2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 01:57:43 +00:00
Ryan Lee 7461536d52 profiles: add a profile for notify-send
Signed-off-by: Ryan Lee <ryan.lee@canonical.com>
2025-04-18 08:44:40 -07:00

22 lines
529 B
Plaintext

abi <abi/4.0>,
include <tunables/global>
profile notify-send /usr/bin/notify-send {
include <abstractions/base>
include <abstractions/dbus-session-strict>
/usr/bin/notify-send mr,
# No idea why notify-send wants cgroup info but it works fine without it
deny /proc/@{pid}/cgroup r,
dbus (send)
bus=session
path=/org/freedesktop/Notifications
interface=org.freedesktop.Notifications
member={GetServerInformation,Notify},
include if exists <local/notify-send>
}