Sorry for the delay in getting to this.

On Thu, Jul 25, 2013 at 10:52:42AM +0200, intrig...@debian.org wrote:
> From: intrigeri <intrig...@boum.org>
> 
> D-Bus now uses /etc/machine-id in some cases:
> https://bugs.freedesktop.org/show_bug.cgi?id=35228
> ---
>  profiles/apparmor.d/abstractions/dbus-session | 1 +
>  1 file changed, 1 insertion(+)

Acked-by: Steve Beattie <st...@nxnw.org> for both trunk and 2.8.

(I would like to get rid of the dbus-launch permission from the
dbus-session abstraction, as I personally resist using it because that
permission is embedded in there. But's not relevant to whether your
patch is acceptable.)

> diff --git a/profiles/apparmor.d/abstractions/dbus-session 
> b/profiles/apparmor.d/abstractions/dbus-session
> index 8735c1f..b9c872e 100644
> --- a/profiles/apparmor.d/abstractions/dbus-session
> +++ b/profiles/apparmor.d/abstractions/dbus-session
> @@ -10,4 +10,5 @@
>  # ------------------------------------------------------------------
>  
>    /usr/bin/dbus-launch ix,
> +  /etc/machine-id r,
>    /var/lib/dbus/machine-id r,

-- 
Steve Beattie
<sbeat...@ubuntu.com>
http://NxNW.org/~steve/

Attachment: signature.asc
Description: Digital signature

-- 
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to