189
189
peer=(label=unconfined),
191
# Untrusted Helpers are 3rd party apps that run in a different confinement
192
# context and are in a separate Mir session from the calling app (eg, an
193
# app that uses a content provider from another app). These helpers use
194
# Trusted Prompt Sessions to overlay their window over the calling app and
195
# need to get the Mir socket that was setup by the associated trusted helper
196
# (eg, content-hub). Typical consumers are content-hub providers,
197
# pay-service, url-dispatcher and possibly online-accounts.
198
# LP: #1462492 - this rule is suboptimal and should not be needed once we
199
# move to socket activation or FD passing
201
path=/com/canonical/UbuntuAppLaunch/@{APP_ID_DBUS}/*
202
interface="org.canonical.UbuntuAppLaunch.SocketDemangler"
203
member="GetMirSocket"
205
peer=(label=unconfined),
191
207
# TODO: finetune this