curiosityseeker
97676dcf71
Update sudo
...
Condensing requests like:
@{sys}/fs/cgroup/{hostcritical,system,unevictable,user}.slice/*.service/cgroup.procs r,
@{sys}/fs/cgroup/system.slice/system-getty.slice/getty@tty3.service/cgroup.procs r,
@{sys}/fs/cgroup/user.slice/user-1000.slice/user@1000.service/cgroup.procs r,
@{sys}/fs/cgroup/system.slice/system-getty.slice/getty@tty3.service/cgroup.procs r,
@{sys}/fs/cgroup/user.slice/user-1000.slice/user@1000.service/cgroup.procs r,
@{sys}/fs/cgroup/user.slice/user-968.slice/user@968.service/cgroup.procs r,
2024-09-23 15:00:22 +00:00
valoq
69cc1031ad
clean ssh sk helper
2024-09-23 14:46:05 +00:00
valoq
a854b63162
fix profiles
2024-09-23 14:46:05 +00:00
valoq
4660b7d49c
add ssh-sk-helper
2024-09-23 14:46:05 +00:00
curiosityseeker
0d5a3405d8
Update protonmail-bridge-core
...
because of the following request:
```
/etc/ca-certificates/extracted/*.pem r,
/etc/ssl/certs/{,**} r,
```
2024-09-23 14:44:58 +00:00
curiosityseeker
c28d05f15f
Update protonmail-bridge
...
Because of the following requests:
```
owner "@{user_cache_dirs}/Proton AG/" w,
owner @{user_cache_dirs}/protonmail/ w,
owner @{user_config_dirs}/protonmail/ w,
owner @{user_share_dirs}/protonmail/ w,
```
possibly during setup.
2024-09-23 14:44:58 +00:00
EricLin0509
3a7e4c6705
A Fix for xdg-permission-store
2024-09-23 14:43:56 +00:00
odomingao
8fa2058c55
Small improvement to audio-client
2024-09-23 14:43:28 +00:00
odomingao
18c2f3e8d7
Update gamemoded
2024-09-23 14:43:04 +00:00
odomingao
117b54d16c
Create gamemoded
2024-09-23 14:43:04 +00:00
Alexandre Pujol
6723b43559
feat(profile): improve systemsettings.
2024-09-23 15:12:24 +01:00
Alexandre Pujol
31cadd634f
feat(abs): improve some gnome profiles.
2024-09-23 15:11:50 +01:00
Alexandre Pujol
62cb546afa
feat(fps): improve systemd profiles.
2024-09-23 14:59:44 +01:00
Alexandre Pujol
c085c8038b
feat(abs): add glfw.
...
fix #508
2024-09-23 13:57:32 +01:00
Alexandre Pujol
7f657780e5
feat(tunable): add the word @{w} and digit @{d} variables.
2024-09-21 22:24:45 +01:00
Alexandre Pujol
688f2651fd
feat(tunable): improve python name definition.
2024-09-21 22:14:30 +01:00
Alexandre Pujol
c1d8958aed
fix(profile): missing rule in resolvconf.
...
fix #502
2024-09-21 16:07:55 +01:00
Alexandre Pujol
f201168877
fix(profile): thunderbird: cpu.max and owner
...
fix #504
2024-09-21 16:03:02 +01:00
Alexandre Pujol
38a5799979
fix(profile): transmission translation
...
fix #503
2024-09-21 14:35:25 +01:00
Alexandre Pujol
cc33e29af0
feat(profile): dbus: allow to talk with org.gtk.vfs for some profiles.
2024-09-21 13:35:57 +01:00
Alexandre Pujol
89240929e9
feat(profile): thunderbird: allow to open attachment.
2024-09-21 13:19:35 +01:00
Alexandre Pujol
064e9edec2
fix(profile): ensure torbrowser-update can start torbrowser.
2024-09-21 13:18:03 +01:00
Alexandre Pujol
8572a3ec07
doc: improve the directives page.
