Commit graph

3054 commits

Author SHA1 Message Date
Alexandre Pujol
762217c884
fix(profile): snap integration with dbus.
Some checks are pending
Ubuntu / check (push) Waiting to run
Ubuntu / build (default, ubuntu-22.04) (push) Blocked by required conditions
Ubuntu / build (default, ubuntu-24.04) (push) Blocked by required conditions
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Blocked by required conditions
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Blocked by required conditions
Ubuntu / tests (push) Blocked by required conditions
2024-12-11 23:29:44 +01:00
Alexandre Pujol
e1afc9d8df
feat(profile): minor update. 2024-12-11 23:24:14 +01:00
Alexandre Pujol
4c56976acf
feat: improve dbus integration for chsh, better handling of generic needrestart. 2024-12-11 23:17:27 +01:00
Alexandre Pujol
3a407cb345
fix: apparmor parser inside snap. 2024-12-11 22:54:28 +01:00
Alexandre Pujol
969e2dbbec
feat(profile): needrestart improve mqueue rule. 2024-11-29 15:41:54 +00:00
Alexandre Pujol
212b8dcf54
feat(profile): improve some core profiles.
Some checks failed
Ubuntu / check (push) Has been cancelled
Ubuntu / build (default, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (default, ubuntu-24.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Has been cancelled
Ubuntu / tests (push) Has been cancelled
2024-11-29 15:34:10 +00:00
odomingao
3cc7f82d30 Fix typo
Some checks failed
Ubuntu / check (push) Has been cancelled
Ubuntu / build (default, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (default, ubuntu-24.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Has been cancelled
Ubuntu / tests (push) Has been cancelled
2024-11-24 19:39:04 +00:00
valoq
e5ed979ce1
add profile for swayimg (#612)
Some checks are pending
Ubuntu / check (push) Waiting to run
Ubuntu / build (default, ubuntu-22.04) (push) Blocked by required conditions
Ubuntu / build (default, ubuntu-24.04) (push) Blocked by required conditions
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Blocked by required conditions
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Blocked by required conditions
Ubuntu / tests (push) Blocked by required conditions
* add profile for swayimg

* fix exec
2024-11-23 21:03:42 +00:00
Besanon
7acd9079a2
add more lxqt files (#600)
Some checks are pending
Ubuntu / check (push) Waiting to run
Ubuntu / build (default, ubuntu-22.04) (push) Blocked by required conditions
Ubuntu / build (default, ubuntu-24.04) (push) Blocked by required conditions
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Blocked by required conditions
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Blocked by required conditions
Ubuntu / tests (push) Blocked by required conditions
* Create abstraction for lxqt desktop group

first file for the LXQT 2.0 desktop group

* Update lxqt

* xdg-desktop abstraction added

* removing tabs

* Create startlxqt

starter file for LXQT Desktop

* Create startlxqt

* fixing startlxqt

I use sddm as display manager

I cant remove the other file - only use graphical env., sorry

After startlxqt i would add  2 lines to sddm to enable the start of LXQT desktop

* Delete apparmor.d/profiles-s-z/startlxqt

* indented by 2 spaces (like other entries)

* Update sddm

Enable sddm to start an lxqt desktop session

* Create lxqt-session

lxqt-session to be started by startlxqt. Display manager: sddm

* Update lxqt-session

* Update lxqt-session

* removed trailing whitespace

* Update kscreen_backend_launcher to support lxqt desktop

is needed for several complaints:
DENIED  kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open /usr/share/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open /usr/share/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r

* Update lxqt-session

* Create lxqt-panel

* Update lxqt-panel

* Update lxqt-panel

* Update lxqt-panel

* fix conflicting x

* Update lxqt-panel

add child-open

* remove  include <abstractions/app-launcher-user>

you think its too permissive to have app-launcher-user here, right?

* Update lxqt-panel

add needed programs

* Update lxqt-panel

turning back to layout of corresponding xfce file.

* Create lxqt-globalkeysd

* Create lxqt-about

* Create lxqt-leave

* Create lxqt-runner

* Update lxqt-leave

* Update lxqt-runner

* Update lxqt-globalkeysd

* remove video in lxqt-about

* Update lxqt-about

* Update lxqt-runner

* remove abstr. in lxqt-globalkeysd

* remove abstr. in lxqt-runner

* remove abstr. in lxqt-leave
2024-11-23 17:44:18 +00:00
doublez13
8efdc5d8e3
Add profile for iftop (#604)
Some checks failed
Ubuntu / check (push) Has been cancelled
Ubuntu / build (default, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (default, ubuntu-24.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Has been cancelled
Ubuntu / tests (push) Has been cancelled
* Add profile for iftop

