Commit graph

456 commits

Author SHA1 Message Date
Mikhail Morfikov
76cd5c7029
update apparmor profiles
Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
2022-01-16 20:15:25 +00:00
Alex
697b296298
Merge pull request #13 from nobodysu/grc_ls_ss
ss
2022-01-16 20:41:57 +01:00
nobodysu
0d9fbff993
Update pulseaudio 2022-01-16 00:20:11 +00:00
nobodysu
56f72ee8f9
Update ss 2022-01-16 00:07:33 +00:00
nobodysu
52aa210f70
Delete grc 2022-01-15 23:54:08 +00:00
nobodysu
0cb633ecec
Update acpid 2022-01-15 23:45:52 +00:00
nobodysu
43c509f28b
Update host 2022-01-15 23:22:43 +00:00
nobodysu
ccabf0ad5e
Update nslookup 2022-01-15 23:14:32 +00:00
Alex
d7ad51d41e
Merge pull request #16 from nobodysu/patch-8
nameservice-strict: Ubuntu compatibility
2022-01-15 19:36:27 +01:00
Alex
3f09ba5ed4
Merge pull request #15 from nobodysu/patch-6
Update dfc
2022-01-15 19:34:17 +01:00
Alex
c1acae8ec2
Merge pull request #14 from nobodysu/patch-5
Update nmap
2022-01-15 19:29:31 +01:00
Alexandre Pujol
8627618d8c
mount: support for squashfs. 2022-01-15 17:36:41 +00:00
Alexandre Pujol
1970e14b46
Pulseaudio: fix dconf access.
Fix #19.
2022-01-15 17:31:48 +00:00
nobodysu
d6148c7b23
Update grc
- `mount` is too much, for now
- expanding `ro` paths
2022-01-10 21:49:01 +00:00
nobodysu
80bd1028c5
Update acpid
Another case. Tested on Debian 11 and Ubuntu LTS.
2022-01-10 21:29:53 +00:00
Alexandre Pujol
065dad53e3
Add tailscale profiles. 2022-01-09 20:24:35 +01:00
Alexandre Pujol
2e7b6f8ba8
Update profiles. 2022-01-09 20:23:18 +01:00
nobodysu
5c1a1f6f8e
Update acpid 2021-12-24 00:00:41 +00:00
nobodysu
777f46779f
Typo? 2021-12-21 10:39:12 +00:00
nobodysu
b9b844c182
Ubuntu compatibility 2021-12-21 10:20:45 +00:00
nobodysu
0fce337239
Update grc 2021-12-20 15:54:20 +00:00
nobodysu
864e09e539
Remove vim header 2021-12-18 21:51:01 +00:00
nobodysu
85b83a6e40
Remove vim header 2021-12-18 21:50:40 +00:00
nobodysu
b6e4b4b743 fixes 2021-12-19 00:40:26 +03:00
nobodysu
83f7132fe1
Update dfc
Ubuntu noise
2021-12-18 18:36:07 +00:00
nobodysu
5be4256404
Update nmap
Ubuntu support, iflist, unprivileged
2021-12-18 15:53:53 +00:00
Alexandre Pujol
accf5538bd
Merge branch 'nobodysu'
* nobodysu:
  Update su
2021-12-14 18:33:20 +00:00
nobodysu
3101d9e7b6 grc, ls , ss 2021-12-14 01:07:50 +03:00
nobodysu
56f598824c
Update ssh 2021-12-13 19:07:16 +00:00
nobodysu
c55f19c4eb bind-utils 2021-12-12 21:42:24 +03:00
nobodysu
09fdd074f8
Update su 2021-12-12 18:16:30 +00:00
Mikhail Morfikov
3430e3df90
update apparmor profiles
Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
2021-12-12 13:18:41 +00:00
Alexandre Pujol
44aca3ba51
Profiles update. 2021-12-12 12:41:50 +00:00
Alexandre Pujol
16dddf16dc
Add sysctl profile. 2021-12-12 12:36:17 +00:00
Alexandre Pujol
0dcd8832f3
Remove untested torbrowser. 2021-12-09 12:38:09 +00:00
Alexandre Pujol
dec82f5eb3
Add aurpublish profile. 2021-12-08 17:41:41 +00:00
Alexandre Pujol
11e0066432
Add askpass profile. 2021-12-08 17:39:21 +00:00
Alexandre Pujol
dc0347388b
Update profiles. 2021-12-08 17:38:43 +00:00
Alexandre Pujol
ad754b26c6
Add xdg-desktop-portal-gnome. 2021-12-05 19:19:44 +00:00
Alexandre Pujol
1644b70d6d
Rethink the configure process. 2021-12-05 00:13:11 +00:00
Alexandre Pujol
0fc9c8b5b0
Add Github Action & add support for the last Ubuntu LTS. 2021-12-05 00:13:00 +00:00
Alexandre Pujol
b52cbe564c
Disks: support large number of disks.
