Alexandre Pujol
b8fc5a96a5
fix(ci): my bad.
2023-12-10 15:48:32 +00:00
Alexandre Pujol
d2078fcb3a
feat(profile): general update.
2023-12-10 15:27:44 +00:00
Alexandre Pujol
41a7cb0f5c
fix: build deb in container.
2023-12-10 14:36:29 +00:00
Alexandre Pujol
5e93de2ec2
build: add support for whonix in docker script.
2023-12-10 13:23:11 +00:00
Alexandre Pujol
bc0e0c79bc
build: better whonix build.
2023-12-09 16:17:05 +00:00
Alexandre Pujol
386402ed70
feat(profile): add some new profiles.
2023-12-09 11:39:10 +00:00
Alexandre Pujol
a9c864fe60
feat(profile): initial support for whonix.
2023-12-09 11:25:38 +00:00
Alexandre Pujol
d81bce5559
feat(profile): general update.
2023-12-08 18:01:39 +00:00
Alexandre Pujol
0568ef0d45
feat(profile): add structure for some cups profile.
...
They are empty, and forced into complain mode.
2023-12-06 20:06:49 +00:00
Alexandre Pujol
c0bab81e45
feat(profile): add some network deps profile.
2023-12-06 20:03:28 +00:00
Alexandre Pujol
5af4d3c921
fix(profiles): modernise plank & kstart
...
- Still wip profile
- Should enable additional DE to boot
2023-11-29 22:29:41 +00:00
Alexandre Pujol
fade97486d
feat(profile): add udev child & low-memory profiles.
2023-11-27 19:32:50 +00:00
Alexandre Pujol
cdfa76924b
feat(profile): add dleyna profiles.
2023-11-27 19:27:44 +00:00
Alexandre Pujol
4c689dbad9
feat(profile): add gdm init profiles.
2023-11-27 19:25:34 +00:00
Alexandre Pujol
b8c2380da4
feat(profile): add epiphany providers.
2023-11-27 19:23:35 +00:00
Alexandre Pujol
aa1553388b
feat(flatpak): add flatpak integration.
...
- Add flatpak profile
- Add flatpak-bwrap subprofile: it manage the sandbox creation & has some larger access.
- Add flatpak-app, default profile for sandboxed app.
See Full system policy #252
2023-11-26 23:19:09 +00:00
Alexandre Pujol
e41779f576
feat(full): add default bwrap profiles.
...
On full system policy, use the new bwrap profile (and bwrap-app) to confine sandboxed application.
It is not enabled by default as the sandbox profile is quite large.
Also integrate with the gnome app that use bwrap as sandbox manager.
Update other related profiles
See Full system policy #252
2023-11-26 23:12:35 +00:00
Alexandre Pujol
d8ff8c8cd6
feat(kde): add some kde profiles.
2023-11-26 23:07:02 +00:00
Alexandre Pujol
a49d83993a
feat(profile): add snapd-apparmor
2023-11-22 20:58:05 +00:00
Alexandre Pujol
07acb8043b
feat(profiles): rename all systemd generator.
2023-11-22 20:51:10 +00:00
Alexandre Pujol
9ab0745e2d
feat(full): add default fallback profile.
...
See #252
2023-11-22 20:12:20 +00:00
Alexandre Pujol
23be43ebd0
feat(full): improve how systemd handle services
2023-11-22 18:42:23 +00:00
Alexandre Pujol
e84750453c
fix: dpkg build.
2023-11-19 23:04:43 +00:00
Alexandre Pujol
908aba0385
feat(profiles): add some ubuntu specific profiles.
2023-11-19 21:42:31 +00:00
Alexandre Pujol
dd767f13c0
chore: update flags list.
2023-11-19 21:39:04 +00:00
Alexandre Pujol
59140f5411
feat(full): improve systemd profile.
...
See https://apparmor.pujol.io/development/structure/#full-system-policy
2023-11-19 21:31:57 +00:00
Alexandre Pujol
d64ef39bd1
build: minor fixes.
2023-11-19 21:04:58 +00:00
Alexandre Pujol
1b48e419f4
build(suse): add systemd-userdbd drop in file.
2023-11-19 15:38:36 +00:00
Alexandre Pujol
9e04743156
build: do not use rsync to synchronise file anymore.
2023-11-19 14:47:55 +00:00
Alexandre Pujol
a66debd2fb
build(dpkg): ignore libvirt profiles.
2023-11-13 22:22:40 +00:00
Alexandre Pujol
5760c0129c
build: add ignore file for whonix.
2023-11-09 20:53:30 +00:00
Alexandre Pujol
3ab5046d5d
build: ignore non suse profiles on other dists.
2023-11-09 20:53:03 +00:00
Alexandre Pujol
18da36238e
build: add some flags definition.