* iftop: clean up formatting
2024-11-21 21:12:02 +00:00
Alexandre Pujol
044f80b1db
feat(tunable): unify some XDG and user dirs varibale name. 2024-11-21 20:59:06 +00:00
Alexandre Pujol
cb86f1c076
feat(profile): general update. 2024-11-21 20:37:39 +00:00
Alexandre Pujol
65f2d21558
feat(profile): add profile for tecla. 2024-11-21 20:37:39 +00:00
Alexandre Pujol
36d787fa44
feat(abs): add abstraction/webkit. 2024-11-21 20:37:39 +00:00
Alexandre Pujol
33a66ef6a2
fix(integration): disable needrestart test due to upstream issue.
Some checks failed
Ubuntu / check (push) Has been cancelled
Ubuntu / build (default, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (default, ubuntu-24.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Has been cancelled
Ubuntu / tests (push) Has been cancelled
2024-11-21 20:22:52 +00:00
Alexandre Pujol
23eb08344c
fix(tunable): udbus can be any hex up to 16. 2024-11-21 20:02:16 +00:00
Alexandre Pujol
3960f20f00
feat(profile): add needrestart-vmlinuz-get-version & tests for needrestart. 2024-11-21 19:39:55 +00:00
Alexandre Pujol
5237ab3989
test(integration): add sysctl. 2024-11-21 19:33:07 +00:00
Alexandre Pujol
8d4d17fa34
feat(profile): add fc-match & fc-pattern. 2024-11-21 19:26:57 +00:00
Alexandre Pujol
ffd6ecba5b
fix(tests): ensure fwupdmgr don't fail even if the target does not support firmware update. 2024-11-21 19:15:56 +00:00
Alexandre Pujol
2332f71b17
tests: add groupmod.
Some checks failed
Ubuntu / check (push) Has been cancelled
Ubuntu / build (default, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (default, ubuntu-24.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Has been cancelled
Ubuntu / tests (push) Has been cancelled
2024-11-20 00:14:22 +00:00
Alexandre Pujol
685105a662
tests: add fwupdmgr.bats 2024-11-20 00:12:31 +00:00
Alexandre Pujol
edad2e1984
tests: ensure systemd-homed is started before the homectl test. 2024-11-20 00:11:57 +00:00
Alexandre Pujol
5ef78b1e6c
tests: add dmesg.bats 2024-11-20 00:08:26 +00:00
Alexandre Pujol
4a5fa74e63
tests: enable the homectl tests. 2024-11-19 23:43:17 +00:00
Alexandre Pujol
815e9bfda2
feat(profile): general update.
Some checks failed
Ubuntu / check (push) Has been cancelled
Ubuntu / build (default, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (default, ubuntu-24.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Has been cancelled
Ubuntu / tests (push) Has been cancelled
2024-11-19 23:07:41 +00:00
Alexandre Pujol
df02f7a0fd
tests: remove hanged test 2024-11-19 22:58:42 +00:00
Alexandre Pujol
a61460b60c
feat(abs): add the wine abstraction. 2024-11-19 22:16:18 +00:00
Alexandre Pujol
688317fbe3
feat(abs): vulkan allow write access to builtin_shaders.
See #577
2024-11-19 21:57:54 +00:00
Alexandre Pujol
e149e77538
fix(profile): dhcpcd executes resolvconf
fix #608
2024-11-19 21:52:12 +00:00
Alexandre Pujol
3eba6bef6d
fix(tests): missing sudo in ip integration test. 2024-11-19 21:49:03 +00:00
Alexandre Pujol
4656a49335
fix(ci): remove forced color from github action. 2024-11-19 21:35:39 +00:00
Alexandre Pujol
8df192c1f9
* 'main' of github.com:roddhjav/apparmor.d:
tests: cleanup the basic structure of integration tests.
  Update sysctl
2024-11-19 21:28:14 +00:00
Alexandre Pujol
5c70c50c26
tests: cleanup the basic structure of integration tests. 2024-11-19 21:27:04 +00:00
Alexandre Pujol
131dad987a
Merge branch 'main' of github.com:roddhjav/apparmor.d
* 'main' of github.com:roddhjav/apparmor.d:
  Update sysctl
2024-11-19 21:13:40 +00:00
Alexandre Pujol
7b4e01217b
tests: cleanup the basic structure of integration tests. 2024-11-19 21:13:25 +00:00
Alexandre Pujol
206bc3473d
fix: missing @{udbus} in unix bind. 2024-11-19 20:44:34 +00:00
odomingao
be627e5e9d Update sysctl 2024-11-19 20:02:57 +00:00
Alexandre Pujol
3c0c68f28f
ci(github): split the final step in two. 2024-11-19 20:00:04 +00:00
Alexandre Pujol
5bf8d362fa
fix(profile): minor improvment to ensure tests passes. 2024-11-19 19:49:22 +00:00
Alexandre Pujol
a1f5640024
ci(github): restart some services to ensure they are confined. 2024-11-19 19:34:04 +00:00
Alexandre Pujol
4e5f4cb06a
feat: profiles and integration tests improvments.
Add the udbus variable to be used in `unix bind` rule for dbus.
2024-11-19 19:04:27 +00:00
Alexandre Pujol
b4bcb2f16e
fix(profile): minor fixes. 2024-11-13 13:31:06 +00:00
Alexandre Pujol
194d18191e
fix(profile): ensure useradd can fully populate the skelleton. 2024-11-13 12:37:02 +00:00
Alexandre Pujol
3013c1ea5a
ci(github): set local tunable for github actions. 2024-11-13 12:31:17 +00:00
Alexandre Pujol
24ea5f0a3a
feat(tunable): add p_dbus_* variables.
This allow for better integration for system when dbus is not confined.
2024-11-13 12:23:36 +00:00
Alexandre Pujol
7c148fca95
feat(profile): small profile improvments. 2024-11-13 11:25:04 +00:00
Alexandre Pujol
f814bb4caf
build(debian): disable make check by default on pkg build.
Enable it manually in github action.
2024-11-12 22:31:16 +00:00
Alexandre Pujol
4c5761ee71
fix(profile): linting issue.
Some checks are pending
Ubuntu / build (default, ubuntu-22.04) (push) Waiting to run
Ubuntu / build (default, ubuntu-24.04) (push) Waiting to run
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Waiting to run
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Waiting to run
Ubuntu / tests (push) Blocked by required conditions
2024-11-12 22:25:08 +00:00
Alexandre Pujol
9cb3ea244c
feat(profile): add homectl. 2024-11-12 22:18:41 +00:00