interfaces/builtin: network-manager and bluez can change hostname (#2204

)
snapcore · Oct 25, 2016 · dfd2d58 · dfd2d58
1 parent a1c5b68
commit dfd2d58
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/interfaces/builtin/bluez.go b/interfaces/builtin/bluez.go
@@ -86,6 +86,13 @@ var bluezPermanentSlotAppArmor = []byte(`
       bus=system
       path=/org/bluez{,/**}
       interface=org.freedesktop.DBus.**,
+
+  # Allow access to hostname system service
+  dbus (receive, send)
+      bus=system
+      path=/org/freedesktop/hostname1
+      interface=org.freedesktop.DBus.Properties
+      peer=(label=unconfined),
 `)
 
 var bluezConnectedPlugAppArmor = []byte(`

diff --git a/interfaces/builtin/network_manager.go b/interfaces/builtin/network_manager.go
@@ -136,11 +136,17 @@ dbus (receive, send)
     interface=org.freedesktop.DBus.*,
 
 # Allow access to hostname system service
-dbus (send)
+dbus (receive, send)
     bus=system
     path=/org/freedesktop/hostname1
     interface=org.freedesktop.DBus.Properties
     peer=(label=unconfined),
+dbus(receive, send)
+    bus=system
+    path=/org/freedesktop/hostname1
+    interface=org.freedesktop.hostname1
+    member={Set,SetStatic}Hostname
+    peer=(label=unconfined),
 
 # Sleep monitor inside NetworkManager needs this
 dbus (send)
@@ -204,6 +210,7 @@ sendmmsg
 sendmsg
 sendto
 setsockopt
+sethostname
 shutdown
 socketpair
 socket