mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-31 15:25:02 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
2139 commits 6 branches 0 tags 16 MiB
Commit graph

332 commits

Author SHA1 Message Date
Alexandre Pujol
6061d4981b
feat(profiles): chromium_install_dirs -> chromium_lib_dirs 2023-02-04 19:08:02 +00:00
Alexandre Pujol
f19379c55f
feat(abs): extend deny-sensitive with new user_password_store_dirs var. 2023-02-01 22:34:54 +00:00
Alexandre Pujol
5a722c42a2
feat(profiles): rewrite the vlc profile. 2023-01-26 20:02:33 +00:00
Alexandre Pujol
9343807632
feat(profiles): audit udev on the browsers. 2023-01-24 19:55:50 +00:00
Alexandre Pujol
64ad329dd9
feat(profiles): Cleanup udev rules. 2023-01-19 18:51:16 +00:00
Alexandre Pujol
c59a40ec4e
feat(profiles): general update. See #101 2023-01-15 17:15:26 +00:00
Alexandre Pujol
19d005bf59
feat(profiles): add the @{XDG_WORK_DIR} variable. 2022-12-09 19:13:06 +00:00
Alexandre Pujol
dd232695d3
feat(profiles): refractor all chromium based browsers. 
All chromium based browser now use the new chromium abstraction.
 2022-12-09 18:50:57 +00:00
Alexandre Pujol
bec892b179
fix: disk-write need access to /dev/mapper/ too. 2022-12-07 20:41:07 +00:00
Alexandre Pujol
f8b6dfae5c
fix: ensure sys/device/cpu/possible is in the base abs for all dist. 2022-11-29 20:24:38 +00:00
Alexandre Pujol
1e5d90afe8
feat(profiles): general update. 2022-11-29 12:02:38 +00:00
Alexandre Pujol
fd88162c55
feat(profiles): disks access - add NBD devices. 2022-11-11 21:41:04 +00:00
Alexandre Pujol
dd13de385e
feat(profiles): general update. 2022-11-05 17:25:27 +00:00
Alexandre Pujol
a90cdbe879
feat(profiles): general update. 2022-11-03 21:40:01 +00:00
Alexandre Pujol
eddf6bfc4f
feat(profiles): general update. 2022-10-08 13:13:44 +01:00
Alexandre Pujol
ac47e292ac
feat(profiles): general update. 2022-10-04 21:11:13 +01:00
Alexandre Pujol
d0a8030af8
fix(profile): add deny-sensitive-home abstraction. 2022-10-01 19:18:54 +01:00
Alexandre Pujol
8a55eb8330
fix(profile): fontconfig-cache-write needs /var/cache/fontconfig/ access. 2022-10-01 19:11:19 +01:00
Alexandre Pujol
768e50c6ab
fix: remove not modified lxc rules. 
Fix #79
 2022-09-28 11:54:29 +01:00
Alexandre Pujol
8ff5ed7a69
feat(profiles): general update. 2022-09-11 20:45:14 +01:00
nobodysu
fe59b4d3f8 Delete lightdm_chromium-browser 2022-09-06 22:02:21 +01:00
nobodysu
f02ec5d273 Delete lightdm 2022-09-06 22:02:21 +01:00
nobodysu
1649b427f8
Ubuntu 22.04, third batch (#65) 
* initial

* ready

* cleanup

* cleanup2

* Update dbus-gtk
 2022-09-06 17:00:18 +00:00
Alexandre Pujol
70aea89ad4
Revert "fix: the trash abstraction has been upstreamed." 
This reverts commit 688a62e9bc.

