Commit graph

456 commits

Author SHA1 Message Date
Alexandre Pujol
020b118b46
Add gnome-terminal-server. 2022-03-06 13:58:58 +00:00
Alexandre Pujol
3fd489a442
Add gnome-photos-thumbnailer. 2022-03-06 13:57:08 +00:00
Alexandre Pujol
f9fde0b482
Profiles update. 2022-03-06 13:56:12 +00:00
Alexandre Pujol
a4e8eab6a2
Improve xorg support in Gnome. 2022-03-06 13:54:43 +00:00
Alexandre Pujol
d993caae98
Add user-write completion file. 2022-03-04 21:31:07 +00:00
Alexandre Pujol
1e729e6b46
Profiles update. 2022-03-04 21:30:34 +00:00
Alexandre Pujol
7b09b8c99a
browser: add security key support & re-format the profiles. 2022-03-03 21:22:17 +00:00
Alexandre Pujol
60cb62334b
Profile update. 2022-03-02 18:22:57 +00:00
Alexandre Pujol
683da55bb9
/proc/sys/kernel/random/boot_id is part of nameservice-strict. 2022-03-02 18:19:25 +00:00
Alexandre Pujol
28ee94c4a5
s3fs: rework the profile. 2022-03-02 18:15:33 +00:00
Alexandre Pujol
57dfcc758d
Fix pipewrire & chromium. 2022-02-27 19:11:31 +00:00
Alexandre Pujol
84e2a56eb9
Profiles update. 2022-02-27 12:18:10 +00:00
Alexandre Pujol
64e5f3ec2a
git: restric access to projects dir and format the profile. 2022-02-27 12:10:43 +00:00
Mikhail Morfikov
8713fb514f
remove useless apparmor profiles 2022-02-27 01:25:10 +00:00
Alexandre Pujol
d701e39939
update apparmor profiles
Co-authored-by: Mikhail Morfikov <mmorfikov@gmail.com>
Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
2022-02-27 01:22:35 +00:00
Alexandre Pujol
477d3f28a0
Add downloadhelper profile. 2022-02-22 20:55:27 +00:00
Alexandre Pujol
8b803a6285
Flatpack: add initial integration in other profiles. 2022-02-22 20:53:52 +00:00
Alexandre Pujol
8c2d39c232
Flatpack: add flatpak-session-helper. 2022-02-22 20:52:46 +00:00
Alexandre Pujol
2064783251
Update profiles. 2022-02-22 20:51:28 +00:00
Alexandre Pujol
0ee2e4f7ad
New @{uuid} variable. 2022-02-22 13:14:46 +00:00
Alexandre Pujol
773741c85e
Merge branch 'su_sudo2' of https://github.com/nobodysu/apparmor.d into su_sudo2
su & sudo: Ubuntu compatibility, Debian polishing
2022-02-22 12:52:18 +00:00
nobodysu
53ee5d0c83 update 2022-02-21 21:46:55 +03:00
nobodysu
a3a6a0fa1a update 2022-02-20 02:33:32 +03:00
nobodysu
ceb60bde82 update 2022-02-20 02:29:31 +03:00
nobodysu
b5cdd0af44 update 2022-02-20 02:21:48 +03:00
Alexandre Pujol
501bb66c64
Add locale-gen profile. 2022-02-16 19:21:11 +00:00
Alexandre Pujol
ac39df1af2
Update profiles. 2022-02-16 19:18:14 +00:00
nobodysu
d22aff27ac
Ubuntu compatibility, Debian polishing (#27) 2022-02-16 17:00:38 +00:00
Alexandre Pujol
1143ea4d6d
aa-log: allow reading more log files. 2022-02-16 13:30:31 +00:00
nobodysu
9df0bd07aa su & sudo: Ubuntu compatibility, Debian polishing 2022-02-13 04:32:51 +03:00
Alexandre Pujol
6876938719
aa-log: add -f option to set a log file. 2022-02-10 21:30:51 +00:00
Alexandre Pujol
ba0ccc3edc
Move glib based profiles. 2022-02-09 20:11:28 +00:00
Alexandre Pujol
810985a0cd
Update profile from #25 (2). 2022-02-09 19:35:18 +00:00
Alexandre Pujol
6294159d7a
Update profile from #25. 2022-02-08 19:49:31 +00:00
Alexandre Pujol
9ecc1aa240
Update profiles. 2022-02-08 18:16:45 +00:00
Alexandre Pujol
7274f98fa6
Add s3fs profile. 2022-02-05 20:57:49 +00:00
Alexandre Pujol
10fd4ed8dd
Add aa-enabled profile. 2022-02-05 20:56:38 +00:00
Alexandre Pujol
dc19fc72a8
Update profiles. 2022-02-05 20:02:10 +00:00
Alexandre Pujol
54472e187b
Profiles update. 2022-01-28 13:00:18 +00:00
Alexandre Pujol
fede23bc28
Add evince. 2022-01-23 13:40:11 +00:00
Alex
f892402037
Merge pull request #20 from nobodysu/patch-9
Update pulseaudio
2022-01-23 13:47:05 +01:00
nobodysu
7e04347af9
Update pulseaudio 2022-01-22 21:46:26 +00:00
Alex
1f49f17821
Merge pull request #21 from nobodysu/typos
Typos: `@{run}`
2022-01-22 12:32:17 +01:00
Alex
45bc5b6645
Merge pull request #18 from nobodysu/patch-7
Update acpid
2022-01-22 12:28:06 +01:00
Alex
16096bbd85
Merge pull request #9 from nobodysu/bind-utils
bind-utils: add host and nslookup.
