So, with the 0.101+14.10.20140530-0ubuntu1 release now in the archive, mediascanner2's QML API now works through a D-Bus API. The D-Bus service checks its peer's AppArmor context and implements a rudimentary security policy (which I'd be happier with if I could delegate out to a central policy).
The easyprof profiles probably need updating to allow access to this D-Bus service though, since the music-app developers reported that they couldn't access it when running confined.
So, with the 0.101+14. 10.20140530- 0ubuntu1 release now in the archive, mediascanner2's QML API now works through a D-Bus API. The D-Bus service checks its peer's AppArmor context and implements a rudimentary security policy (which I'd be happier with if I could delegate out to a central policy).
The easyprof profiles probably need updating to allow access to this D-Bus service though, since the music-app developers reported that they couldn't access it when running confined.