Fix #71
 2022-09-06 17:52:08 +01:00
Alexandre Pujol
769627fc25
feat(profiles): remove libvirt abstractions. 2022-09-03 16:06:31 +01:00
Alexandre Pujol
892d44cca2
feat(profiles): remove unused abstractions. 2022-09-03 16:05:37 +01:00
Alexandre Pujol
688a62e9bc
fix: the trash abstraction has been upstreamed. 2022-09-03 16:04:53 +01:00
Alexandre Pujol
3b56d3ff0f
feat(profiles): use the new hex variable. 2022-09-03 14:43:34 +01:00
Alexandre Pujol
e6c91fdfd7
feat(profiles): general update. 2022-08-19 21:10:10 +01:00
Jeroen Rijken
af0c622b35 Replace rm with mr. 2022-08-19 19:25:22 +01:00
nobodysu
db8e881c06
Merge branch 'master' into thunderbird2 2022-08-12 14:35:53 +00:00
nobodysu
00a1e70720 polishing 2022-08-12 17:23:13 +03:00
nobodysu
2c2f6e5557 rearrangement 2022-08-02 19:31:00 +03:00
nobodysu
af49797425 cleanup 2022-08-02 01:59:54 +03:00
nobodysu
c96b6d8ee7 dbus-gtk 2022-08-02 01:47:47 +03:00
Alexandre Pujol
2878fa6a2e
feat(profiles): general update. 2022-07-29 16:47:09 +01:00
nobodysu
b8445e3b45 dbus style 2022-07-20 00:48:58 +03:00
Alexandre Pujol
9692926752
feat(profiles): general update. 2022-07-18 23:57:25 +01:00
Jeroen Rijken
70aa5fdbb2 Small fixes 2022-07-18 19:45:04 +01:00
Alexandre Pujol
eb6c7548f5
feat(profiles): general update. 2022-07-15 21:55:59 +01:00
Jeroen Rijken
3810c1668e Basic ZFS support 2022-07-10 13:39:01 +01:00
Alexandre Pujol
e087349662
feat(profiles): define more xdg variables. 2022-06-26 17:32:12 +01:00
Alexandre Pujol
56afb90084
fix(profiles): fix some abstraction definitions. 2022-06-18 21:56:09 +01:00
Alexandre Pujol
454456a844
style(profiles): better header for the abstractions. 2022-06-14 19:17:41 +01:00
Alexandre Pujol
cc78beddda
feat(profiles): disks add support for zfs. 2022-06-14 19:03:46 +01:00
Alexandre Pujol
f71c0e41f8
feat(profiles): minor improvments. 2022-06-13 22:13:17 +01:00
Alexandre Pujol
779853dc7f
feat(profiles): new definition for MOUNTs, add MOUNTDIRS. 2022-06-12 22:51:37 +01:00
Alexandre Pujol
0896343bbc
feat(profiles): rethink the app launchers. 2022-06-12 22:17:38 +01:00
Alexandre Pujol
a5c9a58c3c
feat(profiles): complete the dbus-session abstactions and related rules. 2022-06-12 22:15:21 +01:00
Alexandre Pujol
8f53366cd8
feat(profiles): allow gnome-shell to send signal to all profiles. 2022-06-12 12:04:24 +01:00
Alexandre Pujol
80b337bdf4
revert(profiles): remove tor related profiles. 2022-06-12 12:02:16 +01:00
Alexandre Pujol
f53550525e
feat(profiles): add the X-strict abstraction. 2022-06-09 22:45:14 +01:00
Alexandre Pujol
5d45b8e7a7
feat(profiles): add the dconf-write abstraction. 2022-06-09 21:55:55 +01:00
Alexandre Pujol
879416b062
feat(profiles): better system nss rules in nameservice-strict. 2022-06-03 19:38:34 +01:00
nobodysu
936431411c ubuntu2204 2022-06-02 02:00:16 +03:00
nobodysu
e2b7f6594c
disks-read: Armbian / DietPi (#40) 2022-06-01 17:49:07 +00:00
nobodysu
d5f3d7f686 more egl paths 2022-06-01 20:04:20 +03:00
nobodysu
481b6d621b pids and header 2022-05-23 20:30:46 +03:00
nobodysu
b263321c73 Ubuntu compatibility 2022-05-23 01:44:25 +03:00
Alexandre Pujol
5c382d7eb3
feat(profiles): general update. 2022-05-15 22:56:42 +01:00
Alexandre Pujol
7377aed016
fix: remove absraction from upstream. 2022-05-06 21:29:06 +01:00
Alexandre Pujol
c91363a0b6
fix: abstraction gtk -> gtk complete. 2022-05-06 21:28:41 +01:00
Alexandre Pujol
f022ca3299
feat: move sys revision into the mesa abstraction. 2022-05-02 17:25:40 +01:00
