Commit Graph

2574 Commits

Author SHA1 Message Date
Alexandre Pujol
61e2cb55ac
feat(profile): rewrite the dbus profiles.
Replace the old dbus-broker/dbus-daemon profiles stack by a new unified set of
profiles that does not depend-on the dbus implementation used.

Ensure that a given bus is fully managed by one unified profile:
- We need to allow far fewer rules than before (especially by splitting
  dbus-system and dbus-session).
- It has the side effect to fix some long-running issues regarding dbus start
  (see: #74, #80 & #235) while keeping all dbus server in the same place.
2024-03-16 13:03:32 +00:00
Alexandre Pujol
4819022202
feat(abs): add unix_chkpwd to the authentication abs as upstream. 2024-03-16 12:27:23 +00:00
Alexandre Pujol
e658d1c4d3
feat(profile): restrict access to /var/lib/gdm in gnome-shell. 2024-03-16 00:22:30 +00:00
Alexandre Pujol
66aa230b90
feat(profile): some dbus rule improvment. 2024-03-15 23:56:23 +00:00
Alexandre Pujol
1b8b52962b
feat(fsp): update mounting rules. 2024-03-15 23:45:18 +00:00
Alexandre Pujol
e3f9013c3a
feat(profile): add some new profiles. 2024-03-15 16:21:17 +00:00
Alexandre Pujol
dd1b3b16e2
feat(profile): move gcr tools. 2024-03-15 16:18:44 +00:00
Alexandre Pujol
a66ff700a2
build: split systemd drop file in function of their purpose.
default: ensure a service use a given profile
early: ensure a service start after apparmor.
2024-03-15 16:17:19 +00:00
Alexandre Pujol
cf4e47f10f
feat(profile): general update. 2024-03-15 16:07:53 +00:00
Alexandre Pujol
9f3be7a96d
feat(abs): small improvements. 2024-03-15 15:55:46 +00:00
Alexandre Pujol
bdeb62d17d
feat(profile): add some missing dbus own definition. 2024-03-15 15:03:42 +00:00
Alexandre Pujol
a6d263d304
tests(packer): ensure vm images are built with the same cpu model than the host. 2024-03-15 14:56:57 +00:00
Alexandre Pujol
3fc4c29968
tests(packer): cleanup cloud init files. 2024-03-15 14:55:46 +00:00
Alexandre Pujol
c3c61a9270
build(opensuse): add missing directory. 2024-03-13 18:48:12 +00:00
Alexandre Pujol
9f0306a8ac
feat(build): ensure thge a0t-spi-dbus service start with the good profile. 2024-03-13 16:21:28 +00:00
Alexandre Pujol
30656bdc48
feat(abs): minor improvements over some abstractions. 2024-03-13 16:18:54 +00:00
Alexandre Pujol
c33cd740c9
feat(profile): start using the sudo abstraction. 2024-03-13 16:17:20 +00:00
Alexandre Pujol
7415b85e1c
feat(profile): add some internal kde profile. 2024-03-13 16:10:02 +00:00
Alexandre Pujol
0ecf923fb9
feat(profile): cleanup tool available for pacman hooks. 2024-03-13 16:07:43 +00:00
Alexandre Pujol
09f1babb7c
chore: improve comments on udev data. 2024-03-13 15:58:28 +00:00
Alexandre Pujol
fef6390b9e
feat(profile): merge gdm-session. 2024-03-13 15:52:23 +00:00
Alexandre Pujol
3bb5ea72df
feat(profile): add profile for yacreader. 2024-03-12 16:06:24 +00:00
Alexandre Pujol
467c38724a
feat(profile): clean superfluous openssl abstraction includes
apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
2024-03-12 16:00:44 +00:00
Alexandre Pujol
d5972cdf1d
feat(abs): add gnutls and openssl config to the crypto abs.
Follow (and confirm) recent addition from upstream.
2024-03-12 15:50:28 +00:00
Alexandre Pujol
9c859cec9d
feat(profile): modernize some profiles. 2024-03-12 15:48:43 +00:00
Alexandre Pujol
81b9de3aff
feat(profile): use the new audio-client abs in profiles. 2024-03-12 15:44:40 +00:00
Alexandre Pujol
e4c0f683d2
feat(profile): replace old audio abstraction by the new stack. 2024-03-12 15:39:10 +00:00
Alexandre Pujol
b1235b0c52
feat(abs): rewrite the audio stack. 2024-03-12 15:27:51 +00:00
Alexandre Pujol
394afb1991
feat(abs): add the new sudo abstraction. 2024-03-11 22:48:32 +00:00
Alexandre Pujol
0eeefb5f09
feat(profile): general update. 2024-03-11 22:47:22 +00:00
Alexandre Pujol
0a9021bcf1
feat(profile): finalize the update kde profiles to plasma 6. 2024-03-11 22:43:37 +00:00
Alexandre Pujol
042e9ff543
feat(profile): rewrite the okular profile. 2024-03-11 22:37:59 +00:00
Alexandre Pujol
a3f91f4224
feat(profile): ensure at bus start in the same profile. 2024-03-11 22:36:14 +00:00
Alexandre Pujol
2acd7d8a10
feat(profile): rewrite how gdm starts gnome. 2024-03-11 22:34:35 +00:00
Alexandre Pujol
68fbd81e17
feat(profile): general update. 2024-03-10 21:21:00 +00:00
Alexandre Pujol
ad8e5a9797
feat(fsp): update profile stack. 2024-03-10 21:17:50 +00:00
Alexandre Pujol
10ce0ba4a1
feat(profile): merge colord-sane into colord.
Required due to nnp flag enabled on colord-sane. As the profiles are similar it is easier to merge them.
2024-03-10 20:27:05 +00:00
Alexandre Pujol
7882ae2153
feat(profile): remove rule moved to the base abstraction. 2024-03-10 20:01:58 +00:00
Alexandre Pujol
beaf1bad16
feat(profile): general update. 2024-03-10 19:35:04 +00:00
Alexandre Pujol
b0d52d68f4
build: refractor internal tools. 2024-03-10 19:07:55 +00:00
Alexandre Pujol
df21886965
fix(fsp): fix conflicting x modifiers in abstractions 2024-03-10 18:57:05 +00:00
Alexandre Pujol
e3545cc3bb
feat(aa-log): improve the regex helper type. 2024-03-10 15:53:25 +00:00
Alexandre Pujol
84247e390c
ci(github): ensure install does not fail too early to show error message. 2024-03-10 14:59:02 +00:00
Alexandre Pujol
8f1fff89ab
feat(abs): minor improvments. 2024-03-10 14:56:18 +00:00
Alexandre Pujol
a8b8bf52f8
feat(fsp): stack audio profiles using the new stack directive. 2024-03-10 14:51:22 +00:00
Alexandre Pujol
16d0af1c5e
feat(fsp): improve systemd profile. 2024-03-10 14:49:31 +00:00
Alexandre Pujol
70b043cdae
build: improve build tests 2024-03-10 14:48:05 +00:00
Alexandre Pujol
be373dfb80
fix(build): rename boolean. 2024-03-10 14:47:13 +00:00
Alexandre Pujol
78a96eecd2
build: add a new "stack" directive. 2024-03-10 14:46:34 +00:00
Alexandre Pujol
f5aacbd029
build(debian): use hide instead of displace to overwrite upstream profiles. 2024-03-10 14:43:43 +00:00