mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-14 16:26:43 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
2840 commits 6 branches 0 tags 15 MiB
Commit graph

2067 commits

Author SHA1 Message Date
Alexandre Pujol
d6b7bef89e
feat(profile): enable abi 4 rules by default. 2024-10-02 14:19:26 +01:00
Alexandre Pujol
5ed4df6916
feat(profile): update all profile to abi 4.0 by default. 2024-10-02 14:04:08 +01:00
Alexandre Pujol
239ae17119
feat(profile): modernize some profiles. 2024-10-02 13:46:30 +01:00
valoq
ba186647cd add missing read permissions 2024-10-01 20:13:16 +00:00
EricLin0509
3ebaf5bb29
Add support for wechat-universal (#540) 
* Add support for wechat-universal

* A small fix
 2024-10-01 20:12:35 +00:00
odomingao
507727caa3 Update pokemmo 2024-10-01 20:12:03 +00:00
odomingao
89e39fc501 Update hyprland 2024-10-01 20:12:03 +00:00
odomingao
b7434eb91b Create pokemmo 2024-10-01 20:12:03 +00:00
Alexandre Pujol
af50944fb5
feat(profile): general update. 2024-10-01 20:17:13 +01:00
Alexandre Pujol
460ac12bfb
feat(profile): dbus: Dbus can receive any user files 2024-10-01 20:11:03 +01:00
Alexandre Pujol
30999904e7
fix(profile): various fixes 
fix #528 #527 #518 #517
 2024-10-01 19:19:16 +01:00
Alexandre Pujol
e6b1763bbc
fix(profile): nethogs 
fix 530
 2024-10-01 18:35:52 +01:00
Alexandre Pujol
e7620c7517
fix(profile): child-pager: needs file magic 
fix #533
 2024-10-01 18:34:45 +01:00
Alexandre Pujol
bd0f3448cb
fix(profile): whereis: allow search in /opt. 
fix #532
 2024-10-01 18:32:39 +01:00
Alexandre Pujol
b96362d915
fix(profile): add mkinitcpio to create UKI. 
fix #535
 2024-10-01 18:30:13 +01:00
Alexandre Pujol
7033a13bc2
fix(profile): update ufw. 
fix #537
 2024-10-01 18:15:51 +01:00
Alexandre Pujol
cee1e9a3f2
fix(profile): nnp in strawberry. 
fix #538
 2024-10-01 18:09:52 +01:00
Alexandre Pujol
8730c09b96
feat(profile): general update. 2024-10-01 17:43:54 +01:00
Alexandre Pujol
21e8456383
feat(abs): general improvment. 2024-10-01 17:29:49 +01:00
Alexandre Pujol
63888f07a7
fix(profile): flatpak app range. 
fix #519
 2024-09-27 14:39:01 +01:00
Alexandre Pujol
c6c4920598
feat(profile): newer gnome want to read /. 2024-09-26 20:36:14 +01:00
Alexandre Pujol
549c6ba2f5
feat(profile): ubuntu: improve integration with ubuntu. 2024-09-26 20:34:12 +01:00
Alexandre Pujol
3f13aa77bf
feat(profile): update some dbus rules. 2024-09-26 20:29:33 +01:00
Alexandre Pujol
fbb0d62aee
fix(profile): ensure sandboxed app ca write font cache. 2024-09-26 20:21:48 +01:00
Roman Beslik
03e974525e Narrowed the temporary file permission 2024-09-26 13:06:26 +00:00
Roman Beslik
e16ade603a Includes have been sorted alphabetically 2024-09-26 13:06:26 +00:00
Roman Beslik
f70e17da33 Changed the profile attachment to the variable 2024-09-26 13:06:26 +00:00
Roman Beslik
779377ce4c Get images from a scanner 2024-09-26 13:06:26 +00:00
Alexandre Pujol
8fb767a5f9
feat(abs): add user-data abstraction. 
Warning: experiemental, only for abi 4+, requires a prompting client.

