mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-31 07:17:22 +01:00
feat(profile): clean superfluous openssl abstraction includes
apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
This commit is contained in:
Alexandre Pujol
parent
d5972cdf1d
commit
467c38724a
173 changed files with 0 additions and 180 deletions
|
|
@ -24,7 +24,6 @@
|
|||
include <abstractions/graphics>
|
||||
include <abstractions/gstreamer>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/p11-kit>
|
||||
include <abstractions/ssl_certs>
|
||||
include <abstractions/video>
|
||||
|
|
|
|||
|
|
@ -20,7 +20,6 @@ profile default @{exec_path} flags=(attach_disconnected,mediate_deleted) {
|
|||
include <abstractions/devices-usb>
|
||||
include <abstractions/graphics>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/p11-kit>
|
||||
include <abstractions/ssl_certs>
|
||||
include <abstractions/video>
|
||||
|
|
|
|||
|
|
@ -13,7 +13,6 @@ profile akonadi_maildispatcher_agent @{exec_path} {
|
|||
include <abstractions/freedesktop.org>
|
||||
include <abstractions/graphics>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/qt5>
|
||||
include <abstractions/ssl_certs>
|
||||
include <abstractions/X-strict>
|
||||
|
|
|
|||
|
|
@ -29,7 +29,6 @@ profile calibre @{exec_path} {
|
|||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/nvidia>
|
||||
include <abstractions/opencl-intel>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
include <abstractions/qt5-compose-cache-write>
|
||||
include <abstractions/qt5-settings-write>
|
||||
|
|
|
|||
|
|
@ -22,7 +22,6 @@ profile dropbox @{exec_path} {
|
|||
include <abstractions/python>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/qt5-settings-write>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
ptrace peer=@{profile_name},
|
||||
|
|
|
|||
|
|
@ -22,7 +22,6 @@ profile flameshot @{exec_path} {
|
|||
include <abstractions/thumbnails-cache-read>
|
||||
include <abstractions/user-download-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
network inet dgram,
|
||||
|
|
|
|||
|
|
@ -27,7 +27,6 @@ profile telegram-desktop @{exec_path} {
|
|||
include <abstractions/mesa>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/enchant>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
network inet dgram,
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ profile apt @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/bus/org.freedesktop.PolicyKit1>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -13,7 +13,6 @@ profile apt-listbugs @{exec_path} {
|
|||
include <abstractions/consoles>
|
||||
include <abstractions/ruby>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
#capability sys_tty_config,
|
||||
|
||||
|
|
|
|||
|
|
@ -13,7 +13,6 @@ profile debsecan @{exec_path} {
|
|||
include <abstractions/consoles>
|
||||
include <abstractions/python>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
network inet dgram,
|
||||
|
|
|
|||
|
|
@ -16,7 +16,6 @@ profile querybts @{exec_path} {
|
|||
include <abstractions/freedesktop.org>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/python>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
include <abstractions/apt-common>
|
||||
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ profile unattended-upgrade @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/bus/org.freedesktop.PackageKit>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
|
||||
capability chown,
|
||||
|
|
|
|||
|
|
@ -19,7 +19,6 @@ profile firefox-crashreporter @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/desktop>
|
||||
include <abstractions/fontconfig-cache-read>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
signal (receive) set=(term, kill) peer=firefox,
|
||||
|
||||
|
|
|
|||
|
|
@ -15,7 +15,6 @@ include <tunables/global>
|
|||
profile firefox-pingsender @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
network inet stream,
|
||||
|
|
|
|||
|
|
@ -18,7 +18,6 @@ profile opera-crashreporter @{exec_path} {
|
|||
include <abstractions/fonts>
|
||||
include <abstractions/freedesktop.org>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
ptrace (trace, read) peer=opera,
|
||||
|
|
|
|||
|
|
@ -15,7 +15,6 @@ profile colord @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/bus/org.freedesktop.PolicyKit1>
|
||||
include <abstractions/devices-usb>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
network inet dgram,
|
||||
network inet6 dgram,
|
||||
|
|
|
|||
|
|
@ -27,7 +27,6 @@ profile pulseaudio @{exec_path} {
|
|||
include <abstractions/gstreamer>
|
||||
include <abstractions/hosts_access>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/X-strict>
|
||||
|
||||
ptrace (trace) peer=@{profile_name},
|
||||
|
|
|
|||
|
|