Fix: #4
See: https://github.com/torvalds/linux/blob/master/Documentation/admin-guide/devices.txt
2021-12-01 13:38:14 +00:00
Alexandre Pujol
ddc9fdef45
Merge branch 'qemu_virtual_drives' of https://github.com/nobodysu/apparmor.d into nobodysu-qemu_virtual_drives
* 'qemu_virtual_drives' of https://github.com/nobodysu/apparmor.d:
  QEMU guest virtual disks compatibility
2021-12-01 13:20:18 +00:00
nobodysu
7336b914cb
Update spectre-meltdown-checker
- since this script is not from a package it should, optionally, reside in `local` PATH
- allow to confine it with original name and without renaming
- use marco instead of repeating the path
2021-12-01 01:38:51 +00:00
nobodysu
0f50672486 QEMU guest virtual disks compatibility 2021-12-01 02:18:38 +03:00
nobodysu
27be52f9ae
Update spectre-meltdown-checker 2021-11-30 23:00:14 +00:00
nobodysu
44bcd2a394
Update spectre-meltdown-checker 2021-11-30 21:00:16 +00:00
nobodysu
5059946c4f
Update spectre-meltdown-checker 2021-11-30 17:47:40 +00:00
Alexandre Pujol
1cdd38ea40
Add archlinux-java profile. 2021-11-20 14:14:05 +00:00
Alexandre Pujol
079100e67a
Update profiles. 2021-11-20 14:13:45 +00:00
Alexandre Pujol
0fe5be032f
Add wireplumber. 2021-11-15 00:05:28 +00:00
Alexandre Pujol
f05635015f
Add power-profiles-daemon. 2021-11-15 00:04:35 +00:00
Alexandre Pujol
ac2386957b
Rewrite aa-log. 2021-11-09 22:41:12 +00:00
Alexandre Pujol
2cc4d69e9e
Update profiles. 2021-11-09 21:49:16 +00:00
Alexandre Pujol
5eeccc84f8
Add cert-sync profile. 2021-11-04 18:35:24 +00:00
Alexandre Pujol
3b4af3c89e
Add mono-sgen profile. 2021-11-04 18:34:37 +00:00
Alexandre Pujol
477df29dd5
Update profiles. 2021-11-04 18:33:25 +00:00
Alexandre Pujol
27fe14152b
Add dconf profile. 2021-11-04 18:29:07 +00:00
Alexandre Pujol
7da59b4984
update apparmor profiles 2021-10-22 15:41:13 +01:00
Alexandre Pujol
6c34573727
Add pkttyagent. 2021-10-22 15:02:10 +01:00
Alexandre Pujol
aac0a93080
Profiles update. 2021-10-22 15:01:43 +01:00
Alexandre Pujol
b91ddfa493
Add initial systemd-portabled. 2021-10-22 14:55:22 +01:00
Alexandre Pujol
2fc59385a6
Add initial systemd-oomd. 2021-10-22 14:54:40 +01:00
Alexandre Pujol
b659edf8ae
Add systemd-user-sessions. 2021-10-07 15:01:55 +01:00
Alexandre Pujol
ba0706a2d2
Add systemd-user-runtime-dir. 2021-10-07 15:01:40 +01:00
Alexandre Pujol
0d5d65b0af
Add systemd-update-utmp. 2021-10-07 15:01:13 +01:00
Alexandre Pujol
6890fff556
Add systemd-update-done. 2021-10-07 15:00:55 +01:00
Alexandre Pujol
966e4f7f00
Add systemd-sleep. 2021-10-07 15:00:29 +01:00
Alexandre Pujol
a2dc5b1132