Mikhail Morfikov
35a281d045
update apparmor profiles 
Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
 2022-04-26 22:30:01 +01:00
Alexandre Pujol
10cdde9fb7
feat: update profiles. 2022-04-07 20:53:35 +01:00
Alexandre Pujol
9d40327b00
refactor: simplify the trash abstraction. 2022-03-30 22:15:13 +01:00
Alexandre Pujol
a59387ac9e
Profile update. 2022-03-27 14:25:29 +01:00
Alexandre Pujol
ea366754d7
Profiles update. 2022-03-18 16:05:36 +00:00
Alexandre Pujol
d993caae98
Add user-write completion file. 2022-03-04 21:31:07 +00:00
Alexandre Pujol
7b09b8c99a
browser: add security key support & re-format the profiles. 2022-03-03 21:22:17 +00:00
Alexandre Pujol
d701e39939
update apparmor profiles 
Co-authored-by: Mikhail Morfikov <mmorfikov@gmail.com>
Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
 2022-02-27 01:22:35 +00:00
Alexandre Pujol
0ee2e4f7ad
New @{uuid} variable. 2022-02-22 13:14:46 +00:00
Alexandre Pujol
6294159d7a
Update profile from #25. 2022-02-08 19:49:31 +00:00
Alex
d7ad51d41e
Merge pull request #16 from nobodysu/patch-8 
nameservice-strict: Ubuntu compatibility
 2022-01-15 19:36:27 +01:00
Alexandre Pujol
2e7b6f8ba8
Update profiles. 2022-01-09 20:23:18 +01:00
nobodysu
777f46779f
Typo? 2021-12-21 10:39:12 +00:00
nobodysu
b9b844c182
Ubuntu compatibility 2021-12-21 10:20:45 +00:00
Mikhail Morfikov
3430e3df90
update apparmor profiles 
Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
 2021-12-12 13:18:41 +00:00
Alexandre Pujol
44aca3ba51
Profiles update. 2021-12-12 12:41:50 +00:00
Alexandre Pujol
1644b70d6d
Rethink the configure process. 2021-12-05 00:13:11 +00:00
Alexandre Pujol
0fc9c8b5b0
Add Github Action & add support for the last Ubuntu LTS. 2021-12-05 00:13:00 +00:00
Alexandre Pujol
b52cbe564c
Disks: support large number of disks. 
Fix: #4
See: https://github.com/torvalds/linux/blob/master/Documentation/admin-guide/devices.txt
 2021-12-01 13:38:14 +00:00
nobodysu
0f50672486 QEMU guest virtual disks compatibility 2021-12-01 02:18:38 +03:00
Alexandre Pujol
aac0a93080
Profiles update. 2021-10-22 15:01:43 +01:00
Alexandre Pujol
2fc138a4d7
/run -> @{run}, [0-9]* -> @{uid}. 2021-10-07 14:52:41 +01:00
Alexandre Pujol
c6ab1770d0
Libvirtd: update abstractions. 2021-09-28 21:57:52 +01:00
Mikhail Morfikov
2a6b2bd189
update apparmor profiles 2021-09-15 16:16:01 +01:00
Alexandre Pujol
ca4be147f8
Fix video abstraction. 2021-08-22 15:43:53 +01:00
Mikhail Morfikov
9eecac80a2
update apparmor profiles 2021-08-20 18:52:56 +01:00
Alexandre Pujol
2372188d8e
Update profiles. 2021-07-11 17:20:09 +01:00
Alexandre Pujol
58978c12b7
Profile update. 2021-05-26 20:44:42 +01:00
Mikhail Morfikov
e085014238
update apparmor profiles 2021-05-26 20:23:28 +01:00
Alexandre Pujol
0c494ed2ba
General profiles update. 2021-04-29 21:02:28 +01:00
Alexandre Pujol
49bddc0382
Profile update. 2021-04-23 12:40:19 +01:00
Alexandre Pujol
1f11e6398b
Add @{MOUNTS} for all common mountpoints. 2021-04-19 15:20:32 +01:00
Alexandre Pujol
4a35b7d804
Use @{uid} instead of [0-9]* when it denotes the user id. 2021-04-18 19:00:15 +01:00
Mikhail Morfikov
5faf590bf5
update apparmor profiles 2021-04-18 17:48:20 +01:00
Alexandre Pujol
3734e5aedf
Add include if exists abstractions *.d 2021-04-12 19:59:04 +01:00
Alexandre Pujol
2175a86979
Profiles update. 2021-04-12 13:33:24 +01:00
Mikhail Morfikov
0573b2d996
update apparmor profiles 
Adpated to the apparmor.d structure.

