mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-30 14:55:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
2797 commits 6 branches 0 tags 16 MiB
Commit graph

468 commits

Author SHA1 Message Date
Alexandre Pujol
00051bd2f0
feat(profiles): continue replacing [0-9]* by @{int}. 2024-02-26 21:10:53 +00:00
Alexandre Pujol
4b23bccb47
fix: ensure fsck.ext4 is has only one profile. 
fsck.ext4 was in the profile attachment for both fsck-ext4 and e2fsck, breaking transition to the profile.

Also reorganise some entrypoint to avoid this kind of confusion.
 2024-02-23 20:12:32 +00:00
Jeroen Rijken
2b65e58b19 Flatpak dbus addition 
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
 2024-02-21 13:56:40 +00:00
Jeroen Rijken
7a61919f71 Flatpak dbus and kio 
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
 2024-02-21 13:56:40 +00:00
Jeroen Rijken
4c5a21145a General update 
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
 2024-02-21 13:56:40 +00:00
Jeroen Rijken
40b171ee94 Replace shells with new sh_path variable 
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
 2024-02-21 13:56:40 +00:00
doublez13
3b1b187d13
Abook: Fix missing directory (#298) 
Allow abook to create ~/.abook
 2024-02-19 12:38:24 +00:00
Alexandre Pujol
14fe43714a
feat(profile): general update. 2024-02-15 00:19:13 +00:00
doublez13
ea97ff6a5f
Mutt and Abook profiles (#288) 
There are an innumerable number of mutt configurations. This AA profile is intended to work with a stock mutt config. Any customizations should be placed in local/mutt

This might be a little annoying because by default mutt saves attachments in the directory that it was started from (most likely ~/), and there is no config option that I'm aware of to set a default download location.
 
A user will either need to manually specify a location (like ~/Downloads) when saving, or allow saving to ~/ in the local override.
 2024-02-14 23:03:03 +00:00
Alexandre Pujol
04683eeccb
feat(profile): general update. 2024-02-11 12:44:40 +00:00
Alexandre Pujol
2cd14aa6bb
chore: add missing and update copyright year. 2024-02-07 00:16:21 +01:00
Alexandre Pujol
0a74d5c6fe
feat(profile): general update. 2024-02-01 13:19:19 +00:00
Alexandre Pujol
049e89b379
feat(profile): general update (2). 2024-01-28 22:33:45 +00:00
Alexandre Pujol
78d5ce9ecc
feat(profile): general update. 2024-01-27 19:39:14 +00:00
Alexandre Pujol
1a1daeae07
feat(profile): general update. 2024-01-25 22:46:22 +00:00
Alexandre Pujol
134a487ff3
fix(profile): borg needs console access. 
Fix #280
 2024-01-25 13:22:20 +00:00
Alexandre Pujol
a30c2e5e85
feat: add the new shells variable to ensure support for all interactive shell. 
Fix #269
 2024-01-25 13:16:40 +00:00
nobody43
b376e9fade
Tunables polishing (#281) 
* adjust xorg display number