Add initial cockpit profiles. 2021-10-07 14:58:54 +01:00
Alexandre Pujol
1a31d8271e
Add xdg-desktop-portal. 2021-10-07 14:56:01 +01:00
Alexandre Pujol
be82c4cde8
Add xdg-document-portal. 2021-10-07 14:55:40 +01:00
Alexandre Pujol
0d3b2bb4b2
Add xdg-permission-store. 2021-10-07 14:55:22 +01:00
Alexandre Pujol
45e3a280f4
Add resolvconf. 2021-10-07 14:54:48 +01:00
Alexandre Pujol
7a1c462a5e
pass-extension-python -> pass-import. 2021-10-07 14:53:28 +01:00
Alexandre Pujol
2fc138a4d7
/run -> @{run}, [0-9]* -> @{uid}. 2021-10-07 14:52:41 +01:00
Alexandre Pujol
9c8c2144b8
Profiles update. 2021-10-07 14:50:46 +01:00
Alexandre Pujol
66d02dab2b
Add gssproxy. 2021-09-28 21:59:28 +01:00
Alexandre Pujol
6bd8e64c78
Add dpkg-status. 2021-09-28 21:58:25 +01:00
Alexandre Pujol
162670237c
Add unattended-upgrade profiles. 2021-09-28 21:58:12 +01:00
Alexandre Pujol
c6ab1770d0
Libvirtd: update abstractions. 2021-09-28 21:57:52 +01:00
Alexandre Pujol
c4f1e00fba
Add apparmor.systemd. 2021-09-28 21:57:25 +01:00
Alexandre Pujol
e0434f22a4
Modernise the man profile. 2021-09-28 21:57:07 +01:00
Alexandre Pujol
adabcd6b94
Move libvirtd profiles. 2021-09-28 21:54:57 +01:00
Alexandre Pujol
b79ffa52c6
Update profiles. 2021-09-28 21:53:50 +01:00
Alexandre Pujol
8334473902
Add password-store profiles. 2021-09-26 18:16:21 +01:00
Alexandre Pujol
cc16ceb246
distribution -> usr. 2021-09-26 18:12:30 +01:00
Alexandre Pujol
4b288b3eb4
Add aa-log. 2021-09-26 17:30:24 +01:00
Alexandre Pujol
f4d8830963
Add slirp4netns 2021-09-26 17:30:06 +01:00
Alexandre Pujol
a6f1a58743
Add spice-client-glib-usb-acl-helper. 2021-09-26 17:29:46 +01:00
Alexandre Pujol
2b4aa5580f
Add new{u,g}idmap 2021-09-26 17:29:28 +01:00
Alexandre Pujol
cb94385ed7
Add fuse-overlayfs 2021-09-26 17:29:07 +01:00
Alexandre Pujol
18e4745fb1
Profiles update. 2021-09-26 17:28:26 +01:00
Alexandre Pujol
723695c626
Update profiles. 2021-09-19 20:37:32 +01:00
Alexandre Pujol
1956680160
Add userdbctl. 2021-09-15 20:44:40 +01:00
Alexandre Pujol
204ff035e7
Add firecfg. 2021-09-15 20:43:17 +01:00
Alexandre Pujol
1eead1e773
Add apparmor_parser. 2021-09-15 20:42:26 +01:00
Alexandre Pujol
d90aecaa40
Add systemd-cg* profiles 2021-09-15 20:41:44 +01:00
Alexandre Pujol
79ab7e3eec
Update profiles. 2021-09-15 20:40:47 +01:00
Alexandre Pujol
d95a876424
Add two profiles directory to have smaller dir. 2021-09-15 16:55:27 +01:00
Alexandre Pujol
6c0ae4ddc1
child-lsb_release -> lsb_release. 2021-09-15 16:30:28 +01:00
Mikhail Morfikov
2a6b2bd189
update apparmor profiles 2021-09-15 16:16:01 +01:00
Alexandre Pujol
