1413 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Alexandre Pujol	28af1fd642	chore: cleanup flags file.	2023-08-27 15:35:01 +01:00
Alexandre Pujol	22e57b3620	feat(profiles): apply guideline on some profile. Update flags list.	2023-08-27 15:30:18 +01:00
Alexandre Pujol	7a5096e7d8	feat(profiles): add inital version of dolphin.	2023-08-27 15:24:54 +01:00
Alexandre Pujol	ad3e5a5dcf	feat(profiles): add protonmail-bridge.	2023-08-27 15:17:36 +01:00
Alexandre Pujol	8cfe2780d4	feat(profiles): rewrite the spotify profile.	2023-08-27 15:00:02 +01:00
Alexandre Pujol	b0eed1ae39	feat(profiles): add transmission-gtk	2023-08-27 14:59:02 +01:00
Alexandre Pujol	4d79af2203	feat(profiles): add gnome-extension-gsconnect	2023-08-27 14:57:50 +01:00
Alexandre Pujol	75ef5ef6ad	feat(profiles): general update.	2023-08-27 14:54:04 +01:00
Alexandre Pujol	19331acaa9	feat(profiles): improve dbus related rules.	2023-08-27 14:46:49 +01:00
Alexandre Pujol	2db6b12a9b	chore: cosmetic on snap profiles.	2023-08-27 14:42:13 +01:00
Alexandre Pujol	eb1c03949f	feat(abs): improve some abstraction.	2023-08-27 14:40:56 +01:00
Alexandre Pujol	ec3c5cd62e	feat(profiles): improve kde integration.	2023-08-27 14:32:08 +01:00
Alexandre Pujol	41e0ac6ba8	feat(profiles): rewrite dpkg profile.	2023-08-27 13:30:01 +01:00
curiosityseeker	7f4cef2fff	Kwin wayland, kwin wayland wrapper and sddm (#198) ... * Update kwin_wayland Please check the udev rules and change them if needed - I'm not familiar with them. * Update kwin_wayland_wrapper * Update sddm * Update kwin_wayland_wrapper Reverting change for @{run}/user/@{uid} * Update kwin_wayland: Correct udev rule * Update kwin_wayland: adding the wayland abs * Update sddm: reverting owner /tmo rules * Update sddm: reverting /usr/share/X11/xkb rule * Update sddm: adding the mesa abs * Update kwin_wayland: order udev rules	2023-08-27 11:19:13 +00:00
Alexandre Pujol	393f7001dc	fix(aa-log): profile template. ... See #182	2023-08-26 11:32:56 +01:00
Alexandre Pujol	d80b758968	feat(abs): modernize disk-read/write abs.	2023-08-24 19:34:21 +01:00
Alexandre Pujol	25782cb925	feat(abs): devices-usb - remove unneeded udev rule.	2023-08-24 19:32:45 +01:00
Alexandre Pujol	07cfbcd952	feat(profiles): modernize udev access.	2023-08-24 19:31:54 +01:00
Alexandre Pujol	73cb5a4545	feat(profiles): add kwin_wayland.	2023-08-23 18:14:22 +01:00
curiosityseeker	80b2124807	kded5, plasmashell, startplasma and sddm updates (#197) ... * Update kded5 * Update startplasma * Update plasmashell * Update sddm	2023-08-23 12:54:28 +00:00
Alexandre Pujol	96b8f96137	feat(profiles): general update.	2023-08-22 23:23:47 +01:00
Alexandre Pujol	7273bde534	feat(aa-log): update default tunables according to guideline.	2023-08-22 23:09:34 +01:00
Alexandre Pujol	5516eef952	fix(aa-log): profile template.	2023-08-22 22:59:12 +01:00
Alexandre Pujol	f4ba16861f	feat(aa-log): minor apparmor profile struct tweak.	2023-08-22 22:58:35 +01:00
Alexandre Pujol	261778dbb3	revertL dbus session unix address.	2023-08-22 18:54:39 +01:00
Alexandre Pujol	360230b2a5	feat(profiles): general update.	2023-08-21 23:32:10 +01:00
Alexandre Pujol	6756ca8138	fix(abs): gstreamer cache structure.	2023-08-21 23:27:35 +01:00
Alexandre Pujol	3c6898db5a	fix(tunables): pci devices path.	2023-08-21 23:27:00 +01:00
Alexandre Pujol	0ed036efd5	feat(firefox): minor firefox update.	2023-08-21 23:23:08 +01:00
Alexandre Pujol	5dbc42aaab	feat(abs): update some abstractions.	2023-08-21 23:21:14 +01:00
Alexandre Pujol	310f36f433	feat(tunables): some variables tweak definition.	2023-08-21 23:10:31 +01:00
Alexandre Pujol	1c1bb66e9e	build: update make lint.	2023-08-19 21:55:48 +01:00
Alexandre Pujol	5badb6f32c	feat(tunables): add a new @{rand10} variable.	2023-08-19 14:33:07 +01:00
