Commit graph

3036 commits

Author SHA1 Message Date
Alexandre Pujol
7b04e28835
feat(profile): remove transparent_hugepage rule already included in base. 2024-09-08 12:36:35 +01:00
odomingao
98042620f6 Update hyprlock 2024-09-08 11:23:21 +00:00
Alexandre Pujol
a8b1e46095
feat(profile): add dmsetup
fix #469
2024-09-08 12:21:56 +01:00
Alexandre Pujol
f91fc28711
chore: minor guideline cosmetic. 2024-09-06 21:47:24 +01:00
odomingao
edfa690e2b Update hyprland 2024-09-06 20:42:12 +00:00
odomingao
fe86133f49 Update wayland abstraction 2024-09-06 20:42:12 +00:00
odomingao
2e048156ac Update wayland abstraction 2024-09-06 20:42:12 +00:00
odomingao
c4482675ef Update hyprland 2024-09-06 20:42:12 +00:00
odomingao
fe3d32df1f Add access to gamescope 2024-09-06 20:42:12 +00:00
odomingao
512b42702b add hyprland profile 2024-09-06 20:42:12 +00:00
Alexandre Pujol
984ca11571
Merge branch 'main' of github.com:roddhjav/apparmor.d
* 'main' of github.com:roddhjav/apparmor.d:
  Update profile for ufw (#467)
2024-09-06 21:41:04 +01:00
Alexandre Pujol
ac2f085d8c
feat(abs): add support for keyfile in dconf.
fix #460
2024-09-06 21:40:17 +01:00
EricLin0509
a1407243dd
Update profile for ufw (#467)
* Update profile for ufw

* A small fix
2024-09-06 20:35:16 +00:00
Alexandre Pujol
fde8ee6ec6
fix(profile): generic app need access to /var/cache/tmp/
fix #465
2024-09-06 21:32:39 +01:00
Alexandre Pujol
6b191d9ada
feat(profile): use @{int} on systemd/inhibit. 2024-09-05 14:23:16 +01:00
Alexandre Pujol
4e17001ce2
feat(tunable): add the new python_path & python_name variables. 2024-09-05 14:08:08 +01:00
Alexandre Pujol
35dcde9d90
feat(tunable): add the new version variable. 2024-09-05 14:05:35 +01:00
EricLin0509
a93400280e
Add support for wemeet (#462)
* initial support for wemeet

* Some small fixes
2024-09-03 17:29:03 +00:00
Alexandre Pujol
26641f585c
feat(profile): add gnome-boxes
see  #457
2024-09-02 14:14:16 +01:00
odomingao
3c066ea087 Update waybar 2024-09-02 09:43:11 +00:00
Alexandre Pujol
bf2025db09
feat(profile): gpg: ensure compatibility with torbrowser profile from upstream.
see #407
2024-09-01 22:09:00 +01:00
odomingao
52d2cd63b9
Create cemu (#459) 2024-09-01 21:03:13 +00:00
odomingao
7c560e1e8f
Update chronyd (#458)
apparmor="DENIED" operation="create" class="net" profile="chronyd"  comm="chronyd" family="inet" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create"
2024-09-01 21:01:19 +00:00
Alexandre Pujol
b223e2eb8e
feat(profile): general update. 2024-09-01 20:36:23 +01:00
Alexandre Pujol
265e3928c1
feat(profile): mesa: mesa_shader_cache_db is often passed as fd. 2024-09-01 20:13:51 +01:00
Alexandre Pujol
7e3c546e3d
fix(profile): xdg-mime mimetype path.
fix #455
2024-09-01 15:25:43 +01:00
Alexandre Pujol
60e00f8c53
fix(profile): zramctl doesn't show algorithm, data, compression, total, streams, mountpoint
fix #456
2024-09-01 15:22:05 +01:00
Alexandre Pujol
aa4f4de6dd
feat(abs): update mesa shader cache paths.
fix: #450 #451
2024-09-01 15:17:43 +01:00
Alexandre Pujol
fb29e8ba74
doc: general update. 2024-08-30 20:38:30 +01:00
Nishit Majithia
fe32720765
socat: add apparmor profile (#454)
* socat: add apparmor profile