* remove wildcard from python version

* python wildcard #2

* unconventional tails

* Delete apparmor.d/groups/apps/android-studio

---------

Co-authored-by: nobody43 <nobody43@users.noreply.github.com>
 2024-01-25 12:44:47 +00:00
Alexandre Pujol
293f651a4f
Merge branch 'Updating-polkit,-sddm,-unix-chkpwd,btrfs' of https://github.com/curiosityseeker/apparmor.d into curiosityseeker-Updating-polkit,-sddm,-unix-chkpwd,btrfs 
* 'Updating-polkit,-sddm,-unix-chkpwd,btrfs' of https://github.com/curiosityseeker/apparmor.d:
  Update login
  Update btrfs
  Update polkitd: @{PROC}/@{pid}/fdinfo/@{int}
  Update unix-chkpwd
  Update needrestart: adding unix_chkpwd
  Update sddm: adding unix_chkpwd
 2024-01-25 12:07:36 +00:00
Alexandre Pujol
42fc4622ed
feat(profile): general update. 2024-01-21 11:56:02 +00:00
curiosityseeker
d44d2491b9
Update btrfs 2024-01-19 16:44:21 +01:00
Alexandre Pujol
a79a3f3311
feat(profile): start using new abstractions (2) 2023-12-19 23:42:30 +00:00
Alexandre Pujol
9f49052529
feat(profile): add some dbus rules. 2023-12-19 23:24:44 +00:00
Alexandre Pujol
4032ead9b4
feat(profile): general update. 2023-12-17 23:47:16 +00:00
Alexandre Pujol
f362975ce7
feat(profile): add the open_path variable. 2023-12-17 23:43:14 +00:00
Alexandre Pujol
a46dfaad61
feat(profile): general update. 2023-12-17 17:39:56 +00:00
Alexandre Pujol
ca85373e3a
feat(dbus): start using the new dbus directive. 2023-12-17 14:14:42 +00:00
Alexandre Pujol
e1a30cbf7d
feat(profile): unify udev char dynamic assignment ranges. 2023-12-17 12:46:27 +00:00
Alexandre Pujol
ceb4c582e1
feat(dbus): update dbus rules. 2023-12-16 21:30:47 +00:00
Alexandre Pujol
b1212c6e62
feat(dbus): replace some rule by the new directives. 2023-12-15 22:26:35 +00:00
Alexandre Pujol
d2fc3c3325
fix(profile): merge flatpak-bwrap & flatpak-app. 
See #264
 2023-12-15 18:07:18 +00:00
Alexandre Pujol
a1b86b56d2
feat(profile): general update. 2023-12-13 20:09:52 +00:00
Alexandre Pujol
ab9e1932da
feat(profiles): general update. 2023-12-12 18:29:08 +00:00
Alexandre Pujol
032d805666
feat(profile): general update. 2023-12-10 14:34:38 +00:00
Alexandre Pujol
ed1ea18a9e
feat(profile): general update. 2023-12-09 11:28:23 +00:00
Alexandre Pujol
c54d72543e
feat(profile): update flatpak. 2023-12-08 18:03:47 +00:00
Alexandre Pujol
d81bce5559
feat(profile): general update. 2023-12-08 18:01:39 +00:00
Alexandre Pujol
bb947318a5
feat(profile): use the @{pci} varibale when possible. 2023-12-08 17:46:05 +00:00
Alexandre Pujol
853668e492
feat(dbus): improve dbus integration. 2023-12-08 17:38:21 +00:00
Alexandre Pujol
1cf268b770
refractor(dbus): use the new bus-{systemd,session} abstractions. 2023-12-06 21:56:59 +00:00
Alexandre Pujol
