1043 commits

Author	SHA1	Message	Date
Alexandre Pujol	ff76602843	feat(systemd): split systemd-sleep profile.	2023-02-04 23:41:19 +00:00
Alexandre Pujol	ad23864094	feat(opensuse): gnome integration.	2023-02-04 23:39:19 +00:00
Alexandre Pujol	ff64fbfa51	feat(profiles): cleanup some profiles.	2023-02-04 23:36:49 +00:00
Alexandre Pujol	bac87f9547	feat(profiles): use /etc read only variable: etc_ro	2023-02-04 23:34:29 +00:00
Alexandre Pujol	6e56cfccc9	feat(profiles): make profile entrypoint more universal.	2023-02-04 23:28:17 +00:00
Alexandre Pujol	222b57acb5	feat(profiles): rethink the firefox profiles.	2023-02-04 19:43:05 +00:00
Alexandre Pujol	6061d4981b	feat(profiles): chromium_install_dirs -> chromium_lib_dirs	2023-02-04 19:08:02 +00:00
Alexandre Pujol	e9d61fb7d9	feat(profiles): gpg -> gpg{,2}	2023-02-04 19:02:47 +00:00
Alexandre Pujol	8dca20c5c6	feat(profiles): general update.	2023-02-01 22:37:33 +00:00
Alexandre Pujol	f19379c55f	feat(abs): extend deny-sensitive with new user_password_store_dirs var.	2023-02-01 22:34:54 +00:00
Vladimir Bauer	7d660f7c23	gpgconf: allow write access to @{run}/user/@{uid}/gnupg/ (#114)	2023-02-01 10:34:50 +00:00
Vladimir Bauer	01419d82c4	pacman: allow dir read in or below @{user_pkg_dirs} (#113)	2023-01-31 11:43:45 +00:00
Vladimir Bauer	3c3f164e91	minor syntax fix (#112)	2023-01-29 10:53:41 +00:00
Alexandre Pujol	72e0618aa2	feat(profile): libvirt allow CPU information. ... See #101.	2023-01-28 19:09:15 +00:00
nobody43	9c61f7ad3e	remove lsd	2023-01-28 15:25:01 +00:00
nobody43	5a9ae96ae8	let it error, works fine	2023-01-28 15:25:01 +00:00
nobody43	9739f2d69e	Armbian	2023-01-28 15:25:01 +00:00
nobody43	8bb5b064d1	fixes	2023-01-28 15:25:01 +00:00
nobody43	4f3864a9b6	rustdesk	2023-01-28 15:25:01 +00:00
nobody43	02ced44a5c	header	2023-01-28 15:25:01 +00:00
nobody43	80de79b66a	Add new profiles	2023-01-28 15:25:01 +00:00
Alexandre Pujol	7a24f98f48	feat(profiles): general update.	2023-01-27 22:31:55 +00:00
Alexandre Pujol	23312c1640	feat(profile): ensure compatibility with userspace tools.	2023-01-27 22:00:10 +00:00
Alexandre Pujol	b7299cecbb	feat(profiles): remove avahi-daemon as it already exist.	2023-01-27 21:50:11 +00:00
Alexandre Pujol	3498be7a37	feat(profiles): better udev range.	2023-01-26 20:05:47 +00:00
Alexandre Pujol	4521061f73	feat(profiles): remove the unused jdownloader profile.	2023-01-26 20:03:08 +00:00
Alexandre Pujol	5a722c42a2	feat(profiles): rewrite the vlc profile.	2023-01-26 20:02:33 +00:00
Alexandre Pujol	807bf7f1c8	feat(profile): general update.	2023-01-24 20:07:10 +00:00
Alexandre Pujol	9343807632	feat(profiles): audit udev on the browsers.	2023-01-24 19:55:50 +00:00
Jeroen Rijken	118c412378	General update	2023-01-22 12:45:32 +00:00
Alexandre Pujol	64ad329dd9	feat(profiles): Cleanup udev rules.	2023-01-19 18:51:16 +00:00
Alexandre Pujol	43606814cc	fix(profiles): compilation fix.	2023-01-18 23:38:48 +00:00
Alexandre Pujol	2f563fa818	feat(profile): general update.	2023-01-18 23:37:06 +00:00
Alexandre Pujol	5b15521255	feat(profile): gemeral update. ... See: #104.	2023-01-18 23:22:49 +00:00
Alexandre Pujol	a16d645dcb	feat(profile): improve xorg start from xinit. ... See: #105.	2023-01-18 22:52:32 +00:00
Alexandre Pujol	477993df16	fix(profile): gnome-calculator is not yet confined. ... This kind of program should not be confined but sandboxed anyway. See #101	2023-01-18 10:04:17 +00:00
