mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-31 23:35:03 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
1838 commits 6 branches 0 tags 16 MiB
Commit graph

260 commits

Author SHA1 Message Date
Alexandre Pujol
d6888a65c4
feat(dbus): add initial polkit abstraction. 2023-12-01 20:42:41 +00:00
Alexandre Pujol
8e45076077
feat(abs): add initial version of dbus abs. 2023-11-30 23:35:54 +00:00
Alexandre Pujol
d75fa9bbd5
feat(dbus): dbus rules cleanup (3) 2023-11-30 23:20:29 +00:00
Alexandre Pujol
8a49f2ebe1
feat(dbus): dbus rules cleanup (1) 
- move common rule to abs
- ensure peer name or label are always present
- try to make rule more standard/easier to read
 2023-11-30 22:39:44 +00:00
Alexandre Pujol
459fe7c905
feat(profile): use the new bus/atspi abstraction in the profiles. 2023-11-30 00:22:34 +00:00
Alexandre Pujol
f5e7cd7d0c
feat(abs): add some common dbus rules. 2023-11-29 22:10:23 +00:00
Alexandre Pujol
94f18ed6c1
feat(abs): add new atspi dbus abstraction. 2023-11-29 22:09:05 +00:00
Alexandre Pujol
60e4a01a76
feat(abs): add some files into the base abstaction. 2023-11-29 17:50:26 +00:00
Alexandre Pujol
a48daa9c9e
fix(profile): reduce the number of profile transition. 
See: 209688f
 2023-11-28 10:57:48 +00:00
Alexandre Pujol
209688fe86
feat(profile): general update. 2023-11-27 19:35:42 +00:00
Alexandre Pujol
3da0ad2572
feat(full): add bwrap-app abstraction. 2023-11-26 23:08:02 +00:00
Alexandre Pujol
8250e202a0
feat(profile): general update. 2023-11-26 21:24:40 +00:00
Alexandre Pujol
cd1de59aad
feat(abs): improve audio abstraction. 2023-11-24 18:17:26 +00:00
Alexandre Pujol
f0cdadbdaf
feat(abs): improve mesa abstraction. 2023-11-19 15:39:02 +00:00
Alexandre Pujol
88555a12d0
feat(profiles): add initial userns rule. 
Require apparmor 4 to be enabled.
 2023-11-19 11:19:24 +00:00
Alexandre Pujol
6f98bb9bfb
feat(abs): add more possible resolv.conf path in nameservice. 
Used a lot by debian.
 2023-11-13 19:32:04 +00:00
Alexandre Pujol
f0a2cb3897
feat(profiles): general update. 2023-11-11 22:02:47 +00:00
Alexandre Pujol
02115a194b
chore: cleanup abstraction' headers. 2023-11-11 20:25:55 +00:00
Alexandre Pujol
2aace6bccb
feat(profile): improve kde integration. 2023-09-29 19:33:09 +01:00
curiosityseeker
047c819e8c Update fontconfig-cache-write 2023-09-29 19:28:51 +01:00
Alexandre Pujol
24affe46f2
fix(abs): SSD Nvme devices pci path. 2023-09-18 19:08:07 +01:00
Alexandre Pujol
d3f05fb334
chore: cosmetic 2023-09-17 21:55:11 +01:00
Alexandre Pujol
2d2693bd99
refractor(profiles): unify the name of the local variables. 2023-09-13 20:55:20 +01:00
Alexandre Pujol
6c397882ad
feat(dbus): update dbus rules. 2023-09-12 22:55:24 +01:00
Alexandre Pujol
1fb2de0acd
feat(profiles): general update. 2023-09-05 23:36:46 +01:00
Alexandre Pujol
245db40b2d
fix(abs): update pci path for disk acess. 2023-09-05 23:32:11 +01:00
Alexandre Pujol
aea0034fcc
chore: various cosmetic changes. 2023-09-01 19:26:52 +01:00
curiosityseeker
86b1ee4df2
Updating sddm, plasmashell, kwin_wayland, startplasma, kscreenlocker-greet and mesa and wayland abstractions (#200) 
* Update sddm

* Update plasmashell

* Update kwin_wayland

* Update kscreenlocker-greet

* Update startplasma

* Update complete

Needed by various applications, e.g. kwin_wayland.