@ -11,7 +11,6 @@ profile chrome-gnome-shell @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/dconf-write>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ profile evolution-alarm-notify @{exec_path} {
|
|||
include <abstractions/gnome-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/graphics>
|
||||
include <abstractions/openssl>
|
||||
|
||||
network netlink raw,
|
||||
|
||||
|
|
|
|||
|
|
@ -13,7 +13,6 @@ profile gdm-xsession @{exec_path} {
|
|||
include <abstractions/consoles>
|
||||
include <abstractions/dconf-write>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
|
|
|
|||
|
|
@ -23,7 +23,6 @@ profile gjs-console @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/gnome-strict>
|
||||
include <abstractions/graphics>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
network netlink raw,
|
||||
|
||||
|
|
|
|||
|
|
@ -21,7 +21,6 @@ profile gnome-calendar @{exec_path} {
|
|||
include <abstractions/gnome-strict>
|
||||
include <abstractions/graphics>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/p11-kit>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -18,7 +18,6 @@ profile gnome-contacts @{exec_path} {
|
|||
include <abstractions/graphics>
|
||||
include <abstractions/gstreamer>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
network netlink raw,
|
||||
|
|
|
|||
|
|
@ -13,7 +13,6 @@ profile gnome-contacts-search-provider @{exec_path} {
|
|||
include <abstractions/dconf-write>
|
||||
include <abstractions/gnome-strict>
|
||||
include <abstractions/graphics>
|
||||
include <abstractions/openssl>
|
||||
|
||||
signal (send) set=(term) peer=unconfined,
|
||||
|
||||
|
|
|
|||
|
|
@ -19,7 +19,6 @@ profile gnome-control-center-goa-helper @{exec_path} {
|
|||
include <abstractions/gnome-strict>
|
||||
include <abstractions/graphics>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/p11-kit>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -21,7 +21,6 @@ profile gnome-extension-gsconnect @{exec_path} {
|
|||
include <abstractions/freedesktop.org>
|
||||
include <abstractions/gtk>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/p11-kit>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -15,7 +15,6 @@ profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/bus/org.freedesktop.login1.Session>
|
||||
include <abstractions/bus/org.freedesktop.portal.Desktop>
|
||||
include <abstractions/bus/org.gnome.SessionManager>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability ipc_lock,
|
||||
|
||||
|
|
|
|||
|
|
@ -15,7 +15,6 @@ profile gnome-music @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/graphics>
|
||||
include <abstractions/gstreamer>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/p11-kit>
|
||||
include <abstractions/python>
|
||||
include <abstractions/ssl_certs>
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile gnome-remote-desktop-daemon @{exec_path} {
|
|||
include <abstractions/bus-session>
|
||||
include <abstractions/dconf-write>
|
||||
include <abstractions/graphics>
|
||||
include <abstractions/openssl>
|
||||
|
||||
network inet stream,
|
||||
network inet6 stream,
|
||||
|
|
|
|||
|
|
@ -14,7 +14,6 @@ profile gnome-software @{exec_path} {
|
|||
include <abstractions/gnome-strict>
|
||||
include <abstractions/graphics>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/p11-kit>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -15,7 +15,6 @@ profile goa-daemon @{exec_path} {
|
|||
include <abstractions/dconf-write>
|
||||
include <abstractions/gnome-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/p11-kit>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -24,7 +24,6 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/gnome-strict>
|
||||
include <abstractions/graphics>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/trash>
|
||||
|
||||
# userns,
|
||||
|
|
|
|||
|
|
@ -18,7 +18,6 @@ profile org.gnome.NautilusPreviewer @{exec_path} {
|
|||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/private-files-strict>
|
||||
include <abstractions/video>
|
||||
include <abstractions/openssl>
|
||||
|
||||
network netlink raw,
|
||||
|
||||
|
|
|
|||
|
|
@ -18,7 +18,6 @@ profile seahorse @{exec_path} {
|
|||
include <abstractions/bus/org.freedesktop.secrets>
|
||||
include <abstractions/dconf-write>
|
||||
include <abstractions/gnome-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/p11-kit>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -21,7 +21,6 @@ profile tracker-extract @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/graphics>
|
||||
include <abstractions/gstreamer>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
network netlink raw,
|
||||
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile kiod @{exec_path} {
|
|||
include <abstractions/graphics>
|
||||
include <abstractions/kde-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
network netlink raw,
|
||||
|
||||
|
|
|
|||
|
|