2022-01-22 12:12:24 +01:00
nobodysu
a79fc3f17b
Update pulseaudio 2022-01-19 23:34:35 +00:00
nobodysu
b95ea13bbd typos 2022-01-18 02:45:11 +03:00
nobodysu
ec9a4d3a6c
Update acpid 2022-01-16 23:31:45 +00:00
nobodysu
70d50632bb
Update acpid 2022-01-16 22:28:45 +00:00
nobodysu
39bd0932d2
Update dig 2022-01-16 21:59:28 +00:00
Mikhail Morfikov
76cd5c7029
update apparmor profiles
Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
2022-01-16 20:15:25 +00:00
Alex
697b296298
Merge pull request #13 from nobodysu/grc_ls_ss
ss
2022-01-16 20:41:57 +01:00
nobodysu
0d9fbff993
Update pulseaudio 2022-01-16 00:20:11 +00:00
nobodysu
56f72ee8f9
Update ss 2022-01-16 00:07:33 +00:00
nobodysu
52aa210f70
Delete grc 2022-01-15 23:54:08 +00:00
nobodysu
0cb633ecec
Update acpid 2022-01-15 23:45:52 +00:00
nobodysu
43c509f28b
Update host 2022-01-15 23:22:43 +00:00
nobodysu
ccabf0ad5e
Update nslookup 2022-01-15 23:14:32 +00:00
Alex
d7ad51d41e
Merge pull request #16 from nobodysu/patch-8
nameservice-strict: Ubuntu compatibility
2022-01-15 19:36:27 +01:00
Alex
3f09ba5ed4
Merge pull request #15 from nobodysu/patch-6
Update dfc
2022-01-15 19:34:17 +01:00
Alex
c1acae8ec2
Merge pull request #14 from nobodysu/patch-5
Update nmap
2022-01-15 19:29:31 +01:00
Alexandre Pujol
8627618d8c
mount: support for squashfs. 2022-01-15 17:36:41 +00:00
Alexandre Pujol
1970e14b46
Pulseaudio: fix dconf access.
Fix #19.
2022-01-15 17:31:48 +00:00
nobodysu
d6148c7b23
Update grc
- `mount` is too much, for now
- expanding `ro` paths
2022-01-10 21:49:01 +00:00
nobodysu
80bd1028c5
Update acpid
Another case. Tested on Debian 11 and Ubuntu LTS.