Alexandre Pujol	4b5d1e1a79	feat(profile): general update. ... See: #101	2023-01-16 19:01:22 +00:00
Alexandre Pujol	1f16025c10	feat(profile): general update. ... See: #102	2023-01-15 19:22:18 +00:00
Alexandre Pujol	8ba25a3f6e	feat(profile): rewrite keepassxc. ... See: #102	2023-01-15 18:57:35 +00:00
Alexandre Pujol	55edf06936	feat(profiles): second general update. See #101	2023-01-15 17:38:28 +00:00
Alexandre Pujol	c59a40ec4e	feat(profiles): general update. See #101	2023-01-15 17:15:26 +00:00
Alexandre Pujol	f20aa4f548	feat(profiles): general update.	2023-01-14 13:28:21 +00:00
Alexandre Pujol	c637d03d81	fix(profiles): profile build fix.	2023-01-14 13:24:53 +00:00
Alexandre Pujol	0ec39dfe98	fix(profile): journald: be less strict on file format. ... Fix #98.	2023-01-14 13:20:16 +00:00
Alexandre Pujol	4b10da9fc7	fix(profiles): do not break pacman if the pkg install script is not confined. ... fix #99	2023-01-14 13:10:43 +00:00
Alexandre Pujol	356dfa08e8	fix(profiles): be less precise regarding hadware. ... fix #97	2023-01-14 13:06:27 +00:00
Alexandre Pujol	2431ba98aa	feat(profile): include more rule from #94.	2023-01-14 13:00:01 +00:00
Alexandre Pujol	7c4c48f4c3	fix(profile): initial fix for #94.	2023-01-12 18:24:06 +00:00
Alexandre Pujol	600d929d85	feat(profiles): general update.	2022-12-15 19:41:51 +00:00
Alexandre Pujol	11cc9bd672	feat: merge pacman mkinitcpio hooks.	2022-12-10 19:12:10 +00:00
Alexandre Pujol	c453484eab	fix(profiles): docker pull need full access of the container.	2022-12-10 15:18:00 +00:00
Alexandre Pujol	ee83e1c33c	feat(profiles): general update.	2022-12-09 19:14:56 +00:00
Alexandre Pujol	19d005bf59	feat(profiles): add the @{XDG_WORK_DIR} variable.	2022-12-09 19:13:06 +00:00
Alexandre Pujol	2246e8ae63	feat(profiles): merge the two packagekitd profiles in one.	2022-12-09 19:12:19 +00:00
Alexandre Pujol	90dc848766	feat(profiles): mkinitcpio support for systemd hooks.	2022-12-09 18:55:42 +00:00
Alexandre Pujol	372766f757	Merge branch 'master' of github.com:roddhjav/apparmor.d ... * 'master' of github.com:roddhjav/apparmor.d: wireshark	2022-12-09 18:54:11 +00:00
Alexandre Pujol	ac25454f02	feat(profiles): improve x11 integraion.	2022-12-09 18:53:18 +00:00
Alexandre Pujol	dd232695d3	feat(profiles): refractor all chromium based browsers. ... All chromium based browser now use the new chromium abstraction.	2022-12-09 18:50:57 +00:00
Alexandre Pujol	7f231caf1b	feat(profiles): update some dbus rules.	2022-12-07 20:42:36 +00:00
Alexandre Pujol	bec892b179	fix: disk-write need access to /dev/mapper/ too.	2022-12-07 20:41:07 +00:00
Alexandre Pujol	53e04cc10e	feat(profiles): update chrome profiles.	2022-12-07 20:40:34 +00:00
nobody43	038e2882b5	wireshark	2022-11-30 20:45:13 +00:00
Alexandre Pujol	f8b6dfae5c	fix: ensure sys/device/cpu/possible is in the base abs for all dist.	2022-11-29 20:24:38 +00:00
Alexandre Pujol	1e5d90afe8	feat(profiles): general update.	2022-11-29 12:02:38 +00:00
Alexandre Pujol	d52a7bd52a	fix(profiles): fix wayland cursor path.	2022-11-29 11:57:23 +00:00
Alexandre Pujol	f5cb901eef	feat(profiles): new wayland cursor file.	2022-11-28 18:08:01 +00:00
Alexandre Pujol	9a46df81b9	feat(profiles): remove rules promoted into the base abstraction.	2022-11-28 18:05:29 +00:00
Alexandre Pujol	1fa427ca81	feat(profiles): general update.	2022-11-20 11:42:08 +00:00
Alexandre Pujol	0837c158cb	feat(profiles): general update.	2022-11-13 18:27:47 +00:00