@ -14,7 +14,6 @@ profile kioworker @{exec_path} {
|
|||
include <abstractions/graphics>
|
||||
include <abstractions/kde-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
include <abstractions/thumbnails-cache-write>
|
||||
include <abstractions/trash>
|
||||
|
|
|
|||
|
|
@ -14,7 +14,6 @@ profile plasma-discover @{exec_path} {
|
|||
include <abstractions/graphics>
|
||||
include <abstractions/kde-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/qt5-shader-cache>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -93,7 +93,6 @@ profile sddm-xsession @{exec_path} {
|
|||
profile gpg {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
capability dac_read_search,
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile xdm-xsession @{exec_path} {
|
|||
include <abstractions/bash>
|
||||
include <abstractions/dconf-write>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/X-strict>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
|
|
|||
|
|
@ -18,7 +18,6 @@ profile NetworkManager @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/bus/org.freedesktop.PolicyKit1>
|
||||
include <abstractions/bus/org.freedesktop.resolve1>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
capability audit_write,
|
||||
|
|
|
|||
|
|
@ -11,7 +11,6 @@ profile networkd-dispatcher @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/bus-system>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
|
||||
dbus receive bus=system path=/org/freedesktop/network1{,/link/*}
|
||||
|
|
|
|||
|
|
@ -26,7 +26,6 @@ include <tunables/global>
|
|||
profile openvpn @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
# Needed to remove the following errors:
|
||||
# ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
profile arch-audit @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
capability dac_read_search,
|
||||
|
|
|
|||
|
|
@ -11,7 +11,6 @@ profile aurpublish @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/ssl_certs>
|
||||
include <abstractions/openssl>
|
||||
|
||||
network inet dgram,
|
||||
network inet6 dgram,
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
profile paccache @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability dac_read_search,
|
||||
capability mknod,
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile pacman @{exec_path} {
|
|||
include <abstractions/consoles>
|
||||
include <abstractions/disks-read>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
capability audit_write,
|
||||
|
|
@ -169,7 +168,6 @@ profile pacman @{exec_path} {
|
|||
profile gpg {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
capability dac_read_search,
|
||||
|
|
|
|||
|
|
@ -50,7 +50,6 @@ profile pacman-hook-mkinitcpio @{exec_path} flags=(attach_disconnected) {
|
|||
|
||||
profile pacman {
|
||||
include <abstractions/base>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability dac_read_search,
|
||||
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
profile reflector @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
@{exec_path} += @{lib}/ssh/sftp-server
|
||||
profile sftp-server @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/nameservice-strict>
|
||||
|
||||
capability dac_read_search,
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile ssh @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
signal (receive) set=(term) peer=gnome-keyring-daemon,
|
||||
|
||||
|
|
|
|||
|
|
@ -11,7 +11,6 @@ include <tunables/global>
|
|||
profile ssh-agent @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
signal (receive) set=term peer=cockpit-bridge,
|
||||
signal (receive) set=term peer=gnome-keyring-daemon,
|
||||
|
|
|
|||
|
|
@ -13,7 +13,6 @@ profile ssh-keygen @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
|
|
|
|||
|
|
@ -23,7 +23,6 @@ profile sshd @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/consoles>
|
||||
include <abstractions/hosts_access>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
include <abstractions/wutmp>
|
||||
|
||||
|
|
|
|||
|
|
@ -47,7 +47,6 @@ profile coredumpctl @{exec_path} flags=(complain) {
|
|||
|
||||
profile gdb {
|
||||
include <abstractions/base>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
|
||||
ptrace (trace),
|
||||
|
|
|
|||
|
|
@ -11,7 +11,6 @@ include <tunables/global>
|
|||
profile systemd-coredump @{exec_path} flags=(attach_disconnected,mediate_deleted) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/systemd-common>
|
||||
|
||||
# userns,
|
||||
|
|
|
|||
|
|
@ -11,7 +11,6 @@ profile systemd-cryptsetup @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/systemd-common>
|
||||
include <abstractions/disks-write>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability ipc_lock,
|
||||
capability net_admin,
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile systemd-homed @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/bus-system>