2024-09-21 13:16:46 +01:00
Alexandre Pujol
e15bdcc9ad
feat(profile): firefox: handle nnp with keepassxc-proxy.
2024-09-20 23:34:03 +01:00
Alexandre Pujol
8979d84633
feat(profile): remove rules already included in the base abs.
2024-09-20 23:30:09 +01:00
Alexandre Pujol
96defe021c
feat(abs): add the pkexec app abs.
2024-09-20 23:24:15 +01:00
Alexandre Pujol
7a3a1f7725
fix(profile): thunderbird: allow saving of draft.
2024-09-19 12:29:13 +01:00
Alexandre Pujol
5def115a0e
build: enforce a few profiles.
2024-09-19 00:20:13 +01:00
Alexandre Pujol
92b45f895c
feat(profile): add child-open-any.
2024-09-19 00:16:07 +01:00
Alexandre Pujol
fa668af54a
feat(profile): add some gnome profiles.
2024-09-19 00:00:54 +01:00
Alexandre Pujol
e9a5edb332
feat(profile): add firewall-applet.
2024-09-18 23:36:00 +01:00
Alexandre Pujol
9be25c8498
feat(profile): add baobab.
2024-09-18 23:32:39 +01:00
Alexandre Pujol
0f4c37c39a
feat(profile): add gimp.
2024-09-18 23:31:48 +01:00
Alexandre Pujol
ddd0388d7d
feat(profile): add mkcert.
2024-09-18 23:18:31 +01:00
Alexandre Pujol
305fceb413
feat(profile): add buildx support in dockerd.
2024-09-18 21:10:04 +01:00
Alexandre Pujol
bdac1adf8f
fix(aa-log): fix cleaning regex.
...
fix #495
2024-09-18 18:31:24 +01:00
Alexandre Pujol
7a53fc3a99
feat(profile): general updtae.
2024-09-18 18:10:27 +01:00
Alexandre Pujol
cc139f1144
feat(abs): update kde abs with common access.
2024-09-18 18:01:16 +01:00
Alexandre Pujol
619aa709f1
feat(abs): add iceauth to X-strict.
2024-09-18 17:06:04 +01:00
Alexandre Pujol
02d8aaee7f
feat(profile): improve integration with kde
...
see #496
2024-09-18 16:59:44 +01:00
Alexandre Pujol
6fd05f26af
feat(login): allow disconnection from login
...
fix #492
2024-09-17 12:58:41 +01:00
Alexandre Pujol
516a1fd36d
fix(profile): multiple minor fixes.
...
fix #493 #480
2024-09-17 12:55:08 +01:00
Alexandre Pujol
7858cae330
feat(profile): torbrowser: do not give access to user dirs by default.
...
- Remove read-only access to most user dirs.
- Remove read-write access to download directories.
fix #490
2024-09-16 13:36:29 +01:00
EricLin0509
2805ed9dd9
Update profile for linuxqq
2024-09-15 21:04:59 +00:00
Alexandre Pujol
58783e06cb
fix(profile): ufw can't determine iptables version
...
fix #485
2024-09-14 15:28:18 +01:00
Alexandre Pujol
09401567a4
feat(profile): base the the thunderbird profile from firefox.
2024-09-13 22:39:43 +01:00
Alexandre Pujol
b03b9b05eb
feat(profile): improve kde integration.
...
see #484
2024-09-13 20:41:22 +01:00
Alexandre Pujol
4ccf2156de
fix(abs): base: allow inherited mesa cache
...
mesa 24.2 introduced a shader disk cache which is enabled by default, which opens quite a lot of fd. They are not closed and get inherited by child programs.
Denying it can cause crash, so we are allowing it globally while the issue is beeing fixed in mesa.
See: https://gitlab.freedesktop.org/mesa/mesa/-/issues/11810
2024-09-13 20:07:41 +01:00
Alexandre Pujol
db064b651e
feat(profile): general update.
2024-09-13 19:47:07 +01:00
Alexandre Pujol
5474a5fa69
feat(tunable): update the arch variable.
2024-09-13 19:40:17 +01:00