17c3faf09d
fix: issue in dbus rule. 2023-12-06 20:16:55 +00:00
Alexandre Pujol
4bddfd8690
refractor(dbus): bus/x -> bus-x. 2023-12-06 20:14:53 +00:00
Alexandre Pujol
0568ef0d45
feat(profile): add structure for some cups profile. 
They are empty, and forced into complain mode.
 2023-12-06 20:06:49 +00:00
Alexandre Pujol
cc133e5f57
feat(profile): general update. 2023-12-06 20:00:40 +00:00
Alexandre Pujol
1307250250
feat(dbus): rewrite some dbus rules (9). 2023-12-06 19:55:48 +00:00
Alexandre Pujol
3425419f0e
feat(dbus): rename dbus abstractions. 2023-12-06 19:38:47 +00:00
Alexandre Pujol
538ec25001
feat(dbus): rewrite some dbus rules (7). 2023-12-05 21:01:26 +00:00
Alexandre Pujol
319b976beb
feat(profile): general update. 2023-12-05 20:45:13 +00:00
Alexandre Pujol
c066ef0036
feat(dbus): rewrite some dbus rules (6). 2023-12-05 00:19:43 +00:00
Alexandre Pujol
da3b5103e4
feat(dbus): rewrite some dbus rules (5). 2023-12-04 21:54:45 +00:00
Alexandre Pujol
16c2bf5662
feat(dbus): add more dbus abstraction. 2023-12-04 18:58:03 +00:00
Alexandre Pujol
2432414ae2
feat(dbus): rewrite some dbus rules (4). 2023-12-04 18:52:10 +00:00
Alexandre Pujol
dd1d9107e8
feat(profile): general update. 2023-12-03 16:57:50 +00:00
Alexandre Pujol
1edf507abf
feat(dbus): rewrite some dbus rules (4). 2023-12-03 16:53:25 +00:00
Alexandre Pujol
2af165403a
feat(dbus): rewrite some dbus rules (3). 2023-12-02 16:05:40 +00:00
Alexandre Pujol
6d1ff256af
feat(dbus): rewrite some dbus rules (1). 2023-12-01 20:58:21 +00:00
Alexandre Pujol
d6888a65c4
feat(dbus): add initial polkit abstraction. 2023-12-01 20:42:41 +00:00
Alexandre Pujol
7f38dd255e
feat(profile): general update. 2023-12-01 13:22:45 +00:00
Alexandre Pujol
d75fa9bbd5
feat(dbus): dbus rules cleanup (3) 2023-11-30 23:20:29 +00:00
Alexandre Pujol
cd391bae01
feat(dbus): dbus rules cleanup (2) 2023-11-30 22:42:49 +00:00
Alexandre Pujol
9517800a9d
feat(dbus): simple dbus rules cleaning. 2023-11-30 21:32:50 +00:00
Alexandre Pujol
c27ec457d0
feat(profile): cleanup some dbus path/interfaces 2023-11-30 00:29:37 +00:00
Alexandre Pujol
459fe7c905
feat(profile): use the new bus/atspi abstraction in the profiles. 2023-11-30 00:22:34 +00:00
Alexandre Pujol
60e4a01a76
feat(abs): add some files into the base abstaction. 2023-11-29 17:50:26 +00:00
Alexandre Pujol
cdfa76924b
feat(profile): add dleyna profiles. 2023-11-27 19:27:44 +00:00
Alexandre Pujol
52278490ab
feat(profile): general update. 2023-11-27 19:00:18 +00:00
Alexandre Pujol
aa1553388b
feat(flatpak): add flatpak integration. 
- Add flatpak profile
- Add flatpak-bwrap subprofile: it manage the sandbox creation & has some larger access.
- Add flatpak-app, default profile for sandboxed app.

