[] = {
+       AA_FS_FILE_STRING("mask", "acquire send receive"),
+       { }
+};
+
 static struct aa_fs_entry aa_fs_entry_features[] = {
        AA_FS_DIR("policy",                     aa_fs_entry_policy),
        AA_FS_DIR("domain",                     aa_fs_entry_domain),
@@ -911,6 +916,7 @@ static struct aa_fs_entry aa_fs_entry_features[] = {
        AA_FS_DIR("namespaces",                 aa_fs_entry_namespaces),
        AA_FS_FILE_U64("capability",            VFS_CAP_FLAGS_MASK),
        AA_FS_DIR("rlimit",                     aa_fs_entry_rlimit),
+       AA_FS_DIR("dbus",                       aa_fs_entry_dbus),
        { }
 };
 
-- 
1.8.1.2


-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to