281 commits

Author	SHA1	Message	Date
Alexandre Pujol	d321536f71	fix: whonix build.	2024-04-08 19:30:45 +01:00
Alexandre Pujol	c04189d900	build(whonix): ignore kde & gnome profiles.	2024-04-05 23:45:58 +01:00
Alexandre Pujol	035ed51400	build(opensuse): clean files definition.	2024-03-30 18:24:49 +00:00
Alexandre Pujol	87459197d3	feat(profile): add child-modprobe-nvidia	2024-03-30 14:46:47 +00:00
Alexandre Pujol	197c1bd78a	feat(profile): general update.	2024-03-27 21:53:11 +00:00
Alexandre Pujol	77016661dc	build: update flags tracking list.	2024-03-23 22:43:10 +00:00
Alexandre Pujol	7cbf8a8f9b	fix: do not force early load of userdbd as it can cause issues.	2024-03-21 23:22:08 +00:00
Alexandre Pujol	74b10ec4d3	build: ensure pkgdest directory exist.	2024-03-20 00:05:30 +00:00
Alexandre Pujol	c074c09e3b	build(opensuse): treat config file as normal files. ... apparmor.d profile files are **not** expected to be edited by system admin. They have local directory for this.	2024-03-19 22:14:54 +00:00
Alexandre Pujol	1f3da81d5a	tests: fix pkg outpout directory.	2024-03-17 23:20:05 +00:00
Alexandre Pujol	158c6006b1	build(opensuse): improve opensuse build process.	2024-03-17 21:34:06 +00:00
Alexandre Pujol	1c1855cf6e	build(opensuse): add new systemd drop-in files in the spec file.	2024-03-16 22:01:22 +00:00
Alexandre Pujol	c3c61a9270	build(opensuse): add missing directory.	2024-03-13 18:48:12 +00:00
Alexandre Pujol	7415b85e1c	feat(profile): add some internal kde profile.	2024-03-13 16:10:02 +00:00
Alexandre Pujol	042e9ff543	feat(profile): rewrite the okular profile.	2024-03-11 22:37:59 +00:00
Alexandre Pujol	f5aacbd029	build(debian): use hide instead of displace to overwrite upstream profiles.	2024-03-10 14:43:43 +00:00
Alexandre Pujol	81b726d303	build: update flags definition.	2024-03-10 13:49:43 +00:00
Alexandre Pujol	09cdf6158d	build(debian): add lintian check.	2024-03-06 12:51:08 +00:00
Alexandre Pujol	1df176cf7b	feat: small update and minor fixes.	2024-03-05 18:29:44 +00:00
Alexandre Pujol	06abeac2ee	feat(profile): general update.	2024-02-29 21:45:42 +00:00
Alexandre Pujol	ae9f7e7442	build: add initial build support for ubuntu 24.04	2024-02-28 17:35:14 +00:00
Alexandre Pujol	c900bd873b	build: update & cleanup flags files.	2024-02-28 15:41:29 +00:00
Alexandre Pujol	2cd14aa6bb	chore: add missing and update copyright year.	2024-02-07 00:16:21 +01:00
Alexandre Pujol	952f74b7c4	build: unix-chkpwd has been upstreamed in opensure.	2024-02-01 18:42:24 +00:00
Alexandre Pujol	4234c54f52	feat(profile): add keyboxd.	2024-01-27 19:43:12 +00:00
Alexandre Pujol	72ade58c98	feat(profile): add dbus-broker.	2024-01-27 19:39:54 +00:00
Alexandre Pujol	9a65da3605	feat(profile): apply profile guideline on secure-time-sync.	2024-01-24 21:03:49 +00:00
Alexandre Pujol	8f825473c6	feat(profile): apply profile guideline on sing-box.	2024-01-24 20:58:23 +00:00
Alexandre Pujol	46cb726834	feat(profile): add dbus-broker-launch.	2024-01-21 13:27:19 +00:00
Alexandre Pujol	243e4efb09	build: cleanup flags definition.	2024-01-21 11:57:26 +00:00
Alexandre Pujol	d2fc3c3325	fix(profile): merge flatpak-bwrap & flatpak-app. ... See #264	2023-12-15 18:07:18 +00:00
Alexandre Pujol	b8fc5a96a5	fix(ci): my bad.	2023-12-10 15:48:32 +00:00
Alexandre Pujol	d2078fcb3a	feat(profile): general update.	2023-12-10 15:27:44 +00:00
Alexandre Pujol	41a7cb0f5c	fix: build deb in container.	2023-12-10 14:36:29 +00:00
Alexandre Pujol	5e93de2ec2	build: add support for whonix in docker script.	2023-12-10 13:23:11 +00:00