See Full system policy #252
 2023-11-26 23:19:09 +00:00
Alexandre Pujol
8250e202a0
feat(profile): general update. 2023-11-26 21:24:40 +00:00
Alexandre Pujol
31bc5a6053
feat(profiles): general update. 2023-11-22 21:37:09 +00:00
Alexandre Pujol
c62b45964d
feat(profile): add e2scrub_all. 2023-11-22 20:56:42 +00:00
Alexandre Pujol
17d187e93b
feat(profiles): ensure apparmor_parser works with snap. 2023-11-22 20:55:47 +00:00
Alexandre Pujol
b79a1fcd31
feat(profile): general update. 
Also include some preparation for the systemd profile.
 2023-11-19 11:08:35 +00:00
Alexandre Pujol
d3084839d1
feat(profiles): improve support for debian over gnome. 2023-11-13 22:14:54 +00:00
Alexandre Pujol
6f98bb9bfb
feat(abs): add more possible resolv.conf path in nameservice. 
Used a lot by debian.
 2023-11-13 19:32:04 +00:00
Alexandre Pujol
f0a2cb3897
feat(profiles): general update. 2023-11-11 22:02:47 +00:00
Alexandre Pujol
758991f67b
feat(profiles): general update. 2023-11-09 17:31:45 +00:00
Alexandre Pujol
84ecf85c0b
feat(profiles): add dell cctk. 2023-10-26 22:40:21 +01:00
Alexandre Pujol
aa7fe16a20
feat(profile): improve opensuse integration. 
See #208
 2023-10-20 23:50:26 +01:00
Alexandre Pujol
e26302b155
feat(profile): general update. 2023-10-20 23:13:11 +01:00
Alexandre Pujol
1cfe802172
feat(profile): support open suse path for git. 
See #208
 2023-10-09 21:01:49 +01:00
Alexandre Pujol
b5fbef8eef
feat(profiles): general update. 2023-10-08 14:00:21 +01:00
Alexandre Pujol
352c444ae6
feat(profiles): general update. 2023-10-01 16:06:28 +01:00
Alexandre Pujol
c8ee832c11
feat(profile): general update 2023-09-29 19:25:30 +01:00
Alexandre Pujol
6a78b17d23
feat(profiles): general update. 2023-09-15 22:01:08 +01:00
Alexandre Pujol
6db83003c7
feat(profiles): general update. 2023-09-12 22:59:07 +01:00
Alexandre Pujol
6c397882ad
feat(dbus): update dbus rules. 2023-09-12 22:55:24 +01:00
Alexandre Pujol
b9fb4b72d2
fix: minor profiles fixes. 2023-09-10 12:41:47 +01:00
Alexandre Pujol
e381aace56
feat(profiles): ensure child-open is available. 2023-09-10 12:10:14 +01:00
curiosityseeker
aaed7a25da
Various updates (#209) 2023-09-10 10:59:26 +00:00
nobody43
5d7ce06a62 scratch that 2023-09-10 11:58:13 +01:00
nobody43
d414083113 Debian 12 Gnome DE 2023-09-10 11:58:13 +01:00
Alexandre Pujol
f008e9c6cf
feat: remove some useless or deprecated profiles 2023-09-07 17:59:29 +01:00
Alexandre Pujol
6b159fe918
feat: cleanup ignored profile list. 2023-09-07 17:58:47 +01:00
Alexandre Pujol
7c24dde028
feat(profile): rewrite profile for vscode (wip). 2023-09-05 19:15:01 +01:00
Alexandre Pujol
155ef6bef1
feat(profiles): general update. 2023-09-05 16:42:06 +01:00
Alexandre Pujol
a3cacccd90
fix(profiles): ensure some profile do not break when sandboxed. 
See #191
 2023-09-05 16:34:22 +01:00
Alexandre Pujol
ca2469c470
feat(profiles): add aa-teardown 2023-09-03 20:27:32 +01:00
Alexandre Pujol
b2fa7bacb8
feat(profiles): general update. 2023-09-01 22:50:43 +01:00
Alexandre Pujol
993d490a62
feat(profiles): add aa-complain. 2023-08-27 15:47:49 +01:00
Alexandre Pujol
a30d3dd415
feat(profiles): add element-desktop. 2023-08-27 15:42:30 +01:00
Alexandre Pujol
22e57b3620
feat(profiles): apply guideline on some profile. Update flags list. 2023-08-27 15:30:18 +01:00
Alexandre Pujol
75ef5ef6ad
feat(profiles): general update. 2023-08-27 14:54:04 +01:00
Alexandre Pujol
ec3c5cd62e
feat(profiles): improve kde integration. 2023-08-27 14:32:08 +01:00
Alexandre Pujol
07cfbcd952
feat(profiles): modernize udev access. 2023-08-24 19:31:54 +01:00
Alexandre Pujol
96b8f96137
feat(profiles): general update. 2023-08-22 23:23:47 +01:00
Alexandre Pujol
275d6b6e62
feat(profiles): replace old [0-9]* glob by @{int} 
Beware some [0-9]* glob are actually not proper @{int}.
 2023-08-18 17:09:53 +01:00
Alexandre Pujol
557d905543
Merge branch 'tunables' of https://github.com/nobody43/apparmor.d into nobody43-tunables 
* 'tunables' of https://github.com/nobody43/apparmor.d:
  dbus temp tails
  Update apparmor.d
  Update gdm-runtime-config
  more unrelated changes
  adjust date-time
  random tails
  rename to int, convert more profiles
  fixes
  tunables
 2023-08-17 20:01:53 +01:00
Alexandre Pujol
5ee31716ae
feat(profile): split evince profiles in multiple files. 2023-08-17 18:47:53 +01:00
Alexandre Pujol
f3ab8d2c71
refractor: rename some vscode related profile 2023-08-17 18:47:01 +01:00
Alexandre Pujol
5d47dfba95
feat(profiles): general update. 2023-08-17 18:43:56 +01:00
Alexandre Pujol
1cac6715db
feat(profiles): general update. 2023-08-06 16:30:38 +02:00
Alexandre Pujol
cdc10fdb31
feat(profiles): general update. 
See #134
 2023-08-06 16:06:17 +02:00
curiosityseeker
4894d6a3c4
Adding /dev/tty[0-9]* and /dev/pts/[0-9]* to various profiles; update kded5 and reflector (#183) 
* Update update-mime-database