* Mesa rules for sddm
 2023-08-30 18:48:25 +00:00
Alexandre Pujol
eb1c03949f
feat(abs): improve some abstraction. 2023-08-27 14:40:56 +01:00
Alexandre Pujol
d80b758968
feat(abs): modernize disk-read/write abs. 2023-08-24 19:34:21 +01:00
Alexandre Pujol
25782cb925
feat(abs): devices-usb - remove unneeded udev rule. 2023-08-24 19:32:45 +01:00
Alexandre Pujol
07cfbcd952
feat(profiles): modernize udev access. 2023-08-24 19:31:54 +01:00
Alexandre Pujol
96b8f96137
feat(profiles): general update. 2023-08-22 23:23:47 +01:00
Alexandre Pujol
261778dbb3
revertL dbus session unix address. 2023-08-22 18:54:39 +01:00
Alexandre Pujol
6756ca8138
fix(abs): gstreamer cache structure. 2023-08-21 23:27:35 +01:00
Alexandre Pujol
5dbc42aaab
feat(abs): update some abstractions. 2023-08-21 23:21:14 +01:00
Alexandre Pujol
275d6b6e62
feat(profiles): replace old [0-9]* glob by @{int} 
Beware some [0-9]* glob are actually not proper @{int}.
 2023-08-18 17:09:53 +01:00
Alexandre Pujol
8ea4491a56
fix(abs): some block device use more than int as identifier. 2023-08-18 15:24:22 +01:00
Alexandre Pujol
b2d093e125
feat(abs): restric abstraction by using new @{int} and @{rand} variables. 2023-08-17 21:24:02 +01:00
Alexandre Pujol
557d905543
Merge branch 'tunables' of https://github.com/nobody43/apparmor.d into nobody43-tunables 
* 'tunables' of https://github.com/nobody43/apparmor.d:
  dbus temp tails
  Update apparmor.d
  Update gdm-runtime-config
  more unrelated changes
  adjust date-time
  random tails
  rename to int, convert more profiles
  fixes
  tunables
 2023-08-17 20:01:53 +01:00
curiosityseeker
c2c745888c Update complete 
Move entries from child-open to this abstraction.
 2023-08-17 19:43:29 +01:00
curiosityseeker
f2511210af Update complete 
Adding `kde-open`
 2023-08-17 19:43:29 +01:00
curiosityseeker
c409fe84d2 Create complete 
`child-open` includes the `xdg-open` abstraction which in turn includes the `kde-open5` abstraction which contains `/usr/bin/kde-open5 rix,` but NOT `/usr/bin/kde-open rix,`causing an error.
 2023-08-17 19:43:29 +01:00
Alexandre Pujol
03cf850666
feat(profile): support for diverse wayland compositors. 
See #165
 2023-08-06 16:31:49 +02:00
ShellCode
0f9b7cb474
Fix #184 (#185) 
* Replace @{HOME}/.config with @{user_config_dirs}

* Replace @{HOME}/.cache with @{user_cache_dirs}

* Replace @{HOME}/.local/state with @{user_state_dirs}

* Add missing user_share_dirs to apparmor.d/tunables/home.d/apparmor.d

* Update docs/variables.md

* Replace @{HOME}/.local/share with @{user_share_dirs}

* Replace @{HOME}/.local/lib with @{user_lib_dirs}

* Revert "Add missing user_share_dirs to apparmor.d/tunables/home.d/apparmor.d"