efda369670
Add libvirt profiles. 2021-09-12 20:48:41 +01:00
Alexandre Pujol
fda83bbba7
Add containerd profile. 2021-09-12 20:47:36 +01:00
Alexandre Pujol
a4ba26133f
Update profiles. 2021-09-12 20:47:14 +01:00
Alexandre Pujol
70b4fa665b
Profiles update. 2021-09-10 00:17:44 +01:00
Alexandre Pujol
6583a7bfb2
Update profiles. 2021-09-04 13:59:45 +01:00
Alexandre Pujol
ca4be147f8
Fix video abstraction. 2021-08-22 15:43:53 +01:00
Alexandre Pujol
3c1a201e4a
Initial pacman profiles. 2021-08-22 15:38:14 +01:00
Alexandre Pujol
020eb0daf6
Add mkinitcpio. 2021-08-22 15:35:27 +01:00
Alexandre Pujol
b2d3af8bca
Update profiles. 2021-08-22 15:32:42 +01:00
Alexandre Pujol
f922a5f8e8
BUILD_DIR -> user_build_dirs. 2021-08-22 15:28:23 +01:00
Alexandre Pujol
b65955d055
Better tunables definitions. 2021-08-20 19:14:49 +01:00
Mikhail Morfikov
9eecac80a2
update apparmor profiles 2021-08-20 18:52:56 +01:00
Alexandre Pujol
fb63699153
Add gnome-disks 2021-08-14 13:00:36 +01:00
Alexandre Pujol
fae9d697f6
Add gnome-music. 2021-08-14 13:00:23 +01:00
Alexandre Pujol
6bea2fbd25
Add geoclue profile. 2021-08-14 12:59:43 +01:00
Alexandre Pujol
33f99711a2
Update profiles. 2021-08-14 12:59:24 +01:00
Alexandre Pujol
2d92925882
Profile update. 2021-08-02 11:14:58 +01:00
Alexandre Pujol
4582d6e201
Fix & update flags. 2021-07-31 19:29:39 +01:00
Alexandre Pujol
c7722391c1
Add gnome-control-center. 2021-07-31 19:21:52 +01:00
Alexandre Pujol
4489568b82
Add gnome-tweaks. 2021-07-31 19:17:34 +01:00
Alexandre Pujol
80a1b1b401
Add gnome-system-monitor. 2021-07-31 19:17:25 +01:00
Alexandre Pujol
d38c573844
Add gnome-disk-image-mounter. 2021-07-31 19:16:42 +01:00
Alexandre Pujol
19ada552fe
Profiles update. 2021-07-31 18:41:54 +01:00
Alexandre Pujol
94978242ff
Update profiles. 2021-07-16 21:33:11 +01:00
Alexandre Pujol
aa3c43c999
Add pinentry profiles. 2021-07-11 17:22:08 +01:00
Alexandre Pujol
bba090d727
Add gnome-extensions-app. 2021-07-11 17:20:29 +01:00
Alexandre Pujol
2372188d8e
Update profiles. 2021-07-11 17:20:09 +01:00
Alexandre Pujol
cb6344c64f
Add aa-status. 2021-07-08 19:42:57 +01:00
Alexandre Pujol
9828ae566f
media-keys: add audio abstracion. 2021-07-08 18:16:22 +01:00
Alexandre Pujol
b50c926784
Add zram-generator. 2021-07-08 12:57:00 +01:00
Alexandre Pujol
a0d703a3ee
Add systemd-delta & systemd-path. 2021-07-08 12:54:52 +01:00
Alexandre Pujol
178459f406
Profile update. 2021-07-08 12:53:17 +01:00
Alexandre Pujol
30c414d439
Update profiles. 2021-07-05 19:10:20 +01:00
Alexandre Pujol
ca13b4be36
Add pkcs11-register. 2021-06-29 20:10:39 +01:00