* Update btrfs

* Update update-grub

* Update pacman-hook-depmod

* Update pacman

* Update systemd-sysusers

* Update lscpu

* Update pacman-hook-systemd

* Update pacman-hook-perl

* Update pacman-hook-gtk

* Update needrestart-iucode-scan-versions

* Update reflector

* Update kded5
 2023-07-27 11:23:04 +00:00
ShellCode
0f9b7cb474
Fix #184 (#185) 
* Replace @{HOME}/.config with @{user_config_dirs}

* Replace @{HOME}/.cache with @{user_cache_dirs}

* Replace @{HOME}/.local/state with @{user_state_dirs}

* Add missing user_share_dirs to apparmor.d/tunables/home.d/apparmor.d

* Update docs/variables.md

* Replace @{HOME}/.local/share with @{user_share_dirs}

* Replace @{HOME}/.local/lib with @{user_lib_dirs}

* Revert "Add missing user_share_dirs to apparmor.d/tunables/home.d/apparmor.d"

This reverts commit 9525003098.
 2023-07-27 11:20:19 +00:00
Alexandre Pujol
2307c536b3
feat: add XDG_MAIL_DIR variable 2023-07-20 21:19:23 +01:00
Alexandre Pujol
af1eda51bd
feat(profiles): general update. 2023-07-20 21:07:27 +01:00
Alexandre Pujol
d2a650f6c6
feat(profiles): improve dbus integration. 2023-07-20 21:00:41 +01:00
Alexandre Pujol
2a4fa1e6de
refactor(profiles): move thunderbird and code profiles. 2023-07-20 20:54:36 +01:00
Alexandre Pujol
9c08b36182
feat(profiles): general update. 2023-07-18 22:28:30 +01:00
Alexandre Pujol
43b0f09b65
refactor(profiles): use @{bin} and @{lib} in profiles (4) 2023-07-09 14:23:22 +01:00
Alexandre Pujol
6715564053
feat(profiles): general update. 2023-07-08 12:37:40 +01:00
Alexandre Pujol
11617131ce
feat(profiles): general update. 2023-07-03 14:09:25 +01:00
Jeroen Rijken
5ccd92e12f General update 
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
 2023-06-13 17:58:22 +01:00
Alexandre Pujol
a98a86600a
feat(profiles): general update. 2023-06-13 17:15:37 +01:00
Alexandre Pujol
3c41453591
feat: better wayland client integration. 2023-05-27 23:54:53 +01:00
Alexandre Pujol
526dcc3252
feat(profiles): general update. 2023-05-07 20:34:00 +01:00
Alexandre Pujol
1e533ec656
feat(profiles): general update. 2023-04-26 18:39:23 +01:00
Alexandre Pujol
ef687d7149
feat(profiles): general update. 2023-04-24 18:58:58 +01:00
curiosityseeker
bde3ca0d08 Update cupsd 2023-04-05 13:52:23 +01:00
curiosityseeker
07e5a0d43a Update cupsd 2023-04-04 13:51:02 +01:00
curiosityseeker
f3698ad4fe Update dnscrypt-proxy 
dnscrypt-proxy should be able to read all files in /etc/dnscrypt-proxy
 2023-04-04 13:51:02 +01:00
curiosityseeker
222e9b96eb Update aa-status 2023-04-04 13:51:02 +01:00
nobody43
2a20b69c65 readers 2023-04-03 18:20:15 +01:00
Alexandre Pujol
fa4d065f52
feat(profile): minor profile update. 
See: #137
 2023-03-31 18:47:32 +01:00
Alexandre Pujol
e927145edb
feat(profiles): general update. 2023-03-31 16:52:35 +01:00
Alexandre Pujol
cbc1d8faf3
feat(profiles): small profiles update. 2023-03-29 23:55:43 +01:00
Alexandre Pujol
df792530cd
feat(profile): add kreadconfig5 & some network integration. 
See: #134
 2023-03-28 22:11:12 +01:00
Alexandre Pujol
4ca3ced1a5
feat(browserpass): gpg give access to password repo. 2023-03-27 21:43:38 +01:00
Alexandre Pujol
b793968690
feat(profiles): general update. 2023-03-27 21:42:13 +01:00
Alexandre Pujol
02499d90f0
feat(profiles): general update. 2023-03-25 15:48:59 +00:00
Alexandre Pujol
1042728ca6
feat(profiles): general update. 2023-03-12 15:35:59 +00:00
Alexandre Pujol
25e2d9d1f4
feat(profiles): ensure gpg stays confined. 2023-03-12 15:33:21 +00:00
Alexandre Pujol
8bdce8bd62
feat(profiles): finishing replacing local *_ext variables. 2023-03-12 15:24:53 +00:00
Alexandre Pujol
0d6e3deb24
feat(profiles): start replacing local *_ext variables. 2023-03-10 10:24:02 +00:00
Alexandre Pujol