2023-11-09 20:51:34 +00:00
Alexandre Pujol
84ecf85c0b
feat(profiles): add dell cctk.
2023-10-26 22:40:21 +01:00
Alexandre Pujol
cdf601ca5c
build: minor improvements.
2023-10-21 21:51:23 +01:00
Alexandre Pujol
4276ede03c
feat(profile): rewrite update-ca-certificates.
2023-10-20 23:43:36 +01:00
Alexandre Pujol
958cc671b2
build: ignore chronyd profile on apt dist.
2023-10-08 13:57:23 +01:00
Alexandre Pujol
92bfdfa64a
build: do not install the man profile as it is provided by apparmor itself.
2023-10-01 14:27:48 +01:00
Alexandre Pujol
b122d9424f
feat(profiles): enforce some stable profiles.
2023-10-01 13:20:59 +01:00
Alexandre Pujol
ab0ee1a317
feat(profiles): add initial version of passim passimd.
2023-10-01 13:10:17 +01:00
Alexandre Pujol
2aace6bccb
feat(profile): improve kde integration.
2023-09-29 19:33:09 +01:00
Alexandre Pujol
4047921300
fix(build): update backport repo.
2023-09-20 23:08:17 +01:00
Alexandre Pujol
1eda792122
chore: cosmetic.
2023-09-20 19:01:52 +01:00
Alexandre Pujol
b34356ca03
build(rpm): add apparmor-profiles as deps.
2023-09-19 20:37:07 +01:00
Alexandre Pujol
cd48bb5ba0
fix(rpm): remove unused config dir.
2023-09-19 20:22:33 +01:00
Alexandre Pujol
55d46631da
ci: add rpm pkg build.
2023-09-19 20:16:55 +01:00
Alexandre Pujol
0797debd1d
build: add rpm packaging files.
2023-09-19 19:04:12 +01:00
Alexandre Pujol
975f7e0d6d
refractort: dists/build -> dists/docker
2023-09-18 17:26:28 +01:00
Alexandre Pujol
9a8a919b6c
feat(kde): add baloorunner.
2023-09-11 21:33:19 +01:00
Alexandre Pujol
b9fb4b72d2
fix: minor profiles fixes.
2023-09-10 12:41:47 +01:00
curiosityseeker
aaed7a25da
Various updates ( #209 )
2023-09-10 10:59:26 +00:00
nobody43
03384ab0d0
flags
2023-09-10 11:58:13 +01:00
Alexandre Pujol
6b159fe918
feat: cleanup ignored profile list.
2023-09-07 17:58:47 +01:00
Alexandre Pujol
7c24dde028
feat(profile): rewrite profile for vscode (wip).
2023-09-05 19:15:01 +01:00
curiosityseeker
41525621aa
Various updates ( #204 )
2023-09-04 13:58:07 +00:00
Alexandre Pujol
aea0034fcc
chore: various cosmetic changes.
2023-09-01 19:26:52 +01:00
Alexandre Pujol
a30d3dd415
feat(profiles): add element-desktop.
2023-08-27 15:42:30 +01:00
Alexandre Pujol
28af1fd642
chore: cleanup flags file.
2023-08-27 15:35:01 +01:00
Alexandre Pujol
22e57b3620
feat(profiles): apply guideline on some profile. Update flags list.
2023-08-27 15:30:18 +01:00
Alexandre Pujol
7a5096e7d8
feat(profiles): add inital version of dolphin.
2023-08-27 15:24:54 +01:00
Alexandre Pujol
ad3e5a5dcf
feat(profiles): add protonmail-bridge.
2023-08-27 15:17:36 +01:00
Alexandre Pujol
8cfe2780d4
feat(profiles): rewrite the spotify profile.
2023-08-27 15:00:02 +01:00
Alexandre Pujol
b0eed1ae39
feat(profiles): add transmission-gtk
2023-08-27 14:59:02 +01:00
Alexandre Pujol
4d79af2203
feat(profiles): add gnome-extension-gsconnect
2023-08-27 14:57:50 +01:00
Alexandre Pujol
5704d1ba20
feat(profiles): various profile fixes.
2023-08-19 14:01:50 +01:00
Alexandre Pujol
557d905543
Merge branch 'tunables' of https://github.com/nobody43/apparmor.d into nobody43-tunables
...
* 'tunables' of https://github.com/nobody43/apparmor.d :
dbus temp tails
Update apparmor.d
Update gdm-runtime-config
more unrelated changes
adjust date-time
random tails
rename to int, convert more profiles
fixes
tunables
2023-08-17 20:01:53 +01:00
Alexandre Pujol
555b53192c
fix: ensure some required flags are set.
2023-08-17 18:45:41 +01:00
Alexandre Pujol
3f8d559dcc
feat(profiles): add some thunderbird related profiles.
