On Thu, Dec 19, 2013 at 10:06:46PM -0800, Tyler Hicks wrote: > Before D-Bus mediation support was added to AppArmor, the dbus and > dbus-session abstractions granted full access to the system and session > buses, respectively. > > In order to continue granting full access to those buses, bus-specific > D-Bus mediation rules need to be added to the abstractions. > > Signed-off-by: Tyler Hicks <[email protected]>
Acked-by: Seth Arnold <[email protected]> > --- > profiles/apparmor.d/abstractions/dbus | 1 + > profiles/apparmor.d/abstractions/dbus-session | 1 + > 2 files changed, 2 insertions(+) > > diff --git a/profiles/apparmor.d/abstractions/dbus > b/profiles/apparmor.d/abstractions/dbus > index b34c928..129a756 100644 > --- a/profiles/apparmor.d/abstractions/dbus > +++ b/profiles/apparmor.d/abstractions/dbus > @@ -11,3 +11,4 @@ > > # System socket. Be careful when including this abstraction. > /{,var/}run/dbus/system_bus_socket w, > + dbus bus=system, > diff --git a/profiles/apparmor.d/abstractions/dbus-session > b/profiles/apparmor.d/abstractions/dbus-session > index 386a022..76a7bbf 100644 > --- a/profiles/apparmor.d/abstractions/dbus-session > +++ b/profiles/apparmor.d/abstractions/dbus-session > @@ -14,3 +14,4 @@ > # unique per-machine identifier > /etc/machine-id r, > /var/lib/dbus/machine-id r, > + dbus bus=session, > -- > 1.8.3.2
signature.asc
Description: Digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