Signed-off-by: Mikhail Morfikov <mmorfikov@gmail.com>
 2021-04-10 15:12:56 +01:00
Alexandre Pujol
89f35e502f
Add gtk 4 support. 2021-04-10 14:18:42 +01:00
Alexandre Pujol
17806e9ee7
Profiles update and general fixes. 2021-04-09 14:47:06 +01:00
Alexandre Pujol
91c7069ee1
Abstractions: more definitions. 2021-04-08 22:24:00 +01:00
Mikhail Morfikov
046443a702
Update apparmor profiles 
Adpated to the apparmor.d structure.

Signed-off-by: Mikhail Morfikov <mmorfikov@gmail.com>
 2021-04-04 14:43:10 +01:00
Alexandre Pujol
19521569ce
Complete ss_cert abstraction. 2021-04-04 01:13:25 +01:00
Alexandre Pujol
d38c781bbd
Apparmor Parser issue fix. 2021-04-04 00:46:12 +01:00
Alexandre Pujol
604b184c9d
Profile update after tests on Arch. 2021-04-02 10:18:29 +01:00
Alexandre Pujol
6044e403e7
Replace last remaining home files by the xdg variables. 2021-04-01 23:45:21 +01:00
Alexandre Pujol
4db3745a35
Add user-read abstract. 2021-04-01 23:37:27 +01:00
Alexandre Pujol
08c220deee
Add 'if exists' to some include. 2021-04-01 23:26:06 +01:00
Alexandre Pujol
79904cb616
Archlinux has no sbin. 
sbin -> {s,}bin for Archlinux support.
Purposelly not replaced on Debian only programs
 2021-04-01 23:15:47 +01:00
Alexandre Pujol
1d1492c750
Trash: needs more control over expunged directory. 2021-04-01 21:59:14 +01:00
Alexandre Pujol
0ad600f90f
Add /mnt as possible mount point. 2021-04-01 21:56:33 +01:00
Alexandre Pujol
84f24133e9
More XDG replacement. 2021-04-01 21:44:23 +01:00
Alexandre Pujol
54ac285b7d
@{HOME}/.local/share -> @{user_share_dirs} 2021-04-01 17:23:34 +01:00
Alexandre Pujol
7f6ea8d44d
@{HOME}/.config -> @{user_config_dirs} 2021-04-01 17:21:33 +01:00
Alexandre Pujol
1c9fc00c13
@{HOME}/.cache -> @{user_cache_dirs} 2021-04-01 17:20:05 +01:00
Alexandre Pujol
091d20d086
Reorganise the directories. 2021-04-01 17:02:49 +01:00
Alexandre Pujol
e9b8e62fcd
apparmor.d -> profiles 2021-04-01 16:02:59 +01:00
Alexandre Pujol
2129e23596
Remove and merge sources that are already present deps. 2021-04-01 15:33:57 +01:00
Mikhail Morfikov
c5ca6e1d90
update apparmor profiles 2021-03-21 17:04:10 +01:00
Mikhail Morfikov
e1f16545e0
update apparmor profiles 2021-03-13 16:52:36 +01:00
Mikhail Morfikov
5b12c89dba
update apparmor profiles 2021-03-13 09:47:36 +01:00
Mikhail Morfikov
0f64093e46
update apparmor profiles 2021-02-13 15:00:16 +01:00
Mikhail Morfikov
8e075d25fa
update apparmor profiles 2021-01-10 16:35:07 +01:00
Mikhail Morfikov
756e2071e1
update apparmor profiles 2020-12-24 13:55:12 +01:00
Mikhail Morfikov
156f5d4e3b
update apparmor profiles 2020-12-18 11:12:55 +01:00
Mikhail Morfikov
7067edcf70
update profiles for apparmor3 2020-12-10 22:33:39 +01:00
Mikhail Morfikov
503cf496bf
update apparmor profiles 2020-12-09 10:30:52 +01:00
Mikhail Morfikov
f73da4a046
update apparmor profiles 2020-10-25 10:23:34 +01:00
Mikhail Morfikov
2cd06e74d6
update apparmor profiles 2020-10-13 16:47:49 +02:00
Mikhail Morfikov
244b2c88a2
move apparmor profiles to a seperate repo 2020-09-12 17:19:23 +02:00