Alexandre Pujol	bc0e0c79bc	build: better whonix build.	2023-12-09 16:17:05 +00:00
Alexandre Pujol	386402ed70	feat(profile): add some new profiles.	2023-12-09 11:39:10 +00:00
Alexandre Pujol	a9c864fe60	feat(profile): initial support for whonix.	2023-12-09 11:25:38 +00:00
Alexandre Pujol	d81bce5559	feat(profile): general update.	2023-12-08 18:01:39 +00:00
Alexandre Pujol	0568ef0d45	feat(profile): add structure for some cups profile. ... They are empty, and forced into complain mode.	2023-12-06 20:06:49 +00:00
Alexandre Pujol	c0bab81e45	feat(profile): add some network deps profile.	2023-12-06 20:03:28 +00:00
Alexandre Pujol	5af4d3c921	fix(profiles): modernise plank & kstart ... - Still wip profile - Should enable additional DE to boot	2023-11-29 22:29:41 +00:00
Alexandre Pujol	fade97486d	feat(profile): add udev child & low-memory profiles.	2023-11-27 19:32:50 +00:00
Alexandre Pujol	cdfa76924b	feat(profile): add dleyna profiles.	2023-11-27 19:27:44 +00:00
Alexandre Pujol	4c689dbad9	feat(profile): add gdm init profiles.	2023-11-27 19:25:34 +00:00
Alexandre Pujol	b8c2380da4	feat(profile): add epiphany providers.	2023-11-27 19:23:35 +00:00
Alexandre Pujol	aa1553388b	feat(flatpak): add flatpak integration. ... - Add flatpak profile - Add flatpak-bwrap subprofile: it manage the sandbox creation & has some larger access. - Add flatpak-app, default profile for sandboxed app. See Full system policy #252	2023-11-26 23:19:09 +00:00
Alexandre Pujol	e41779f576	feat(full): add default bwrap profiles. ... On full system policy, use the new bwrap profile (and bwrap-app) to confine sandboxed application. It is not enabled by default as the sandbox profile is quite large. Also integrate with the gnome app that use bwrap as sandbox manager. Update other related profiles See Full system policy #252	2023-11-26 23:12:35 +00:00
Alexandre Pujol	d8ff8c8cd6	feat(kde): add some kde profiles.	2023-11-26 23:07:02 +00:00
Alexandre Pujol	a49d83993a	feat(profile): add snapd-apparmor	2023-11-22 20:58:05 +00:00
Alexandre Pujol	07acb8043b	feat(profiles): rename all systemd generator.	2023-11-22 20:51:10 +00:00
Alexandre Pujol	9ab0745e2d	feat(full): add default fallback profile. ... See #252	2023-11-22 20:12:20 +00:00
Alexandre Pujol	23be43ebd0	feat(full): improve how systemd handle services	2023-11-22 18:42:23 +00:00
Alexandre Pujol	e84750453c	fix: dpkg build.	2023-11-19 23:04:43 +00:00
Alexandre Pujol	908aba0385	feat(profiles): add some ubuntu specific profiles.	2023-11-19 21:42:31 +00:00
Alexandre Pujol	dd767f13c0	chore: update flags list.	2023-11-19 21:39:04 +00:00
Alexandre Pujol	59140f5411	feat(full): improve systemd profile. ... See https://apparmor.pujol.io/development/structure/#full-system-policy	2023-11-19 21:31:57 +00:00
Alexandre Pujol	d64ef39bd1	build: minor fixes.	2023-11-19 21:04:58 +00:00
Alexandre Pujol	1b48e419f4	build(suse): add systemd-userdbd drop in file.	2023-11-19 15:38:36 +00:00
Alexandre Pujol	9e04743156	build: do not use rsync to synchronise file anymore.	2023-11-19 14:47:55 +00:00
Alexandre Pujol	a66debd2fb	build(dpkg): ignore libvirt profiles.	2023-11-13 22:22:40 +00:00
Alexandre Pujol	5760c0129c	build: add ignore file for whonix.	2023-11-09 20:53:30 +00:00
Alexandre Pujol	3ab5046d5d	build: ignore non suse profiles on other dists.	2023-11-09 20:53:03 +00:00
Alexandre Pujol	18da36238e	build: add some flags definition.	2023-11-09 20:51:34 +00:00
Alexandre Pujol	84ecf85c0b	feat(profiles): add dell cctk.	2023-10-26 22:40:21 +01:00
