Alexandre Pujol
04513af863
feat: cleanup child-systemctl
2023-11-22 18:43:43 +00:00
Alexandre Pujol
23be43ebd0
feat(full): improve how systemd handle services
2023-11-22 18:42:23 +00:00
Alexandre Pujol
f2ef493ca7
build: full system for whonix.
2023-11-22 18:16:03 +00:00
Alexandre Pujol
7909bb1948
fix(build): tunable path.
2023-11-19 23:21:50 +00:00
Alexandre Pujol
e84750453c
fix: dpkg build.
2023-11-19 23:04:43 +00:00
Alexandre Pujol
157798e93c
tests(packer): improve debian vm.
2023-11-19 21:48:38 +00:00
Alexandre Pujol
908aba0385
feat(profiles): add some ubuntu specific profiles.
2023-11-19 21:42:31 +00:00
Alexandre Pujol
e29e839c62
feat(profiles): update apt related profiles.
2023-11-19 21:40:12 +00:00
Alexandre Pujol
07e7810d15
feat(full): add some services profile.
2023-11-19 21:39:36 +00:00
Alexandre Pujol
dd767f13c0
chore: update flags list.
2023-11-19 21:39:04 +00:00
Alexandre Pujol
f43f950c90
feat(full): improve systemd-user profile.
2023-11-19 21:35:53 +00:00
Alexandre Pujol
59140f5411
feat(full): improve systemd profile.
...
See https://apparmor.pujol.io/development/structure/#full-system-policy
2023-11-19 21:31:57 +00:00
Alexandre Pujol
d64ef39bd1
build: minor fixes.
2023-11-19 21:04:58 +00:00
Alexandre Pujol
8686cc458f
Merge branch 'main' of github.com:roddhjav/apparmor.d
...
* 'main' of github.com:roddhjav/apparmor.d:
Full-Policy integration for Whonix/Kicksecure - And also everyone else (#249 )
2023-11-19 20:54:34 +00:00
monsieuremre
83a2a1cbf9
Full-Policy integration for Whonix/Kicksecure - And also everyone else ( #249 )
...
* full-policy
* change path
* change
* big fix
* Delete apparmor.d/groups/_full/systemd
* Update and rename full-policy to systemd
2023-11-19 20:54:09 +00:00
Alexandre Pujol
3aa07e4d64
tests(packer): add arch-server and ubuntu 24.04 images.
2023-11-19 16:09:25 +00:00
Alexandre Pujol
f0cdadbdaf
feat(abs): improve mesa abstraction.
2023-11-19 15:39:02 +00:00
Alexandre Pujol
1b48e419f4
build(suse): add systemd-userdbd drop in file.
2023-11-19 15:38:36 +00:00
Alexandre Pujol
185187b608
doc: rewrite full system policy section.
2023-11-19 14:49:08 +00:00
Alexandre Pujol
edab2be894
doc: add nnp section.
2023-11-19 14:48:25 +00:00
Alexandre Pujol
9e04743156
build: do not use rsync to synchronise file anymore.
2023-11-19 14:47:55 +00:00
Alexandre Pujol
5eb120cdbb
build: new system origin path.
2023-11-19 14:34:42 +00:00
Alexandre Pujol
96ea9d17ae
feat(full): disable nnp flag on some services.
2023-11-19 14:32:57 +00:00
Alexandre Pujol
f564347580
refractor: move default systemd drop in files.
2023-11-19 14:20:14 +00:00
Alexandre Pujol
d1c8471b1d
fix: rule compilation.
2023-11-19 11:39:24 +00:00
Alexandre Pujol
88555a12d0
feat(profiles): add initial userns rule.
...
Require apparmor 4 to be enabled.
2023-11-19 11:19:24 +00:00
Alexandre Pujol
6dc990ac02
feat(full): set systemd profile name on build time.
2023-11-19 11:14:31 +00:00
Alexandre Pujol
2143fb03af
feat(full): add new systemd variable.
2023-11-19 11:13:40 +00:00
Alexandre Pujol
b79a1fcd31
feat(profile): general update.
...
Also include some preparation for the systemd profile.
2023-11-19 11:08:35 +00:00
Alexandre Pujol
3197f52a97
feat(aa-log): improve log to rule conversion.
2023-11-19 10:59:46 +00:00
Alexandre Pujol
58b577385e
build(ci): add gitlab ci for whonix.
2023-11-13 23:41:41 +00:00
Alexandre Pujol
aa84d08ef6
tests: improve tests image content.
2023-11-13 23:40:51 +00:00
Alexandre Pujol
e8fcc12c98
feat(profiles): cleanup dbus daemon related profile.
2023-11-13 23:10:00 +00:00
Alexandre Pujol
e99f7de703
fix(profiles): fix slow startup of gnome
...
at-spi-bus-launcher starts the accessibility bus.
We need to ensure all buses are initally started by the same profile,
otherwise the accessibility fail to start.
See #74 , #80 & #235
2023-11-13 22:59:10 +00:00
Alexandre Pujol
a66debd2fb
build(dpkg): ignore libvirt profiles.
2023-11-13 22:22:40 +00:00
Alexandre Pujol
d3084839d1
feat(profiles): improve support for debian over gnome.
2023-11-13 22:14:54 +00:00
Alexandre Pujol
31edd15e8a
feat(profiles): improve kde integration.
2023-11-13 22:11:12 +00:00
Alexandre Pujol
6f98bb9bfb
feat(abs): add more possible resolv.conf path in nameservice.
...
Used a lot by debian.
2023-11-13 19:32:04 +00:00
Alexandre Pujol
5a3dface8e
tests: add debian-gnome vm image.
2023-11-13 18:56:15 +00:00
Alexandre Pujol
f0a2cb3897
feat(profiles): general update.
2023-11-11 22:02:47 +00:00
Alexandre Pujol
02115a194b
chore: cleanup abstraction' headers.
2023-11-11 20:25:55 +00:00
Alexandre Pujol
3b42cc0ca7
build: update full system policy setup.
2023-11-11 20:25:27 +00:00
Alexandre Pujol
5760c0129c
build: add ignore file for whonix.
2023-11-09 20:53:30 +00:00
Alexandre Pujol
3ab5046d5d
build: ignore non suse profiles on other dists.
2023-11-09 20:53:03 +00:00
Alexandre Pujol
18da36238e
build: add some flags definition.
2023-11-09 20:51:34 +00:00
Alexandre Pujol
758991f67b
feat(profiles): general update.
2023-11-09 17:31:45 +00:00
Alexandre Pujol
ee658c41a6
refractor(profiles): improve child profile structure.
2023-11-09 17:29:34 +00:00
Alexandre Pujol
b49eb4c416
doc: add link to the ubuntu summit talk.
2023-11-09 17:28:33 +00:00
Alexandre Pujol
499b9e785d
feat(full): update full system structure.
...
- Aims to be compatible with full-policy profile
- Required by systemd
2023-11-09 17:27:19 +00:00
Jeroen Rijken
d042526ca4
signal to socket
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2023-10-31 16:32:07 +01:00