Alexandre Pujol	10d852ca1d	doc: update variables ref & minor improvment.	2023-08-19 14:32:08 +01:00
Alexandre Pujol	5704d1ba20	feat(profiles): various profile fixes.	2023-08-19 14:01:50 +01:00
Alexandre Pujol	1dbced42ed	feat(tunables): add a new @{pci} variable.	2023-08-18 22:35:32 +01:00
Alexandre Pujol	275d6b6e62	feat(profiles): replace old [0-9]* glob by @{int} ... Beware some [0-9]* glob are actually not proper @{int}.	2023-08-18 17:09:53 +01:00
Alexandre Pujol	8ea4491a56	fix(abs): some block device use more than int as identifier.	2023-08-18 15:24:22 +01:00
Alexandre Pujol	a3f21425e5	fix: remove unused go import.	2023-08-17 23:36:46 +01:00
Alexandre Pujol	9650df00e3	feat(aa-log): add -r option to convert the log into rules.	2023-08-17 23:14:11 +01:00
Alexandre Pujol	d06a474b0c	feat(aa-log): parse log file to AA object to allow easy print.	2023-08-17 23:12:46 +01:00
Alexandre Pujol	574891d445	feat(aa-log): add AppArmorProfile.String using a template.	2023-08-17 23:11:11 +01:00
Alexandre Pujol	4f40cb6d78	feat(aa-log): add a new constructors for aa rules.	2023-08-17 23:05:07 +01:00
Alexandre Pujol	a8470dfa38	feat(aa-log): add a new apparmor profile struct ... Also rewrite variables resolution to this new struct.	2023-08-17 23:00:52 +01:00
Alexandre Pujol	b2d093e125	feat(abs): restric abstraction by using new @{int} and @{rand} variables.	2023-08-17 21:24:02 +01:00
Alexandre Pujol	557d905543	Merge branch 'tunables' of https://github.com/nobody43/apparmor.d into nobody43-tunables ... * 'tunables' of https://github.com/nobody43/apparmor.d: dbus temp tails Update apparmor.d Update gdm-runtime-config more unrelated changes adjust date-time random tails rename to int, convert more profiles fixes tunables	2023-08-17 20:01:53 +01:00
curiosityseeker	7b018a60bd	Update pacman (#193) ... * Update pacman `@{exec_path} mr,` is causing the following errors: ``` ALLOWED pacman exec owner /usr/bin/pacman -> pacman//null-/usr/bin/pacman comm=bash requested_mask=x denied_mask=x ALLOWED pacman//null-/usr/bin/pacman file_inherit owner /dev/pts/4 comm=pacman requested_mask=wr denied_mask=wr ALLOWED pacman//null-/usr/bin/pacman file_mmap owner /usr/bin/pacman comm=pacman requested_mask=r denied_mask=r ALLOWED pacman//null-/usr/bin/pacman file_mmap owner /usr/lib/ld-linux-x86-64.so.2 comm=pacman requested_mask=r denied_mask=r ALLOWED pacman//null-/usr/bin/pacman open owner /etc/ld.so.preload comm=pacman requested_mask=r denied_mask=r ALLOWED pacman//null-/usr/bin/pacman getattr owner /etc/ld.so.preload comm=pacman requested_mask=r denied_mask=r ALLOWED pacman//null-/usr/bin/pacman open owner /etc/ld.so.cache comm=pacman requested_mask=r denied_mask=r ALLOWED pacman//null-/usr/bin/pacman getattr owner /etc/ld.so.cache comm=pacman requested_mask=r denied_mask=r ALLOWED pacman//null-/usr/bin/pacman open owner /usr/lib/libalpm.so.13.0.2 comm=pacman requested_mask=r denied_mask=r ALLOWED pacman//null-/usr/bin/pacman getattr owner /usr/lib/libalpm.so.13.0.2 comm=pacman requested_mask=r denied_mask=r etc. ``` `@{exec_path} mrix,` fixes it. Commits for new profiles for `checkrebuild` and `pkgfile` will follow. * Fix pacman update * Update apparmor.d/groups/pacman/pacman Co-authored-by: Alex <roddhjav@users.noreply.github.com> --------- Co-authored-by: Alex <roddhjav@users.noreply.github.com>	2023-08-17 18:49:56 +00:00
curiosityseeker	c2c745888c	Update complete ... Move entries from child-open to this abstraction.	2023-08-17 19:43:29 +01:00
curiosityseeker	2299eb00f6	Partially revert change in child-open	2023-08-17 19:43:29 +01:00
curiosityseeker	f2511210af	Update complete ... Adding `kde-open`	2023-08-17 19:43:29 +01:00