curiosityseeker
adccd0066a
Fix typo in @{text_edirors} ( #338 )
...
* Fix typo in multiarch.d/programs
* Fix typo in multirach.d/paths
* Fix typo in abstractions/app-open
2024-05-29 20:41:23 +00:00
curiosityseeker
94d9570230
Firefox: using stacking for glxtest and vaapitest ( #337 )
...
The current implementation results in the following errors for the Firefox profile:
@{lib}/firefox/glxtest rix -> firefox-glxtest, # no new privs
@{lib}/firefox/vaapitest rix -> firefox-vaapitest, # no new privs
Using stacking as suggested on https://apparmor.pujol.io/development/structure/#no-new-privileges gets rid of these errors.
2024-05-29 20:41:01 +00:00
Alexandre Pujol
0f382a4d5d
tests(aa): improve aa unit tests.
2024-05-29 21:18:30 +01:00
Alexandre Pujol
5f64bb4e0c
tests(aa): improve rules unit tests.
2024-05-29 21:17:21 +01:00
Alexandre Pujol
23eaa20fb7
feat(aa): ensure the prebuild jobs are working.
2024-05-29 21:12:54 +01:00
Alexandre Pujol
fe4c86a245
feat(aa): add more unit tests.
2024-05-28 18:23:37 +01:00
Alexandre Pujol
e33c1243cc
chore(aa): cleanup.
2024-05-28 18:22:14 +01:00
Alexandre Pujol
90087be509
feat(aa): Move sort, merge and format methods to the rules interface.
...
- Use the new Kind struct in favor of reflect
- Update sort function to slices.SortFunc
2024-05-28 18:20:52 +01:00
Alexandre Pujol
0761a6c466
feat(aa): add the hat template.
2024-05-28 18:16:21 +01:00
Alexandre Pujol
3b0944c615
feat(aa): add the Kind struct to manage aa rules.
2024-05-28 18:15:22 +01:00
Alexandre Pujol
1333ec2025
feat(aa): cleanup rules methods.
2024-05-28 18:07:32 +01:00
Alexandre Pujol
dc0e0084a0
feat(aa): add function to resolve include preamble.
2024-05-28 11:53:32 +01:00
Alexandre Pujol
04a91bbd9b
feat(aa): updaqte mount flags order.
2024-05-27 23:44:23 +01:00
Alexandre Pujol
0aa317d8e4
feat(aa): update default tunable selection.
2024-05-27 23:44:03 +01:00
Alexandre Pujol
a99387c323
feat(aa): parse apparmor preamble files.
2024-05-27 18:55:21 +01:00
Alexandre Pujol
2e043d4ec8
feat(aa): add some rules methods.
2024-05-26 18:05:15 +01:00
Alexandre Pujol
92641e7e28
feat(aa): add initial profile validation structure.
2024-05-25 22:36:39 +01:00
Alexandre Pujol
2dd6046697
feat(prebuild): add builder opt to build tasks.
2024-05-25 22:32:10 +01:00
Alexandre Pujol
02e3334949
feat(prebuild): add err reporting to builder & directive tasks.
2024-05-25 22:30:20 +01:00
Alexandre Pujol
865ce4c66b
chore: cosmetic
2024-05-25 22:26:51 +01:00
Alexandre Pujol
9812c38b83
test(aa): add unit tests for the link rule.
2024-05-25 22:22:57 +01:00
Alexandre Pujol
019b6f8197
feat(aa): format now merge access list.
2024-05-25 22:22:32 +01:00
Alexandre Pujol
54fdf38861
chore: cosmetic & fix.
2024-05-25 22:21:59 +01:00
Alexandre Pujol
72107dcfff
feat(aa): add the hat struct.
2024-05-25 22:17:32 +01:00
Alexandre Pujol
474481f1d3
test(aa): update unit tests.
2024-05-25 22:16:31 +01:00
Alexandre Pujol
656aa15836
feat(aa): rewrite the toAccess function to parse, convert and verify the access values.