Alexandre Pujol	26f838b73f	feat(profiles): general update.	2022-11-11 22:18:55 +00:00
Alexandre Pujol	fd88162c55	feat(profiles): disks access - add NBD devices.	2022-11-11 21:41:04 +00:00
Alexandre Pujol	dd13de385e	feat(profiles): general update.	2022-11-05 17:25:27 +00:00
Alexandre Pujol	18a8b42cbf	feat(profiles): add initial version of iwctl.	2022-11-05 17:13:39 +00:00
Alexandre Pujol	157e2a5df6	feat(profiles): grub update.	2022-11-03 21:42:16 +00:00
Alexandre Pujol	a90cdbe879	feat(profiles): general update.	2022-11-03 21:40:01 +00:00
Alexandre Pujol	fabddee9d6	feat(profiles): add os-prober.	2022-10-23 11:27:50 +01:00
Alexandre Pujol	d6cd1af9c8	feat(profiles): add initial version of nmcli.	2022-10-23 11:26:42 +01:00
Alexandre Pujol	0168f8b13b	feat(profiles): add gnome-software.	2022-10-23 11:25:23 +01:00
nobody43	f94faf697e	Read-only root compatibility (#86) ... * Read-only root compatibility * remove complain Co-authored-by: nobodysu <nobodysu@users.noreply.github.com>	2022-10-18 18:23:52 +00:00
Alexandre Pujol	5fdbc2d00e	fix(profiles): minor bug fixes.	2022-10-18 19:20:12 +01:00
nobody43	81fd594be2	Update apparmor.d/profiles-g-l/htop ... Co-authored-by: Alex <roddhjav@users.noreply.github.com>	2022-10-17 15:09:52 +00:00
nobodysu	8d61d3256a	more profiles	2022-10-17 17:07:26 +03:00
nobodysu	349689cba4	polishing2	2022-10-16 17:46:39 +03:00
nobodysu	41659f073c	polishing	2022-10-16 17:45:00 +03:00
nobodysu	c6ca84ded4	remove spaces	2022-10-16 17:20:49 +03:00
nobodysu	f637c70f99	remove complain	2022-10-16 17:17:53 +03:00
nobodysu	ac7c42eefd	New user login	2022-10-16 17:12:23 +03:00
Alexandre Pujol	c15f2fbb7b	feat(profiles): ensure ibus-daemon integration with Ubuntu.	2022-10-16 12:15:12 +01:00
Alexandre Pujol	e7fbf5fbef	feat(profiles): better ubuntu integration.	2022-10-15 18:03:23 +01:00
Alexandre Pujol	2aa4618dda	feat(profiles): gnome-session-binary ensure compatibility across distribution.	2022-10-15 17:32:01 +01:00
nobodysu	643a84997e	Unbreak Debian 11 and partially Ubuntu 22.04 (Wayland+GDM+Gnome) (#81) ... * Unbreaking Debian 11 and partially Ubuntu 22.04 * pre-cleanup * pre-cleanup2 * Update im-launch * Update gnome-extension-ding * polishing * not yet * Update ubuntu.flags Allow GDM to boot. `No new privs` fix. * Update debian.flags Allow GDM to boot. `No new privs` fix. * Update CONTRIBUTING.md * fixes * reverting w * move setpriv to main.flags	2022-10-14 21:21:56 +00:00
Alexandre Pujol	bdcaa040fe	feat(profiles): add packagekitd.	2022-10-14 22:18:49 +01:00
Alexandre Pujol	b1950cbe91	feat(profiles): general update.	2022-10-14 22:17:27 +01:00
Alexandre Pujol	3c841e6d6a	fix(profiles): ensure all firefox start is cached.	2022-10-14 22:13:23 +01:00
Alexandre Pujol	513abeb59d	refactor: move child profiles into children group.	2022-10-14 22:12:46 +01:00
Alexandre Pujol	eddf6bfc4f	feat(profiles): general update.	2022-10-08 13:13:44 +01:00
Alexandre Pujol	e226f4eb03	feat(profiles): add iwd.	2022-10-06 21:13:05 +01:00
Alexandre Pujol	736e44a483	feat(profiles): general update.	2022-10-06 20:53:54 +01:00
Alexandre Pujol	ddedb39f3d	refactor: move profile in correct group.	2022-10-06 20:51:30 +01:00
Alexandre Pujol	e4e54a26ef	feat(profiles): restrict path access in pacman.	2022-10-06 20:50:41 +01:00
Alexandre Pujol	ece6524886	fix(profile): fix gio-launch-desktop attachments.	2022-10-06 20:48:08 +01:00