52b3c1bcc5
feat(profiles): general update. 2023-03-10 10:20:48 +00:00
Alexandre Pujol
558cb68f23
feat(profiles): general update. 2023-03-07 17:57:57 +00:00
Alexandre Pujol
3ff8e3847d
feat(profiles): general update. 2023-03-03 12:20:10 +00:00
nobody43
c4edf2a6c7 cleanup 2023-03-02 17:50:45 +00:00
nobody43
8c0e0a9de1 freedesktop 2023-03-02 17:50:45 +00:00
nobody43
a873af1f26 general_initial 2023-02-22 21:52:55 +00:00
Alexandre Pujol
6c88213562
feat(aa-log): new journalctl command means new log file. 2023-02-19 21:19:25 +00:00
Alexandre Pujol
ef292b585c
feat(profiles): first set of rules for Ubuntu Core support. 2023-02-19 18:22:18 +00:00
Alexandre Pujol
d66a8fa082
feat(profiles): general update. 2023-02-19 17:42:05 +00:00
Alexandre Pujol
9b1aaeb68f
feat(firewalld): forgot non legacy nft. 
See #101.
 2023-02-12 21:59:41 +00:00
Alexandre Pujol
fbd5996531
feat(profiles): general update. 2023-02-11 19:03:01 +00:00
Alexandre Pujol
f20ccedf4f
feat(profiles): general update. 2023-02-07 23:18:10 +00:00
Alexandre Pujol
37dd97a875
feat(profiles): a the XDG_IMG_DIR and user_img_dirs variables 2023-02-07 23:15:18 +00:00
Alexandre Pujol
d29bee2789
feat(profiles): add chronyd. 2023-02-04 23:56:56 +00:00
Alexandre Pujol
e93e80ee20
feat(opensuse): final opensuse integration. 2023-02-04 23:55:14 +00:00
Alexandre Pujol
5bc4860c39
feat(opensuse): add firewalld 2023-02-04 23:44:46 +00:00
Alexandre Pujol
ff64fbfa51
feat(profiles): cleanup some profiles. 2023-02-04 23:36:49 +00:00
Alexandre Pujol
bac87f9547
feat(profiles): use /etc read only variable: etc_ro 2023-02-04 23:34:29 +00:00
Alexandre Pujol
6e56cfccc9
feat(profiles): make profile entrypoint more universal. 2023-02-04 23:28:17 +00:00
Alexandre Pujol
e9d61fb7d9
feat(profiles): gpg -> gpg{,2} 2023-02-04 19:02:47 +00:00
Alexandre Pujol
8dca20c5c6
feat(profiles): general update. 2023-02-01 22:37:33 +00:00
nobody43
8bb5b064d1 fixes 2023-01-28 15:25:01 +00:00
nobody43
80de79b66a Add new profiles 2023-01-28 15:25:01 +00:00
Alexandre Pujol
23312c1640
feat(profile): ensure compatibility with userspace tools. 2023-01-27 22:00:10 +00:00
Alexandre Pujol
5a722c42a2
feat(profiles): rewrite the vlc profile. 2023-01-26 20:02:33 +00:00
Jeroen Rijken
118c412378 General update 2023-01-22 12:45:32 +00:00
Alexandre Pujol
64ad329dd9
feat(profiles): Cleanup udev rules. 2023-01-19 18:51:16 +00:00
Alexandre Pujol
2f563fa818
feat(profile): general update. 2023-01-18 23:37:06 +00:00
Alexandre Pujol
4b5d1e1a79
feat(profile): general update. 
See:  #101
 2023-01-16 19:01:22 +00:00
Alexandre Pujol
1f16025c10
feat(profile): general update. 
See:  #102
 2023-01-15 19:22:18 +00:00
Alexandre Pujol
c59a40ec4e
feat(profiles): general update. See #101 2023-01-15 17:15:26 +00:00
Alexandre Pujol
f20aa4f548
feat(profiles): general update. 2023-01-14 13:28:21 +00:00
Alexandre Pujol
2431ba98aa
feat(profile): include more rule from #94. 2023-01-14 13:00:01 +00:00
Alexandre Pujol
ee83e1c33c
feat(profiles): general update. 2022-12-09 19:14:56 +00:00
nobody43
038e2882b5 wireshark 2022-11-30 20:45:13 +00:00
Alexandre Pujol
1e5d90afe8
feat(profiles): general update. 2022-11-29 12:02:38 +00:00
Alexandre Pujol
d52a7bd52a
fix(profiles): fix wayland cursor path. 2022-11-29 11:57:23 +00:00
Alexandre Pujol
9a46df81b9
feat(profiles): remove rules promoted into the base abstraction. 2022-11-28 18:05:29 +00:00
Alexandre Pujol
0837c158cb
feat(profiles): general update. 2022-11-13 18:27:47 +00:00
Alexandre Pujol
26f838b73f
feat(profiles): general update. 2022-11-11 22:18:55 +00:00
Alexandre Pujol
157e2a5df6
feat(profiles): grub update. 2022-11-03 21:42:16 +00:00
nobody43
f94faf697e
Read-only root compatibility (#86) 
* Read-only root compatibility