Signed-off-by: Nishit Majithia <nishit.nm@gmail.com>

* socat: update profile

 - Follow profile guideline
 - Change copyright texts
 - Update to use abi 3.0
 - Use `ssl_certs` and `console` abstractions instead of explicit rules

Signed-off-by: Nishit Majithia <nishit.nm@gmail.com>

* socat: minor fix in the profile

 - Use @{bin}
 - Allow executable mapping and read for the binary

Signed-off-by: Nishit Majithia <nishit.nm@gmail.com>

---------

Signed-off-by: Nishit Majithia <nishit.nm@gmail.com>
2024-08-30 16:56:04 +00:00
odomingao
a224adc42e Update xdg-desktop-portal-hyprland 2024-08-30 11:42:38 +00:00
odomingao
75fba4c6c7 Update xdg-desktop-portal 2024-08-30 11:42:38 +00:00
odomingao
21bef5a042 Create xdg-desktop-portal-hyprland 2024-08-30 11:42:38 +00:00
Alexandre Pujol
a1eaf58427
feat(profile): minor update. 2024-08-29 19:05:37 +01:00
Alexandre Pujol
04898e20f9
fix: conflicting x modifiers. 2024-08-28 19:48:01 +01:00
EliasTheGrandMasterOfMistakes
1f83ca358e gnome-shell: Integrate nm-openvpn-auth-dialog on gnome-shell
VPNs that uses gnome authentication like ProtonVPN
depends of gnome-shell acess nm-openvpn-auth-dialog

Co-authored-by: Alexandre Pujol <alexandre@pujol.io>
2024-08-28 18:42:08 +00:00
EricLin0509
7716c8a191 Rewrite the profile for ufw 2024-08-28 18:24:31 +00:00
EricLin0509
d5ee5c51cb Tighten the permissions of ufw 2024-08-28 18:24:31 +00:00
EricLin0509
cecd0a6284 initial support for ufw 2024-08-28 18:24:31 +00:00
valoq
ce26fa103b permit read access 2024-08-28 18:23:44 +00:00
Alexandre Pujol
bb1c4e0537
feat(profile): modernise the crontab profile.
fix #428
2024-08-28 19:19:21 +01:00
Alexandre Pujol
09aef5131e
fix(profile): gpg key generation. 2024-08-28 18:59:51 +01:00
Alexandre Pujol
72d8d14480
feat(tunables): expand coreutils with findutils & diffutils. 2024-08-28 18:53:31 +01:00
Alexandre Pujol
ec7715aaf3
feat(profile): general update. 2024-08-28 18:52:55 +01:00
Alexandre Pujol
c13aa711da
feat(abs): add user bin to the app launch abs. 2024-08-28 18:46:35 +01:00
Alexandre Pujol
f9169bc40b
feat(profile): use the kde-globals-write abstaction when needed. 2024-08-28 18:43:34 +01:00
Alexandre Pujol
1655a9f5ab
feat(profile): more kde integration.
fix #442
2024-08-28 18:30:39 +01:00
odomingao
96d774a9eb Update systemd-journald
apparmor="DENIED" operation="open" class="file" profile="systemd-journald" name="/run/udev/data/+mdio_bus:r8169-0-300:00"  comm="systemd-journal" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 FSUID="root" OUID="root"
2024-08-26 11:01:11 +00:00
Alexandre Pujol
909d3062b5
feat(profile): ssh: add sshd-session
fix #442
2024-08-22 17:43:00 +01:00
valoq
f4330796c4 add write permissions to remove metadata 2024-08-21 10:44:05 +00:00