This reverts commit 9525003098.
 2023-07-27 11:20:19 +00:00
Alexandre Pujol
a3d121fe23
feat(kde): improve support for support. 2023-07-20 21:04:22 +01:00
Alexandre Pujol
d2a650f6c6
feat(profiles): improve dbus integration. 2023-07-20 21:00:41 +01:00
Alexandre Pujol
bb71f49598
refactor(profiles): use @{bin} and @{lib} in profiles (1) 2023-07-09 13:20:25 +01:00
Alexandre Pujol
11617131ce
feat(profiles): general update. 2023-07-03 14:09:25 +01:00
Jeroen Rijken
96c79417cc Add vscodium & thunderbird 
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
 2023-06-13 17:58:22 +01:00
Alexandre Pujol
3c41453591
feat: better wayland client integration. 2023-05-27 23:54:53 +01:00
Alexandre Pujol
fe2edb31d8
feat(abs): qt5 - additional resource. 2023-04-30 21:50:53 +01:00
Alexandre Pujol
f086f71ba9
feat(firefox): distributions have many paths for ff. 2023-04-30 20:29:22 +01:00
Alexandre Pujol
a95da2e5b8
feat(abs): window_decorations is also needed in gtk abs. 2023-04-30 20:27:45 +01:00
Alexandre Pujol
11506d5416
feat(abs): improve browser entry point handling. 2023-04-25 23:19:48 +01:00
Alexandre Pujol
4523a61425
feat(abs): add floppy disk to disk abs. 2023-04-24 18:57:04 +01:00
Alexandre Pujol
7ddba7230d
feat(profiles): update kde integration. 
See #134
 2023-04-24 18:56:28 +01:00
Alexandre Pujol
538d708ec0
feat(profiles): improve integration with xfce and small fixes. 
See: #137
 2023-04-24 15:15:40 +01:00
Alexandre Pujol
b9b3d0fab1
fix(build): debian specificities build. 2023-04-24 00:01:35 +01:00
Alexandre Pujol
12456486f1
feat(kde): general update. 2023-04-16 19:10:14 +01:00
Alexandre Pujol
c039fe6c99
feat(abs): improve vulkan resource definition. 2023-04-15 11:54:00 +01:00
Alexandre Pujol
e69f997be3
feat(abs): add intel oneapi support. 2023-04-15 11:53:24 +01:00
Alexandre Pujol
5ea6ede589
feat(profile): general update. 2023-04-15 11:52:00 +01:00
Alexandre Pujol
e927145edb
feat(profiles): general update. 2023-03-31 16:52:35 +01:00
Alexandre Pujol
ed4bd4628a
feat: remove conflicting files with upstream. 
See: #131
 2023-03-27 22:59:59 +01:00
Alexandre Pujol
41766ebd2a
feat(profiles): better integration with openSUSE. 
See #134
 2023-03-27 22:22:36 +01:00
Alexandre Pujol
c5098007a5
feat(abs): cleanup abstraction completion. 
Most of this is already upstreamed.
 2023-03-23 17:33:35 +00:00
Alexandre Pujol
0dfce498c8
feat(profiles): general update. 2023-03-19 17:04:51 +00:00
Alexandre Pujol
558cb68f23
feat(profiles): general update. 2023-03-07 17:57:57 +00:00
curiosityseeker
3619065c5a Update chromium 2023-03-02 18:55:24 +00:00
curiosityseeker
c1adeb8c32 Update chromium 
keepassxc-proxy rPUX -> rix
See issue #128
 2023-03-02 18:55:24 +00:00
nobody43
8c0e0a9de1 freedesktop 2023-03-02 17:50:45 +00:00
nobody43
8b4407ca02 fixes 2023-02-22 21:52:55 +00:00
nobody43
a873af1f26 general_initial 2023-02-22 21:52:55 +00:00
Alexandre Pujol
ef292b585c
feat(profiles): first set of rules for Ubuntu Core support. 2023-02-19 18:22:18 +00:00
Alexandre Pujol
d66a8fa082
feat(profiles): general update. 2023-02-19 17:42:05 +00:00
Alexandre Pujol
a8808d3da6
feat(profiles): general update. 2023-02-06 21:25:09 +00:00
Alexandre Pujol
35fcb6fc71
feat(opensuse): desktop integration. 2023-02-04 23:43:18 +00:00
Alexandre Pujol
6061d4981b
feat(profiles): chromium_install_dirs -> chromium_lib_dirs 2023-02-04 19:08:02 +00:00
Alexandre Pujol
f19379c55f
feat(abs): extend deny-sensitive with new user_password_store_dirs var. 2023-02-01 22:34:54 +00:00
Alexandre Pujol
5a722c42a2
feat(profiles): rewrite the vlc profile. 2023-01-26 20:02:33 +00:00
Alexandre Pujol
9343807632
feat(profiles): audit udev on the browsers. 2023-01-24 19:55:50 +00:00
Alexandre Pujol
64ad329dd9
feat(profiles): Cleanup udev rules. 2023-01-19 18:51:16 +00:00
Alexandre Pujol
c59a40ec4e
feat(profiles): general update. See #101 2023-01-15 17:15:26 +00:00
Alexandre Pujol
19d005bf59
feat(profiles): add the @{XDG_WORK_DIR} variable. 2022-12-09 19:13:06 +00:00
Alexandre Pujol
dd232695d3
feat(profiles): refractor all chromium based browsers. 
All chromium based browser now use the new chromium abstraction.
 2022-12-09 18:50:57 +00:00
Alexandre Pujol
bec892b179
fix: disk-write need access to /dev/mapper/ too. 2022-12-07 20:41:07 +00:00
Alexandre Pujol
f8b6dfae5c
fix: ensure sys/device/cpu/possible is in the base abs for all dist. 2022-11-29 20:24:38 +00:00
Alexandre Pujol
1e5d90afe8
feat(profiles): general update. 2022-11-29 12:02:38 +00:00
Alexandre Pujol
fd88162c55
feat(profiles): disks access - add NBD devices. 2022-11-11 21:41:04 +00:00
Alexandre Pujol
dd13de385e
feat(profiles): general update. 2022-11-05 17:25:27 +00:00
Alexandre Pujol
a90cdbe879
feat(profiles): general update. 2022-11-03 21:40:01 +00:00
Alexandre Pujol
eddf6bfc4f
feat(profiles): general update. 2022-10-08 13:13:44 +01:00
Alexandre Pujol
ac47e292ac
feat(profiles): general update. 2022-10-04 21:11:13 +01:00
Alexandre Pujol
d0a8030af8
fix(profile): add deny-sensitive-home abstraction. 2022-10-01 19:18:54 +01:00
Alexandre Pujol
8a55eb8330
fix(profile): fontconfig-cache-write needs /var/cache/fontconfig/ access. 2022-10-01 19:11:19 +01:00
Alexandre Pujol
768e50c6ab
fix: remove not modified lxc rules. 
Fix #79
 2022-09-28 11:54:29 +01:00
Alexandre Pujol
8ff5ed7a69
feat(profiles): general update. 2022-09-11 20:45:14 +01:00
nobodysu
fe59b4d3f8 Delete lightdm_chromium-browser 2022-09-06 22:02:21 +01:00
nobodysu
f02ec5d273 Delete lightdm 2022-09-06 22:02:21 +01:00