The dbus and dbus-session abstractions grant access to the system and session
buses but they're missing rules required for the new D-Bus mediation feature in
AppArmor.

Additionally, an abstraction is needed for the accessibility bus.

Those abstractions should continue granting full access to the corresponding
buses. In the near term, I'd like to add new abstractions (something like
"dbus-session-minimal") that include the basic rules needed to connect to the
bus. Then the existing, full access buses will be adjusted to #include those
minimal abstractions, plus a permissive rule like 'dbus bus=session,'. Before
that can happen, https://launchpad.net/bugs/1262938 should be fixed.

Tyler

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to