2024-05-25 22:14:43 +01:00
Alexandre Pujol
05de39d92a
feat(aa): improve comment generation from log map.
2024-05-25 22:03:16 +01:00
Alexandre Pujol
744c745394
feat(aa): add requirements map.
2024-05-25 22:01:29 +01:00
Alexandre Pujol
e38f5b4637
feat(aa): add the link rule.
2024-05-25 21:56:28 +01:00
Alexandre Pujol
c785b41451
feat(profile): general update.
2024-05-18 22:35:05 +01:00
Alexandre Pujol
7d1380530a
feat(profile): update steam profiles.
...
- Still a wip stage
- Not shipped by default
2024-05-18 15:02:20 +01:00
Alexandre Pujol
5e6af16580
feat(profile): small improvment on systemd profiles.
2024-05-18 13:09:25 +01:00
Alexandre Pujol
17bfd0e869
build: update flags manifest.
2024-05-18 12:10:29 +01:00
fira959
d40812ec2f
Profile fixes ( #334 )
...
* Update discord
fix path
* Update signal-desktop-chrome-sandbox
* Update signal-desktop
2024-05-17 11:44:15 +00:00
doublez13
9349baaff4
vipw-vigr: Use editor abstraction
2024-05-16 15:44:29 +01:00
doublez13
ce329175da
pass: Use editor abstraction
2024-05-16 15:44:29 +01:00
doublez13
a291ce373a
git: Use editor abstraction
2024-05-16 15:44:29 +01:00
doublez13
192d227c50
crontab: Use editor abstraction
2024-05-16 15:44:29 +01:00
doublez13
98ea2fa47b
apt: Use editor abstraction
2024-05-16 15:44:29 +01:00
doublez13
4256e11492
editor abstraction: minor additions
...
Add any one-off rules covered in the other editor profiles before converting those to the abstraction.
2024-05-16 15:44:29 +01:00
fira959
f86b305a66
Update discord profile ( #332 )
...
---------
Co-authored-by: Alex <roddhjav@users.noreply.github.com>
2024-05-16 10:33:24 +00:00
Alexandre Pujol
41b814675b
fix: syntax error.
2024-05-15 23:53:17 +01:00
Alexandre Pujol
58e458f4ab
feat(profile): add the app/firefox abstraction.
2024-05-15 23:13:23 +01:00
Alexandre Pujol
f5ac8cd4a1
feat(profile): improve dbus rule in chromium based profiles.
2024-05-15 23:07:05 +01:00
Alexandre Pujol
ad960d477b
feat(profile): replace former regex by the new @{user} variable.
2024-05-15 17:22:20 +01:00
Alexandre Pujol
407c71b133
feat(profile): modernize a few app profiles.
2024-05-15 14:50:50 +01:00
fira959
acd6a9794d
Update signal-desktop ( #331 )
...
* Update signal-desktop
* Update signal-desktop-chrome-sandbox
* Update signal-desktop
* Update apparmor.d/groups/apps/signal-desktop
Co-authored-by: Alex <roddhjav@users.noreply.github.com>
* Update signal-desktop
---------
Co-authored-by: Alex <roddhjav@users.noreply.github.com>
2024-05-14 21:54:31 +00:00
Alexandre Pujol
855f25da9b
feat(tunable): add hex38.
2024-05-14 12:55:57 +01:00
Alexandre Pujol
7b25ed1913
Merge branch 'main' of github.com:roddhjav/apparmor.d
...
* 'main' of github.com:roddhjav/apparmor.d:
Task: Update abstraction path
Mutt: Update abstraction path
Update and move abstractions/editor to abstractions/app/editor
Task: Use editor abstraction
Mutt: Use editor abstraction
Create editor abstraction
2024-05-13 20:37:12 +01:00
Alexandre Pujol
00fd9ddec1
feat(profile): add iceauth
2024-05-13 20:36:46 +01:00
