From 9e455ba44707beac8d893091409a997bdf3c459c Mon Sep 17 00:00:00 2001 From: jappedk Date: Fri, 11 Mar 2016 11:03:58 +0100 Subject: apparmor: Add various rules (some related to systemd switch) fixing session startup failures on machines using systemd as system-wide service. --- lightdm-remote-session-x2go.in | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/lightdm-remote-session-x2go.in b/lightdm-remote-session-x2go.in index f10d5a8..3c0a55b 100644 --- a/lightdm-remote-session-x2go.in +++ b/lightdm-remote-session-x2go.in @@ -63,6 +63,13 @@ # access to kernel's UUID generator (required by pyhoca-cli) @{PROC}/sys/kernel/random/uuid r, /var/lib/libuuid/clock.txt rw, + /run/systemd/journal/dev-log w, + /tmp/**/.x2go-socket r, + /tmp/.X11-unix/X[0-9]* wr, + /run/uuidd/request w, + /proc/sys/kernel/ngroups_max r, + + network, capability ipc_lock, -- cgit v1.2.3 From a5bcea0cab0da082e07fff8f1e60eaa329d65901 Mon Sep 17 00:00:00 2001 From: jappedk Date: Fri, 11 Mar 2016 11:22:48 +0100 Subject: apparmor: Add rules to allow D-Bus session(send) and accessibility(send, receive) --- lightdm-remote-session-x2go.in | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lightdm-remote-session-x2go.in b/lightdm-remote-session-x2go.in index 3c0a55b..db225c3 100644 --- a/lightdm-remote-session-x2go.in +++ b/lightdm-remote-session-x2go.in @@ -71,6 +71,9 @@ network, + dbus(send) bus=session, + dbus(send, receive) bus=accessibility, + capability ipc_lock, # silence warnings for stuff that we really don't want to grant -- cgit v1.2.3