REmerald
b66274b2ca
fix(systemd-oomd): remove double slash
...
Double slash caused the path to not work
2024-06-06 18:40:35 +01:00
REmerald
aa0e33804a
fix(pacman): add attach_disconnected flag
...
Fixes #350
2024-06-06 11:50:01 +01:00
REmerald
b6b0062886
fix(arch.flags): add attach_disconnected to pacman
...
Fixes #350
2024-06-06 11:50:01 +01:00
REmerald
46008e4edb
fix(gvfsd-fuse): add abstractions/nameservice-strict
2024-06-06 11:48:28 +01:00
REmerald
ac86b5ac78
fix(gvfsd): add abstractions/nameservice-strict
2024-06-06 11:48:28 +01:00
REmerald
d1ec0b90fc
fix(xdg-permission-store): add abstractions/nameservice-strict and @{HOME}/.local/
2024-06-06 11:47:38 +01:00
REmerald
2ea558c146
fix(xdg-document-portal): use abstractions/nameservice-strict
2024-06-06 11:41:46 +01:00
REmerald
11e05037c3
fix(xdg-document-portal): add /etc/nsswitch.conf, /etc/passwd
2024-06-06 11:41:46 +01:00
valoq
0565558fe0
complete atool
2024-06-06 11:40:18 +01:00
REmerald
e937eabd4e
fix(nm-dispatcher): add modem-manager-gui
2024-06-06 11:39:04 +01:00
REmerald
8f05f02356
fix(systemd-oomd): shorten paths
2024-06-06 11:38:21 +01:00
REmerald
281768667a
fix(systemd-oomd): change to {,**/}
2024-06-06 11:38:21 +01:00
REmerald
6801ae1e0c
fix(systemd-oomd): make org.a11y.atspi.Registry.slice as in apparmor.d/groups/gnome/epiphany-search-provider
2024-06-06 11:38:21 +01:00
REmerald
5a8510a1f7
fix(systemd-oomd): add cgroup/system.slice/ and app-dbus* paths
2024-06-06 11:38:21 +01:00
REmerald
37d0a36763
fix(polkit-gnome-authentication-agent): include dconf-write
2024-06-06 11:37:53 +01:00
Alexandre Pujol
c3de88e476
build(opensuse): update exclude files.
...
These files are now managed in dists/ignore/
2024-06-04 20:36:51 +01:00
Alexandre Pujol
70697cf315
ci: fix opensuse build & re-enable ubuntu preprocess.
2024-06-04 20:26:32 +01:00
Alexandre Pujol
8b60e56002
feat(profile): general update.
2024-06-04 20:13:40 +01:00
Alexandre Pujol
d98621625a
chore: small fixes and cosmetic.
2024-06-04 20:01:05 +01:00
Alexandre Pujol
41c0e57eca
build: better way to handle debian hide file.
...
only needed as whonix needs special addition.
2024-06-04 19:55:53 +01:00
Alexandre Pujol
13d3b23a04
fix(opensuse): ensure integration on opensuse.
2024-06-04 19:52:56 +01:00
Alexandre Pujol
34973baaea
build: use the same technique to disable upstream profile on all distribution.
...
Only enabled on Ubuntu & opensuse
2024-06-04 19:52:06 +01:00
REmerald
c40c3e1c98
fix(lspci): add /run/modprobe.d
2024-06-03 21:19:10 +01:00
REmerald
789ba3836e
fix(kmod): add /run/modprobe.d
2024-06-03 19:09:46 +01:00
Alexandre Pujol
951bf6a840
Merge branch 'main' of github.com:roddhjav/apparmor.d
...
* 'main' of github.com:roddhjav/apparmor.d:
fix(systemd-oomd): add `app.slice` and `session.slice` paths
polkit-kde-authentication-agent update (#345 )
add multiple profiles (#341 )
2024-06-03 19:06:35 +01:00
Alexandre Pujol
0fa7985f0e
doc: improve documentation.
2024-06-03 19:06:02 +01:00
Alexandre Pujol
ff16790421
feat(abs): general update.
2024-06-03 18:37:12 +01:00
Alexandre Pujol
a1fe682e7a
feat(profile): update btop.
2024-06-03 18:34:55 +01:00
REmerald
f9442e8258
fix(systemd-oomd): add app.slice and session.slice paths
2024-06-03 17:52:34 +01:00
curiosityseeker
8dff2ddd72
polkit-kde-authentication-agent update ( #345 )
...
