feat(profile): improve snap & login bus.

roddhjav · Jan 9, 2025 · 17520a9 · 17520a9
1 parent bffb837
commit 17520a9
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 1 deletion.
diff --git a/apparmor.d/abstractions/bus/org.freedesktop.login1 b/apparmor.d/abstractions/bus/org.freedesktop.login1
@@ -21,7 +21,7 @@
 
   dbus receive bus=system path=/org/freedesktop/login1
        interface=org.freedesktop.login1.Manager
-       member={SessionNew,SessionRemoved,UserNew,UserRemoved,PrepareFor*}
+       member={SessionNew,SessionRemoved,UserNew,UserRemoved,SeatNew,PrepareFor*}
        peer=(name="{@{busname},org.freedesktop.login1}", label=systemd-logind),
 
   dbus send bus=system path=/org/freedesktop/login1

diff --git a/apparmor.d/profiles-s-z/snap b/apparmor.d/profiles-s-z/snap
@@ -73,6 +73,7 @@ profile snap @{exec_path} {
   @{run}/mount/utab r,
   @{run}/snapd.socket rw,
 
+  @{sys}/fs/cgroup/cgroup.controllers r,
   @{sys}/kernel/security/apparmor/features/{,**} r,
 
         @{PROC}/@{pids}/cgroup r,

diff --git a/apparmor.d/profiles-s-z/snapd b/apparmor.d/profiles-s-z/snapd
@@ -153,6 +153,7 @@ profile snapd @{exec_path} {
   @{run}/systemd/private rw,
 
   @{sys}/fs/cgroup/{,*/} r,
+  @{sys}/fs/cgroup/cgroup.controllers r,
   @{sys}/fs/cgroup/system.slice/{,**/} r,
   @{sys}/fs/cgroup/user.slice/ r,
   @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/{,**/} r,