Alexandre Pujol	cdf601ca5c	build: minor improvements.	2023-10-21 21:51:23 +01:00
Alexandre Pujol	4276ede03c	feat(profile): rewrite update-ca-certificates.	2023-10-20 23:43:36 +01:00
Alexandre Pujol	958cc671b2	build: ignore chronyd profile on apt dist.	2023-10-08 13:57:23 +01:00
Alexandre Pujol	92bfdfa64a	build: do not install the man profile as it is provided by apparmor itself.	2023-10-01 14:27:48 +01:00
Alexandre Pujol	b122d9424f	feat(profiles): enforce some stable profiles.	2023-10-01 13:20:59 +01:00
Alexandre Pujol	ab0ee1a317	feat(profiles): add initial version of passim passimd.	2023-10-01 13:10:17 +01:00
Alexandre Pujol	2aace6bccb	feat(profile): improve kde integration.	2023-09-29 19:33:09 +01:00
Alexandre Pujol	4047921300	fix(build): update backport repo.	2023-09-20 23:08:17 +01:00
Alexandre Pujol	1eda792122	chore: cosmetic.	2023-09-20 19:01:52 +01:00
Alexandre Pujol	b34356ca03	build(rpm): add apparmor-profiles as deps.	2023-09-19 20:37:07 +01:00
Alexandre Pujol	cd48bb5ba0	fix(rpm): remove unused config dir.	2023-09-19 20:22:33 +01:00
Alexandre Pujol	55d46631da	ci: add rpm pkg build.	2023-09-19 20:16:55 +01:00
Alexandre Pujol	0797debd1d	build: add rpm packaging files.	2023-09-19 19:04:12 +01:00
Alexandre Pujol	975f7e0d6d	refractort: dists/build -> dists/docker	2023-09-18 17:26:28 +01:00
Alexandre Pujol	9a8a919b6c	feat(kde): add baloorunner.	2023-09-11 21:33:19 +01:00
Alexandre Pujol	b9fb4b72d2	fix: minor profiles fixes.	2023-09-10 12:41:47 +01:00
curiosityseeker	aaed7a25da	Various updates (#209)	2023-09-10 10:59:26 +00:00
nobody43	03384ab0d0	flags	2023-09-10 11:58:13 +01:00
Alexandre Pujol	6b159fe918	feat: cleanup ignored profile list.	2023-09-07 17:58:47 +01:00
Alexandre Pujol	7c24dde028	feat(profile): rewrite profile for vscode (wip).	2023-09-05 19:15:01 +01:00
curiosityseeker	41525621aa	Various updates (#204)	2023-09-04 13:58:07 +00:00
Alexandre Pujol	aea0034fcc	chore: various cosmetic changes.	2023-09-01 19:26:52 +01:00
Alexandre Pujol	a30d3dd415	feat(profiles): add element-desktop.	2023-08-27 15:42:30 +01:00
Alexandre Pujol	28af1fd642	chore: cleanup flags file.	2023-08-27 15:35:01 +01:00
Alexandre Pujol	22e57b3620	feat(profiles): apply guideline on some profile. Update flags list.	2023-08-27 15:30:18 +01:00
Alexandre Pujol	7a5096e7d8	feat(profiles): add inital version of dolphin.	2023-08-27 15:24:54 +01:00
Alexandre Pujol	ad3e5a5dcf	feat(profiles): add protonmail-bridge.	2023-08-27 15:17:36 +01:00
Alexandre Pujol	8cfe2780d4	feat(profiles): rewrite the spotify profile.	2023-08-27 15:00:02 +01:00
Alexandre Pujol	b0eed1ae39	feat(profiles): add transmission-gtk	2023-08-27 14:59:02 +01:00
Alexandre Pujol	4d79af2203	feat(profiles): add gnome-extension-gsconnect	2023-08-27 14:57:50 +01:00
Alexandre Pujol	5704d1ba20	feat(profiles): various profile fixes.	2023-08-19 14:01:50 +01:00
Alexandre Pujol	557d905543	Merge branch 'tunables' of https://github.com/nobody43/apparmor.d into nobody43-tunables ... * 'tunables' of https://github.com/nobody43/apparmor.d: dbus temp tails Update apparmor.d Update gdm-runtime-config more unrelated changes adjust date-time random tails rename to int, convert more profiles fixes tunables	2023-08-17 20:01:53 +01:00
Alexandre Pujol	555b53192c	fix: ensure some required flags are set.	2023-08-17 18:45:41 +01:00
Alexandre Pujol	3f8d559dcc	feat(profiles): add some thunderbird related profiles.	2023-08-17 18:45:10 +01:00
Alexandre Pujol	09943156bc	feat(profiles): add multipath profiles ... See #134 Signed-off-by: @cboltz	2023-08-13 20:06:08 +01:00