[apparmor] [PATCH] ubuntu-helpers: allow access to dbus session bus

[Jamie Strandboge]

On 10/06/2013 09:44 PM, John Johansen wrote:
> On 09/29/2013 10:48 AM, Felix Geyer wrote:
>> The ubuntu-helpers/sanitized_helper profile should allow applications
>> to access to dbus session bus.
>> On Ubuntu saucy the lack of dbus rules cause some KDE applications
>> to crash when launched from Firefox.
>>
> Hey Felix thanks for the report, its just been lost of the madness of the
> last couple of weeks.
> 
> Jamie is this something we have time to slip into the update?
> 
Yes, applications running under sanitized_helper should be unconfined, which
includes dbus. Better would be to simply have:

   # Allow all DBus communications
   dbus,

>>
>> === modified file 'profiles/apparmor.d/abstractions/ubuntu-helpers'
>> --- profiles/apparmor.d/abstractions/ubuntu-helpers	2012-07-05 17:36:01 +0000
>> +++ profiles/apparmor.d/abstractions/ubuntu-helpers	2013-09-29 17:42:43 +0000
>> @@ -33,6 +33,7 @@
>>
>>  profile sanitized_helper {
>>    #include <abstractions/base>
>> +  #include <abstractions/dbus-session>
>>
>>    # Allow all networking
>>    network inet,
>>
> 


-- 
Jamie Strandboge                 http://www.ubuntu.com/