|
||||
include <abstractions/disks-write>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/systemd-common>
|
||||
|
||||
capability chown,
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile systemd-resolved @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/bus-system>
|
||||
include <abstractions/bus/org.freedesktop.login1>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/p11-kit>
|
||||
include <abstractions/ssl_certs>
|
||||
include <abstractions/systemd-common>
|
||||
|
|
|
|||
|
|
@ -13,7 +13,6 @@ profile apport @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/bus-session>
|
||||
include <abstractions/bus/org.gnome.SessionManager>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
|
||||
capability chown,
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
profile apport-checkreports @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ profile apport-gtk @{exec_path} {
|
|||
include <abstractions/dconf-write>
|
||||
include <abstractions/gnome-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -16,7 +16,6 @@ profile check-new-release-gtk @{exec_path} {
|
|||
include <abstractions/dconf-write>
|
||||
include <abstractions/gnome-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile do-release-upgrade @{exec_path} {
|
|||
include <abstractions/apt-common>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -11,7 +11,6 @@ profile hwe-support-status @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/apt-common>
|
||||
include <abstractions/python>
|
||||
include <abstractions/openssl>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
profile list-oem-metapackages @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/python>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/apt-common>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile software-properties-dbus @{exec_path} {
|
|||
include <abstractions/apt-common>
|
||||
include <abstractions/bus-system>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
|
||||
# dbus: own bus=system name=com.ubuntu.SoftwareProperties
|
||||
|
|
|
|||
|
|
@ -18,7 +18,6 @@ profile software-properties-gtk @{exec_path} {
|
|||
include <abstractions/dconf-write>
|
||||
include <abstractions/gnome-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
|
||||
dbus bind bus=session name=com.ubuntu.SoftwareProperties,
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile subiquity-console-conf @{exec_path} {
|
|||
include <abstractions/disks-read>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/python>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability chown,
|
||||
capability fsetid,
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile ubuntu-advantage @{exec_path} {
|
|||
include <abstractions/apt-common>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -23,7 +23,6 @@ profile update-manager @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/dconf-write>
|
||||
include <abstractions/gnome-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile update-motd-updates-available @{exec_path} {
|
|||
include <abstractions/apt-common>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
|
||||
capability dac_read_search,
|
||||
|
|
|
|||
|
|
@ -19,7 +19,6 @@ profile update-notifier @{exec_path} {
|
|||
include <abstractions/dconf-write>
|
||||
include <abstractions/gnome-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
|
||||
unix (bind) type=stream addr=@@{hex}/bus/systemd/bus-api-user,
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile cockpit-bridge @{exec_path} {
|
|||
include <abstractions/app-launcher-root>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
|
||||
capability dac_read_search,
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
profile cockpit-certificate-helper @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
profile libvirt-dbus @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
|
|
|
|||
|
|
@ -22,7 +22,6 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/devices-usb>
|
||||
include <abstractions/disks-write>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability audit_write,
|
||||
capability bpf,
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
@{exec_path} = @{lib}/libvirt/virt-aa-helper
|
||||
profile virt-aa-helper @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability dac_override,
|
||||
capability dac_read_search,
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
profile virtinterfaced @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
network netlink raw,
|
||||
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
profile virtlogd @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
ptrace (read) peer=libvirtd,
|
||||
ptrace (read) peer=unconfined,
|
||||
|
|
|
|||
|
|