2022-01-10 21:29:53 +00:00
Alexandre Pujol
065dad53e3
Add tailscale profiles. 2022-01-09 20:24:35 +01:00
Alexandre Pujol
2e7b6f8ba8
Update profiles. 2022-01-09 20:23:18 +01:00
nobodysu
5c1a1f6f8e
Update acpid 2021-12-24 00:00:41 +00:00
nobodysu
777f46779f
Typo? 2021-12-21 10:39:12 +00:00
nobodysu
b9b844c182
Ubuntu compatibility 2021-12-21 10:20:45 +00:00
nobodysu
0fce337239
Update grc 2021-12-20 15:54:20 +00:00
nobodysu
864e09e539
Remove vim header 2021-12-18 21:51:01 +00:00
nobodysu
85b83a6e40
Remove vim header 2021-12-18 21:50:40 +00:00
nobodysu
b6e4b4b743 fixes 2021-12-19 00:40:26 +03:00
nobodysu
83f7132fe1
Update dfc
Ubuntu noise
2021-12-18 18:36:07 +00:00
nobodysu
5be4256404
Update nmap
Ubuntu support, iflist, unprivileged
2021-12-18 15:53:53 +00:00
Alexandre Pujol
accf5538bd
Merge branch 'nobodysu'
* nobodysu:
  Update su
2021-12-14 18:33:20 +00:00
nobodysu
3101d9e7b6 grc, ls , ss 2021-12-14 01:07:50 +03:00
nobodysu
56f598824c
Update ssh 2021-12-13 19:07:16 +00:00
nobodysu
c55f19c4eb bind-utils 2021-12-12 21:42:24 +03:00
nobodysu
09fdd074f8
Update su 2021-12-12 18:16:30 +00:00
Mikhail Morfikov
3430e3df90
update apparmor profiles
Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
2021-12-12 13:18:41 +00:00
Alexandre Pujol
44aca3ba51
Profiles update. 2021-12-12 12:41:50 +00:00
Alexandre Pujol
16dddf16dc
Add sysctl profile. 2021-12-12 12:36:17 +00:00
Alexandre Pujol
0dcd8832f3
Remove untested torbrowser. 2021-12-09 12:38:09 +00:00
Alexandre Pujol
dec82f5eb3
Add aurpublish profile. 2021-12-08 17:41:41 +00:00
Alexandre Pujol
11e0066432
Add askpass profile. 2021-12-08 17:39:21 +00:00
Alexandre Pujol
dc0347388b
Update profiles. 2021-12-08 17:38:43 +00:00
Alexandre Pujol
ad754b26c6
Add xdg-desktop-portal-gnome. 2021-12-05 19:19:44 +00:00
Alexandre Pujol
1644b70d6d
Rethink the configure process. 2021-12-05 00:13:11 +00:00
Alexandre Pujol
0fc9c8b5b0
Add Github Action & add support for the last Ubuntu LTS. 2021-12-05 00:13:00 +00:00
Alexandre Pujol
b52cbe564c
Disks: support large number of disks.
Fix: #4
See: https://github.com/torvalds/linux/blob/master/Documentation/admin-guide/devices.txt
2021-12-01 13:38:14 +00:00
Alexandre Pujol
ddc9fdef45
Merge branch 'qemu_virtual_drives' of https://github.com/nobodysu/apparmor.d into nobodysu-qemu_virtual_drives
* 'qemu_virtual_drives' of https://github.com/nobodysu/apparmor.d:
  QEMU guest virtual disks compatibility
2021-12-01 13:20:18 +00:00
nobodysu
7336b914cb
Update spectre-meltdown-checker
- since this script is not from a package it should, optionally, reside in `local` PATH
- allow to confine it with original name and without renaming
- use marco instead of repeating the path
2021-12-01 01:38:51 +00:00
nobodysu
0f50672486 QEMU guest virtual disks compatibility 2021-12-01 02:18:38 +03:00
nobodysu
27be52f9ae
Update spectre-meltdown-checker 2021-11-30 23:00:14 +00:00
nobodysu
44bcd2a394
Update spectre-meltdown-checker 2021-11-30 21:00:16 +00:00
nobodysu
5059946c4f
Update spectre-meltdown-checker 2021-11-30 17:47:40 +00:00
Alexandre Pujol
1cdd38ea40
Add archlinux-java profile. 2021-11-20 14:14:05 +00:00
Alexandre Pujol
079100e67a
Update profiles. 2021-11-20 14:13:45 +00:00
Alexandre Pujol
0fe5be032f
Add wireplumber. 2021-11-15 00:05:28 +00:00
Alexandre Pujol
f05635015f
Add power-profiles-daemon. 2021-11-15 00:04:35 +00:00
Alexandre Pujol
ac2386957b
Rewrite aa-log. 2021-11-09 22:41:12 +00:00
Alexandre Pujol
2cc4d69e9e
Update profiles. 2021-11-09 21:49:16 +00:00
Alexandre Pujol
5eeccc84f8