* remove complain

Co-authored-by: nobodysu <nobodysu@users.noreply.github.com>
 2022-10-18 18:23:52 +00:00
nobodysu
643a84997e
Unbreak Debian 11 and partially Ubuntu 22.04 (Wayland+GDM+Gnome) (#81) 
* Unbreaking Debian 11 and partially Ubuntu 22.04

* pre-cleanup

* pre-cleanup2

* Update im-launch

* Update gnome-extension-ding

* polishing

* not yet

* Update ubuntu.flags

Allow GDM to boot. `No new privs` fix.

* Update debian.flags

Allow GDM to boot. `No new privs` fix.

* Update CONTRIBUTING.md

* fixes

* reverting w

* move setpriv to main.flags
 2022-10-14 21:21:56 +00:00
Alexandre Pujol
b1950cbe91
feat(profiles): general update. 2022-10-14 22:17:27 +01:00
Alexandre Pujol
eddf6bfc4f
feat(profiles): general update. 2022-10-08 13:13:44 +01:00
Alexandre Pujol
ddedb39f3d
refactor: move profile in correct group. 2022-10-06 20:51:30 +01:00
Alexandre Pujol
4681a495b3
feat(profiles): general update. 2022-10-01 18:45:08 +01:00
Alexandre Pujol
205c2d7184
feat(profiles): new children group. 
This group is reserved for profile  without an attachment path because
it is ended to be used only via "Px -> <profile-name>".
 2022-09-26 14:59:18 +01:00
Alexandre Pujol
a02e67d980
feat(profiles): askpass -> code-askpass. 2022-09-24 18:08:00 +01:00
Alexandre Pujol
f2989321eb
feat(profiles): general update. 2022-09-24 18:06:06 +01:00
Alexandre Pujol
ae6cecde52
feat(profiles): deny gvfs-metadata when possible. 2022-09-24 17:59:20 +01:00
beroal
fcee586e9e
viewing DjVu and PostScript files (#78) 2022-09-24 11:13:21 +00:00
Alexandre Pujol
58e060c470
Merge branch 'master' of github.com:roddhjav/apparmor.d 
* 'master' of github.com:roddhjav/apparmor.d:
  bulk cross-OS awk (#75)
 2022-09-11 20:48:03 +01:00
Alexandre Pujol
8ff5ed7a69
feat(profiles): general update. 2022-09-11 20:45:14 +01:00
nobodysu
78a180b2f6
bulk cross-OS awk (#75) 2022-09-11 19:40:34 +00:00
Jeroen
9818daba5f
LVM and general update (#68) 
* Small fixes

* General update

* Add LVM

* Various small fixes

* Add profile

* Typo

* sbin to regex

* Date and time to extends

* Read cmdline

* Remove grep duplicate

* Small fixes

* Typo

* Permissions for warning scripts

* Add net_admin for multipath
 2022-09-06 21:01:17 +00:00