@ -9,7 +9,6 @@ include <tunables/global>
|
|||
@{exec_path} = @{bin}/virtnetworkd
|
||||
profile virtnetworkd @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/nameservice-strict>
|
||||
|
||||
network netlink raw,
|
||||
|
|
|
|||
|
|
@ -13,7 +13,6 @@ profile virtnodedevd @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/disks-read>
|
||||
include <abstractions/freedesktop.org>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability net_admin,
|
||||
capability sys_admin,
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
profile virtsecretd @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
network netlink raw,
|
||||
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ include <tunables/global>
|
|||
profile virtstoraged @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability dac_read_search,
|
||||
|
||||
|
|
|
|||
|
|
@ -141,7 +141,6 @@ profile anyremote @{exec_path} {
|
|||
profile curl {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
@{bin}/curl mr,
|
||||
|
|
|
|||
|
|
@ -65,7 +65,6 @@ profile appstreamcli @{exec_path} flags=(complain) {
|
|||
profile curl {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
@{bin}/curl mr,
|
||||
|
|
|
|||
|
|
@ -19,7 +19,6 @@ profile birdtray @{exec_path} {
|
|||
include <abstractions/mesa>
|
||||
include <abstractions/dri-enumerate>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
network inet dgram,
|
||||
|
|
|
|||
|
|
@ -15,7 +15,6 @@ profile conky @{exec_path} {
|
|||
include <abstractions/fonts>
|
||||
include <abstractions/fontconfig-cache-read>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
# To get the external IP address
|
||||
|
|
@ -155,7 +154,6 @@ profile conky @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
network inet dgram,
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile cupsd @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/bus/org.freedesktop.Avahi>
|
||||
include <abstractions/bus/org.freedesktop.ColorManager>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
|
||||
capability audit_write,
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile ddclient @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/perl>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
@{exec_path} r,
|
||||
|
|
|
|||
|
|
@ -11,7 +11,6 @@ include <tunables/global>
|
|||
profile dhclient @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability net_admin,
|
||||
capability net_bind_service,
|
||||
|
|
|
|||
|
|
@ -11,7 +11,6 @@ include <tunables/global>
|
|||
profile dhclient-script @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
capability net_admin,
|
||||
|
|
|
|||
|
|
@ -12,7 +12,6 @@ profile dig @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability dac_override,
|
||||
capability dac_read_search,
|
||||
|
|
|
|||
|
|
@ -13,7 +13,6 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
|
|||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability dac_read_search,
|
||||
capability mknod,
|
||||
|
|
@ -118,7 +117,6 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
|
|||
profile kmod {
|
||||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/openssl>
|
||||
|
||||
@{bin}/kmod mr,
|
||||
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
profile downloadhelper @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/user-download-strict>
|
||||
|
||||
network inet dgram,
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ profile evince @{exec_path} {
|
|||
include <abstractions/gnome-strict>
|
||||
include <abstractions/ibus>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/user-download-strict>
|
||||
include <abstractions/user-read>
|
||||
include <abstractions/user-write>
|
||||
|
|
|
|||
|
|
@ -10,7 +10,6 @@ include <tunables/global>
|
|||
profile fail2ban-server @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
|
||||
capability dac_read_search,
|
||||
|
|
|
|||
|
|
@ -14,7 +14,6 @@ profile firewalld @{exec_path} {
|
|||
include <abstractions/bus/org.freedesktop.PolicyKit1>
|
||||
include <abstractions/bus/org.freedesktop.NetworkManager>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability mknod,
|
||||
capability net_admin,
|
||||
|
|
|
|||
|
|
@ -16,7 +16,6 @@ profile flatpak @{exec_path} flags=(attach_disconnected,mediate_deleted,complain
|
|||
include <abstractions/dconf-write>
|
||||
include <abstractions/gnome-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
# userns,
|
||||
|
|
|
|||
|
|
@ -9,7 +9,6 @@ include <tunables/global>
|
|||
@{exec_path} = @{lib}/flatpak-oci-authenticator
|
||||
profile flatpak-oci-authenticator @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/openssl>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
|
|
|
|||
Some files were not shown because too many files have changed in this diff Show more
Loading…
Reference in a new issue