2023-08-17 18:45:10 +01:00
Alexandre Pujol
09943156bc
feat(profiles): add multipath profiles
...
See #134
Signed-off-by: @cboltz
2023-08-13 20:06:08 +01:00
ShellCode
0f9b7cb474
Fix #184 ( #185 )
...
* Replace @{HOME}/.config with @{user_config_dirs}
* Replace @{HOME}/.cache with @{user_cache_dirs}
* Replace @{HOME}/.local/state with @{user_state_dirs}
* Add missing user_share_dirs to apparmor.d/tunables/home.d/apparmor.d
* Update docs/variables.md
* Replace @{HOME}/.local/share with @{user_share_dirs}
* Replace @{HOME}/.local/lib with @{user_lib_dirs}
* Revert "Add missing user_share_dirs to apparmor.d/tunables/home.d/apparmor.d"
This reverts commit 9525003098
2023-07-27 11:20:19 +00:00
Alexandre Pujol
015db89b4d
fix: do not install code-wrapper profile yet.
2023-07-23 16:22:42 +01:00
Alexandre Pujol
e5ed57c041
fix: ensure flags for plasmashell.
2023-07-20 21:17:47 +01:00
Alexandre Pujol
1424fb5493
feat(profiles): add iio-sensor-proxy
2023-07-20 21:09:18 +01:00
Alexandre Pujol
33a9b062ff
refactor(profiles): do not enable vs code yet.
2023-07-20 20:56:48 +01:00
Alexandre Pujol
db35aa9249
feat(profiles): add firefox glxtest & vaapitest profiles.
2023-07-12 21:59:13 +01:00
Alexandre Pujol
59469b57b4
feat(profiles): general update.
2023-07-09 12:30:09 +01:00
Alexandre Pujol
7deac2c904
feat(profiles): add mutter-x11-frames.
2023-07-08 12:39:24 +01:00
Alexandre Pujol
6715564053
feat(profiles): general update.
2023-07-08 12:37:40 +01:00
Alexandre Pujol
a1946aa171
feat: support for debian 12, drop support for debian 11.
2023-06-18 11:44:56 +01:00
Alexandre Pujol
d4d1b949cd
fix: ensure mount has the disconnected flag.
...
See #170
2023-06-14 22:31:00 +01:00
Alexandre Pujol
35ca2692c9
feat(kde): add more kde profiles.
2023-04-30 21:50:08 +01:00
Alexandre Pujol
ee10658d09
feat(kde): big kde profiles update.
2023-04-30 21:46:10 +01:00
Alexandre Pujol
c9ef8f55c4
feat(profiles): add firefox-kmozillahelper.
2023-04-30 21:38:59 +01:00
Alexandre Pujol
30e623d73c
fix(profiles): ensure some flags on some profiles.
2023-04-30 15:00:55 +01:00
Alexandre Pujol
1083520225
feat(kde): add initial version for more kde profles.
2023-04-27 22:27:16 +01:00
Alexandre Pujol
e569f907e2
build: etc.d -> multiarch.d as debian does not have etc.d yet.
2023-04-25 21:47:01 +01:00
Alexandre Pujol
7ddba7230d
feat(profiles): update kde integration.
...
See #134
2023-04-24 18:56:28 +01:00
Alexandre Pujol
9727d1ce1f
fix(build): ubuntu & debian share some build spec.
2023-04-24 00:17:00 +01:00
Alexandre Pujol
c2e4dfa07e
fix(build): add missing trash abs on Ubuntu.
2023-04-23 17:27:49 +01:00
Alexandre Pujol
2e466bab20
build: remove dists file for arch based distribution.
2023-04-19 19:02:05 +01:00
Alexandre Pujol
912f3be8ab
build: remove ubuntu core integration.
2023-04-19 19:00:15 +01:00
Alexandre Pujol
ffa0f7bc3d
build: drop lsb-release build deps.
2023-04-19 18:57:31 +01:00
Alexandre Pujol
7c0863867e
fix(build): ensure a minimum go version in the build process.
2023-04-17 11:26:09 +01:00
Alexandre Pujol
d717a24adc
build: better way to handle package build for development purpose.
2023-04-16 21:25:52 +01:00
Alexandre Pujol
15029a198a
feat(kde): add akonadi_* profiles.
2023-04-16 20:44:29 +01:00
Alexandre Pujol
77955aac3d
feat(kde): add kded5.
2023-04-16 19:27:27 +01:00
Alexandre Pujol
12456486f1
feat(kde): general update.
2023-04-16 19:10:14 +01:00
Alexandre Pujol
5ea6ede589
feat(profile): general update.
2023-04-15 11:52:00 +01:00
Alexandre Pujol
4f22a6ebaa
feat(kde): add kauth helper.
2023-04-05 23:51:27 +01:00
nobody43
fb92aa5716
fixes
2023-04-03 18:20:15 +01:00
