Skip to content
This repository has been archived by the owner on Feb 12, 2023. It is now read-only.

Commit

Permalink
fix(apparmor): Fix accessibility DBus access
Browse files Browse the repository at this point in the history
AppArmor denies access to a11y:
```
Jan 26 15:23:31 vincas-ubuntu1804 dbus-daemon: apparmor="DENIED"
operation="dbus_method_call"  bus="accessibility"
path="/org/freedesktop/DBus" interface="org.freedesktop.DBus"
member="Hello" mask="send" name="org.freedesktop.DBus" pid=8011
label="qtox" peer_label="unconfined"

Jan 26 15:23:31 vincas-ubuntu1804 dbus-daemon[1474]: apparmor="DENIED"
operation="dbus_method_call"  bus="session" path="/org/a11y/bus"
interface="org.freedesktop.DBus.Properties" member="Get" mask="send"
name="org.a11y.Bus" pid=8011 label="qtox" peer_pid=1620
peer_label="unconfined"
```

Include dbus-accessibility abstraction and one addition dbus rule to fix
denies.
  • Loading branch information
Talkless committed Mar 25, 2019
1 parent aef4705 commit a67faf2
Show file tree
Hide file tree
Showing 2 changed files with 20 additions and 0 deletions.
10 changes: 10 additions & 0 deletions security/apparmor/2.12.1/usr.bin.qtox
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@
profile qtox /usr{,/local}/bin/qtox {
#include <abstractions/audio>
#include <abstractions/base>
#include <abstractions/dbus-accessibility>
#include <abstractions/dbus-session-strict>
#include <abstractions/dri-enumerate>
#include <abstractions/gnome>
Expand Down Expand Up @@ -38,6 +39,15 @@ profile qtox /usr{,/local}/bin/qtox {
network tcp,
network udp,

# DBus

dbus send
bus=session
path=/org/a11y/bus
interface=org.freedesktop.DBus.Properties
member=Get
peer=(label=unconfined),

# System files

@{qtox_additional_rw_dirs}/ r,
Expand Down
10 changes: 10 additions & 0 deletions security/apparmor/2.13.2/usr.bin.qtox
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@
profile qtox /usr{,/local}/bin/qtox {
#include <abstractions/audio>
#include <abstractions/base>
#include <abstractions/dbus-accessibility>
#include <abstractions/dbus-session-strict>
#include <abstractions/dri-enumerate>
#include <abstractions/gnome>
Expand Down Expand Up @@ -44,6 +45,15 @@ profile qtox /usr{,/local}/bin/qtox {
network tcp,
network udp,

# DBus

dbus send
bus=session
path=/org/a11y/bus
interface=org.freedesktop.DBus.Properties
member=Get
peer=(label=unconfined),

# System files

@{qtox_additional_rw_dirs}/ r,
Expand Down

0 comments on commit a67faf2

Please sign in to comment.