From 34933e3b532dcb168beea655d2c1810f88a6e8bb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Micha=C5=82=20Sawicz?= <michal.sawicz@canonical.com>
Date: Sun, 8 Sep 2024 09:28:07 +0200
Subject: [PATCH] interfaces/udisks2: allow `Ping`ing the UDisks2 service
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Otherwise:
```
apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/UDisks2" interface="org.freedesktop.DBus.Peer" member="Ping" mask="send" name="org.freedesktop.UDisks2" pid=4321 label="snap.<foo>.<bar>" peer_pid=1234 peer_label="unconfined"
```

Signed-off-by: Michał Sawicz <michal.sawicz@canonical.com>
---
 interfaces/builtin/udisks2.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/interfaces/builtin/udisks2.go b/interfaces/builtin/udisks2.go
index e1df0e6df1c..7a6246534d4 100644
--- a/interfaces/builtin/udisks2.go
+++ b/interfaces/builtin/udisks2.go
@@ -177,6 +177,12 @@ const udisks2ConnectedPlugAppArmor = `
 
 #include <abstractions/dbus-strict>
 
+dbus (send)
+    bus=system
+    path=/org/freedesktop/UDisks2
+    interface=org.freedesktop.DBus.Peer
+    member=Ping
+    peer=(label=###SLOT_SECURITY_TAGS###),
 dbus (receive, send)
     bus=system
     path=/org/freedesktop/UDisks2/**