[apparmor] [patch] Document aliases for dbus send and receive in apparmor.d

Christian Boltz apparmor at cboltz.de
Wed Jun 1 20:35:35 UTC 2016


Hello,

$subject.


[ apparmor.d.pod-dbus-aliases.diff ]

--- parser/apparmor.d.pod       2016-06-01 22:32:13.886365414 +0200
+++ parser/apparmor.d.pod       2016-06-01 22:32:49.758121352 +0200
@@ -195,7 +195,7 @@
 
 B<DBUS ACCESS LIST> = Comma separated list of I<DBUS ACCESS>
 
-B<DBUS ACCESS> = ( 'send' | 'receive' | 'bind' | 'eavesdrop' )
+B<DBUS ACCESS> = ( 'send' | 'receive' | 'bind' | 'eavesdrop' | 'r' | 'read' | 'w' | 'write' | 'rw' )
   Some accesses are incompatible with some rules; see below.
 
 B<AARE> = B<?*[]{}^>
@@ -1010,6 +1010,9 @@
 permissions cannot be used in service rules. The 'eavesdrop' permission cannot
 be used in rules containing any conditionals outside of the 'bus' conditional.
 
+'r' and 'read' are synonyms for 'receive'. 'w' and 'write' are synonyms for
+'send'. 'rw' is a synonym for both 'send' and 'receive'.
+
 AppArmor DBus permissions are implied when a rule does not explicitly state an
 access list. By default, all DBus permissions are implied. Only message
 permissions are implied for message rules and only service permissions are


Regards,

Christian Boltz
-- 
Maybe you need to turn the chamaeleon (gecko) once more, 90 grades this
time, with a silly grin and a rolling stones tongue coming out. ;-))
[Eberhard Moenkeberg in opensuse]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160601/ef43c2b9/attachment.pgp>


More information about the AppArmor mailing list