Alexandre Pujol
9cff5676c8
Add start-pulseaudio-x11. 2021-06-29 20:10:07 +01:00
Alexandre Pujol
b3352522ea
Add wl-copy. 2021-06-29 20:09:45 +01:00
Alexandre Pujol
f7e0824826
Add the systemd-tty-ask-password-agent profile. 2021-06-29 20:04:51 +01:00
Alexandre Pujol
a8a1f3b29a
Add virtlogd profile. 2021-06-29 20:03:06 +01:00
Alexandre Pujol
aceb3d7560
Add gtk-query-immodules. 2021-06-29 20:01:26 +01:00
Alexandre Pujol
8bab95223f
Add systemd-mount. 2021-06-29 19:59:25 +01:00
Alexandre Pujol
ab5958c511
Update profiles. 2021-06-29 19:55:56 +01:00
Alexandre Pujol
d084023120
Add update-ca-trust 2021-06-12 15:21:28 +01:00
Alexandre Pujol
6bbe50573b
Update profiles. 2021-06-12 15:21:16 +01:00
Alexandre Pujol
4ee6cc9657
/usr/{lib,libexec} -> @{libexec} 2021-06-06 15:02:40 +01:00
Alexandre Pujol
9ad8ec165d
Profiles update. 2021-06-06 14:55:17 +01:00
Alexandre Pujol
44dc86cd36
Small fixes. 2021-05-30 16:15:29 +01:00
Alexandre Pujol
9b7ab9cbc3
Add paccache profile. 2021-05-26 20:49:04 +01:00
Alexandre Pujol
58978c12b7
Profile update. 2021-05-26 20:44:42 +01:00
Alexandre Pujol
797701d0a0
Pipewire: use tunable vars. 2021-05-26 20:34:41 +01:00
Mikhail Morfikov
e085014238
update apparmor profiles 2021-05-26 20:23:28 +01:00
Alexandre Pujol
420aebcfa5
Small fixes. 2021-05-16 21:11:55 +01:00
Alexandre Pujol
a4fe3209c9
Move debian only profiles. 2021-05-16 21:10:16 +01:00
Alexandre Pujol
717505daf5
Minor corrections. 2021-05-11 22:07:20 +01:00
Alexandre Pujol
dfcafbe472
Move some profiles. 2021-05-11 22:03:28 +01:00
Alexandre Pujol
e6dc08caec
Add some profiles. 2021-05-09 00:34:57 +01:00
Alexandre Pujol
a8d1205e76
Profile update. 2021-05-09 00:33:10 +01:00
Alexandre Pujol
faa3e70c8f
Add some systemd profiles. 2021-05-09 00:31:43 +01:00
Alexandre Pujol
665fd26419
Add some gnome related profiles. 2021-05-08 19:07:45 +01:00
Alexandre Pujol
bfa2293379
Profile update. 2021-05-08 19:06:48 +01:00
Alexandre Pujol
0d566a43b9
Profiles update. 2021-05-06 16:44:49 +01:00
Alexandre Pujol
ae5f781175
Move some profiles. 2021-05-03 19:14:46 +01:00
Alexandre Pujol
f7948962fc
Profiles update. 2021-05-03 12:58:46 +01:00
Alexandre Pujol
86ac65eb5c
Update profiles. 2021-05-01 21:22:23 +01:00
Alexandre Pujol
0c494ed2ba
General profiles update. 2021-04-29 21:02:28 +01:00
Alexandre Pujol
559020861b
Add idbus profiles. 2021-04-29 21:00:25 +01:00
Alexandre Pujol
001c2028f6
Move dbus profiles. 2021-04-29 20:58:31 +01:00
Alexandre Pujol
49bddc0382
Profile update. 2021-04-23 12:40:19 +01:00
Alexandre Pujol
749859920e
Some fixes. 2021-04-21 21:57:17 +01:00