* Update polkit-kde-authentication-agent
needs mediate_deleted
* Update main.flags
* Update polkit-kde-authentication-agent
* Update polkit-kde-authentication-agent
2024-06-02 20:19:43 +00:00
valoq
bb772167f0
add multiple profiles ( #341 )
...
* add multiple profiles
2024-05-31 10:47:01 +00:00
Alexandre Pujol
45ae8f5d27
feat(abs): add pgrep.
2024-05-30 21:08:03 +01:00
Alexandre Pujol
3f688be7a0
feat(profile): general update.
2024-05-30 21:03:39 +01:00
Alexandre Pujol
16f30007e7
chore(aa): cosmetic.
2024-05-30 20:56:53 +01:00
Alexandre Pujol
4282fb336e
refractor(aa): move some test resource to the testdata dir.
2024-05-30 20:10:45 +01:00
Alexandre Pujol
89abbae6bd
Merge branch 'feat/aa'
...
Improve go apparmor lib.
* aa: (62 commits)
feat(aa): handle appending value to defined variables.
chore(aa): cosmetic.
fix: userspace prebuild test.
chore: cleanup unit test.
feat(aa): improve log conversion.
feat(aa): move conversion function to its own file & add unit tests.
fix: go linter issue & not defined variables.
tests(aa): improve aa unit tests.
tests(aa): improve rules unit tests.
feat(aa): ensure the prebuild jobs are working.
feat(aa): add more unit tests.
chore(aa): cleanup.
feat(aa): Move sort, merge and format methods to the rules interface.
feat(aa): add the hat template.
feat(aa): add the Kind struct to manage aa rules.
feat(aa): cleanup rules methods.
feat(aa): add function to resolve include preamble.
feat(aa): updaqte mount flags order.
feat(aa): update default tunable selection.
feat(aa): parse apparmor preamble files.
...
2024-05-30 19:29:34 +01:00
fira959
d12db8a8dc
Minor improvements ( #336 )
...
* Update audio-client
* Update mpv
* Update mutt
add common mail dir
* Update apparmor.d
* Update mutt
* Update mutt
* Update mutt
* Update mutt
* Update mutt
2024-05-30 17:51:57 +00:00
Alexandre Pujol
7f1de3626e
feat(aa): handle appending value to defined variables.
2024-05-30 14:23:56 +01:00
Alexandre Pujol
264f30cf12
chore(aa): cosmetic.
2024-05-30 14:19:56 +01:00
Alexandre Pujol
fd46c0de30
fix: userspace prebuild test.
2024-05-30 14:18:57 +01:00
Alexandre Pujol
cfd4786f76
chore: cleanup unit test.
2024-05-30 13:10:07 +01:00
Alexandre Pujol
7efa4b3a4b
feat(aa): improve log conversion.
2024-05-30 12:34:10 +01:00
Alexandre Pujol
992cab1fa4
feat(aa): move conversion function to its own file & add unit tests.
2024-05-30 12:32:30 +01:00
Alexandre Pujol
bc216176a3
fix: go linter issue & not defined variables.
2024-05-30 12:28:12 +01:00
curiosityseeker
adccd0066a
Fix typo in @{text_edirors} ( #338 )
...
* Fix typo in multiarch.d/programs
* Fix typo in multirach.d/paths
* Fix typo in abstractions/app-open
2024-05-29 20:41:23 +00:00
curiosityseeker
94d9570230
Firefox: using stacking for glxtest and vaapitest ( #337 )
...
The current implementation results in the following errors for the Firefox profile:
@{lib}/firefox/glxtest rix -> firefox-glxtest, # no new privs
@{lib}/firefox/vaapitest rix -> firefox-vaapitest, # no new privs
Using stacking as suggested on https://apparmor.pujol.io/development/structure/#no-new-privileges gets rid of these errors.
2024-05-29 20:41:01 +00:00
Alexandre Pujol
0f382a4d5d
tests(aa): improve aa unit tests.
2024-05-29 21:18:30 +01:00
Alexandre Pujol
5f64bb4e0c
tests(aa): improve rules unit tests.
2024-05-29 21:17:21 +01:00
Alexandre Pujol
23eaa20fb7
feat(aa): ensure the prebuild jobs are working.
2024-05-29 21:12:54 +01:00
Alexandre Pujol
fe4c86a245
feat(aa): add more unit tests.
2024-05-28 18:23:37 +01:00