See: https://discourse.ubuntu.com/t/ubuntu-desktop-s-24-10-dev-cycle-part-5-introducing-permissions-prompting/47963
 2024-09-25 15:14:16 +01:00
Alexandre Pujol
28b32f1ae3
feat(profile): restrict some access to @{PROC}/@{pid}. 2024-09-25 14:00:29 +01:00
Alexandre Pujol
90a8e44d20
feat(tunable): add more system vars. 2024-09-25 13:05:35 +01:00
Alexandre Pujol
156cce5362
feat(profile): restrict dbus in dbus 
even dbus-* profiles do not need access to the full bus.
 2024-09-25 00:48:42 +01:00
Alexandre Pujol
69f9e8464f
feat(profile): update profiles for gnome 47. 2024-09-25 00:14:02 +01:00
Alexandre Pujol
457953876a
feat(profile): improve systemd-dissect 2024-09-24 21:49:56 +01:00
Alexandre Pujol
24e0746efa
fix(profile): libreoffice: support any version of java. 
fix #520
 2024-09-24 21:46:50 +01:00
Alexandre Pujol
6578b55829
fix(profile) Gimp thumbnails log 
fix #522
 2024-09-24 21:44:49 +01:00
Alexandre Pujol
3a34a70181
fix(profile): xfs support in udisksd 
fix #524
 2024-09-24 21:38:51 +01:00
Alexandre Pujol
a0dab01401
feat(profile): update multipath. 
fix #523
 2024-09-24 21:36:49 +01:00
odomingao
67b1c301ed Create vesktop 2024-09-24 10:13:13 +00:00
curiosityseeker
8cc986ab92 Update protonmail 2024-09-24 10:12:52 +00:00
curiosityseeker
0bf60c313f New profile: protonmail 2024-09-24 10:12:52 +00:00
curiosityseeker
97676dcf71 Update sudo 
Condensing requests like:

@{sys}/fs/cgroup/{hostcritical,system,unevictable,user}.slice/*.service/cgroup.procs r,
@{sys}/fs/cgroup/system.slice/system-getty.slice/getty@tty3.service/cgroup.procs r,
@{sys}/fs/cgroup/user.slice/user-1000.slice/user@1000.service/cgroup.procs r,
@{sys}/fs/cgroup/system.slice/system-getty.slice/getty@tty3.service/cgroup.procs r,
@{sys}/fs/cgroup/user.slice/user-1000.slice/user@1000.service/cgroup.procs r,
@{sys}/fs/cgroup/user.slice/user-968.slice/user@968.service/cgroup.procs r,
 2024-09-23 15:00:22 +00:00
valoq
69cc1031ad clean ssh sk helper 2024-09-23 14:46:05 +00:00
valoq
a854b63162 fix profiles 2024-09-23 14:46:05 +00:00
valoq
4660b7d49c add ssh-sk-helper 2024-09-23 14:46:05 +00:00
curiosityseeker
0d5a3405d8 Update protonmail-bridge-core 
because of the following request:

```
/etc/ca-certificates/extracted/*.pem r,
/etc/ssl/certs/{,**} r,
```
 2024-09-23 14:44:58 +00:00
curiosityseeker
c28d05f15f Update protonmail-bridge 
Because of the following requests:

```
owner "@{user_cache_dirs}/Proton AG/" w,
owner @{user_cache_dirs}/protonmail/ w,

owner @{user_config_dirs}/protonmail/ w,

owner @{user_share_dirs}/protonmail/ w,
```
possibly during setup.
 2024-09-23 14:44:58 +00:00
EricLin0509
3a7e4c6705 A Fix for xdg-permission-store 2024-09-23 14:43:56 +00:00
odomingao
8fa2058c55 Small improvement to audio-client 2024-09-23 14:43:28 +00:00
odomingao
18c2f3e8d7 Update gamemoded 2024-09-23 14:43:04 +00:00