Alexandre Pujol
a49e221949
Add reflector. 2021-04-21 21:56:29 +01:00
Alexandre Pujol
d84c699fbd
arch-audit: add dac_read_search. 2021-04-21 21:56:13 +01:00
Alexandre Pujol
7029d40c5e
systemd: better profilling and rename journalctl. 2021-04-21 21:55:50 +01:00
Alexandre Pujol
1c9df4b3b9
Gnome fixes. 2021-04-21 21:55:01 +01:00
Alexandre Pujol
d929d662f5
Add glib-pacrunner. 2021-04-21 21:54:29 +01:00
Alexandre Pujol
926c89de95
Move some profiles. 2021-04-21 21:53:54 +01:00
Alexandre Pujol
b373c0ec63
borg: allow cat. 2021-04-19 15:28:54 +01:00
Alexandre Pujol
1f11e6398b
Add @{MOUNTS} for all common mountpoints. 2021-04-19 15:20:32 +01:00
Alexandre Pujol
a5ec3e559c
Disk mount fix. 2021-04-19 15:15:38 +01:00
Alexandre Pujol
4a35b7d804
Use @{uid} instead of [0-9]* when it denotes the user id. 2021-04-18 19:00:15 +01:00
Alexandre Pujol
cd4ad5b09c
Minor fixes. 2021-04-18 17:54:04 +01:00
Mikhail Morfikov
5faf590bf5
update apparmor profiles 2021-04-18 17:48:20 +01:00
Alexandre Pujol
f5d1386f74
Add xdg-user-dirs-update 2021-04-16 13:37:26 +01:00
Alexandre Pujol
53b01b1132
Some fixes. 2021-04-16 13:37:15 +01:00
Alexandre Pujol
d41df93da1
Add tracker-extract 2021-04-16 13:36:28 +01:00
Alexandre Pujol
2e5c8f2f72
Add more systemd profiles. 2021-04-15 22:52:14 +01:00
Alexandre Pujol
370dda124d
Various fixes. 2021-04-15 22:51:21 +01:00
Alexandre Pujol
8fdd8a7b21
Add missing gdm term signal. 2021-04-13 15:13:06 +01:00
Alexandre Pujol
7a3ba21d50
Add gdm profiles. 2021-04-13 14:14:23 +01:00
Alexandre Pujol
ea746ad8d7
Minor fixes. 2021-04-13 14:10:50 +01:00
Alexandre Pujol
7be8aca10d
Minor fixes. 2021-04-12 19:59:41 +01:00
Alexandre Pujol
3734e5aedf
Add include if exists abstractions *.d 2021-04-12 19:59:04 +01:00
Alexandre Pujol
8d22bc10b2
Add nautilus profile. 2021-04-12 19:04:42 +01:00
Alexandre Pujol
2175a86979
Profiles update. 2021-04-12 13:33:24 +01:00
Mikhail Morfikov
0573b2d996
update apparmor profiles
Adpated to the apparmor.d structure.

Signed-off-by: Mikhail Morfikov <mmorfikov@gmail.com>
2021-04-10 15:12:56 +01:00
Alexandre Pujol
3d9fc84a41
Profile fixes. 2021-04-10 14:20:23 +01:00
Alexandre Pujol
c04c260cfa
Enforce some profiles. 2021-04-10 14:19:43 +01:00
Alexandre Pujol
89f35e502f
Add gtk 4 support. 2021-04-10 14:18:42 +01:00
Alexandre Pujol
17806e9ee7
Profiles update and general fixes. 2021-04-09 14:47:06 +01:00
Alexandre Pujol
ec9f197842
dbus-daemon: arch & gnome support. 2021-04-08 22:48:40 +01:00
Alexandre Pujol
33296ae19e
Add full gnome shell confinement. 2021-04-08 22:47:42 +01:00