Add cert-sync profile. 2021-11-04 18:35:24 +00:00
Alexandre Pujol
3b4af3c89e
Add mono-sgen profile. 2021-11-04 18:34:37 +00:00
Alexandre Pujol
477df29dd5
Update profiles. 2021-11-04 18:33:25 +00:00
Alexandre Pujol
27fe14152b
Add dconf profile. 2021-11-04 18:29:07 +00:00
Alexandre Pujol
7da59b4984
update apparmor profiles 2021-10-22 15:41:13 +01:00
Alexandre Pujol
6c34573727
Add pkttyagent. 2021-10-22 15:02:10 +01:00
Alexandre Pujol
aac0a93080
Profiles update. 2021-10-22 15:01:43 +01:00
Alexandre Pujol
b91ddfa493
Add initial systemd-portabled. 2021-10-22 14:55:22 +01:00
Alexandre Pujol
2fc59385a6
Add initial systemd-oomd. 2021-10-22 14:54:40 +01:00
Alexandre Pujol
b659edf8ae
Add systemd-user-sessions. 2021-10-07 15:01:55 +01:00
Alexandre Pujol
ba0706a2d2
Add systemd-user-runtime-dir. 2021-10-07 15:01:40 +01:00
Alexandre Pujol
0d5d65b0af
Add systemd-update-utmp. 2021-10-07 15:01:13 +01:00
Alexandre Pujol
6890fff556
Add systemd-update-done. 2021-10-07 15:00:55 +01:00
Alexandre Pujol
966e4f7f00
Add systemd-sleep. 2021-10-07 15:00:29 +01:00
Alexandre Pujol
a2dc5b1132
Add initial cockpit profiles. 2021-10-07 14:58:54 +01:00
Alexandre Pujol
1a31d8271e
Add xdg-desktop-portal. 2021-10-07 14:56:01 +01:00
Alexandre Pujol
be82c4cde8
Add xdg-document-portal. 2021-10-07 14:55:40 +01:00
Alexandre Pujol
0d3b2bb4b2
Add xdg-permission-store. 2021-10-07 14:55:22 +01:00
Alexandre Pujol
45e3a280f4
Add resolvconf. 2021-10-07 14:54:48 +01:00
Alexandre Pujol
7a1c462a5e
pass-extension-python -> pass-import. 2021-10-07 14:53:28 +01:00
Alexandre Pujol
2fc138a4d7
/run -> @{run}, [0-9]* -> @{uid}. 2021-10-07 14:52:41 +01:00
Alexandre Pujol
9c8c2144b8
Profiles update. 2021-10-07 14:50:46 +01:00
Alexandre Pujol
66d02dab2b
Add gssproxy. 2021-09-28 21:59:28 +01:00
Alexandre Pujol
6bd8e64c78
Add dpkg-status. 2021-09-28 21:58:25 +01:00
Alexandre Pujol
162670237c
Add unattended-upgrade profiles. 2021-09-28 21:58:12 +01:00
Alexandre Pujol
c6ab1770d0
Libvirtd: update abstractions. 2021-09-28 21:57:52 +01:00
Alexandre Pujol
c4f1e00fba
Add apparmor.systemd. 2021-09-28 21:57:25 +01:00
Alexandre Pujol
e0434f22a4
Modernise the man profile. 2021-09-28 21:57:07 +01:00
Alexandre Pujol
adabcd6b94
Move libvirtd profiles. 2021-09-28 21:54:57 +01:00
Alexandre Pujol
b79ffa52c6
Update profiles. 2021-09-28 21:53:50 +01:00
Alexandre Pujol
8334473902
Add password-store profiles. 2021-09-26 18:16:21 +01:00
Alexandre Pujol
cc16ceb246
distribution -> usr. 2021-09-26 18:12:30 +01:00
Alexandre Pujol
4b288b3eb4
Add aa-log. 2021-09-26 17:30:24 +01:00
Alexandre Pujol
f4d8830963
Add slirp4netns 2021-09-26 17:30:06 +01:00
Alexandre Pujol
a6f1a58743
Add spice-client-glib-usb-acl-helper. 2021-09-26 17:29:46 +01:00
Alexandre Pujol
2b4aa5580f
Add new{u,g}idmap 2021-09-26 17:29:28 +01:00
Alexandre Pujol
cb94385ed7
Add fuse-overlayfs 2021-09-26 17:29:07 +01:00
Alexandre Pujol
18e4745fb1
Profiles update. 2021-09-26 17:28:26 +01:00
Alexandre Pujol
723695c626
Update profiles. 2021-09-19 20:37:32 +01:00
Alexandre Pujol
1956680160
Add userdbctl. 2021-09-15 20:44:40 +01:00
Alexandre Pujol
204ff035e7
Add firecfg. 2021-09-15 20:43:17 +01:00
Alexandre Pujol
1eead1e773
Add apparmor_parser. 2021-09-15 20:42:26 +01:00
Alexandre Pujol
d90aecaa40
Add systemd-cg* profiles 2021-09-15 20:41:44 +01:00
Alexandre Pujol
79ab7e3eec
Update profiles. 2021-09-15 20:40:47 +01:00
Alexandre Pujol
d95a876424
Add two profiles directory to have smaller dir. 2021-09-15 16:55:27 +01:00
Alexandre Pujol
6c0ae4ddc1
child-lsb_release -> lsb_release. 2021-09-15 16:30:28 +01:00