Alexandre Pujol	418107f11e	feat(profiles): allow gvfs-metadata on some profile that really need it.	2022-10-06 20:47:22 +01:00
Alexandre Pujol	1c97feb5c2	feat(profiles): add modprobed-db.	2022-10-06 20:45:31 +01:00
Alexandre Pujol	c2952b1ec5	feat(profiles): more flexibility in password-store dir name.	2022-10-06 20:43:39 +01:00
Alexandre Pujol	ac47e292ac	feat(profiles): general update.	2022-10-04 21:11:13 +01:00
Alexandre Pujol	d0a8030af8	fix(profile): add deny-sensitive-home abstraction.	2022-10-01 19:18:54 +01:00
Alexandre Pujol	8a55eb8330	fix(profile): fontconfig-cache-write needs /var/cache/fontconfig/ access.	2022-10-01 19:11:19 +01:00
Alexandre Pujol	f45c07dfa1	feat(profiles): child-open integration 2/2	2022-10-01 19:10:00 +01:00
Alexandre Pujol	b29f9675eb	feat(profiles): browser - add child-open integration & cleanup.	2022-10-01 19:08:15 +01:00
Alexandre Pujol	7d3c52036b	feat(profiles): add child-open.	2022-10-01 19:05:44 +01:00
Alexandre Pujol	e7d73243af	refactor: move child-systemctl the children group.	2022-10-01 19:04:35 +01:00
Alexandre Pujol	39740f9369	feat(profiles): add systemd-dissect.	2022-10-01 18:56:02 +01:00
Alexandre Pujol	1a73271a1a	feat(profiles): add localectl.	2022-10-01 18:53:11 +01:00
Alexandre Pujol	65bf8278bc	feat(profiles): add gnome-browser-connector-host.	2022-10-01 18:47:49 +01:00
Alexandre Pujol	7c3fcf260c	feat(profiles): add systemd-id128.	2022-10-01 18:46:32 +01:00
Alexandre Pujol	4681a495b3	feat(profiles): general update.	2022-10-01 18:45:08 +01:00
Alexandre Pujol	5580a34184	refactor: move chrome-gnome-shell to the gnome group.	2022-10-01 18:38:29 +01:00
Alexandre Pujol	768e50c6ab	fix: remove not modified lxc rules. ... Fix #79	2022-09-28 11:54:29 +01:00
Alexandre Pujol	9f2b68dd5d	feat(profiles): add ubuntu-advantage-desktop-daemon.	2022-09-26 14:59:54 +01:00
Alexandre Pujol	205c2d7184	feat(profiles): new children group. ... This group is reserved for profile without an attachment path because it is ended to be used only via "Px -> <profile-name>".	2022-09-26 14:59:18 +01:00
Alexandre Pujol	42f305b244	feat(profiles): add XDG_GAMES_DIR and user_games_dirs variables.	2022-09-24 18:23:11 +01:00
Alexandre Pujol	060ea3acc9	feat(profiles): add archlinux-keyring-wkd-sync.	2022-09-24 18:21:56 +01:00
Alexandre Pujol	8ff571549a	feat(profiles): add gnome-extension-manager.	2022-09-24 18:09:05 +01:00
Alexandre Pujol	a02e67d980	feat(profiles): askpass -> code-askpass.	2022-09-24 18:08:00 +01:00
Alexandre Pujol	f2989321eb	feat(profiles): general update.	2022-09-24 18:06:06 +01:00
Alexandre Pujol	ae6cecde52	feat(profiles): deny gvfs-metadata when possible.	2022-09-24 17:59:20 +01:00
beroal	fcee586e9e	viewing DjVu and PostScript files (#78)	2022-09-24 11:13:21 +00:00
Alexandre Pujol	a432d656c8	feat(profiles): add sbctl.	2022-09-18 11:21:33 +01:00
Alexandre Pujol	4920922394	feat(profiles): add busctl.	2022-09-13 18:39:41 +01:00
Alexandre Pujol	3c7dda5060	feat(profiles): allow most dbus access to gnome.	2022-09-13 18:17:11 +01:00
Alexandre Pujol	58e060c470	Merge branch 'master' of github.com:roddhjav/apparmor.d ... * 'master' of github.com:roddhjav/apparmor.d: bulk cross-OS awk (#75)	2022-09-11 20:48:03 +01:00
Alexandre Pujol	80a8be6d9e	feat(profiles): move some flags definition in main.flags	2022-09-11 20:47:49 +01:00
Alexandre Pujol	8ff5ed7a69	feat(profiles): general update.	2022-09-11 20:45:14 +01:00
nobodysu	78a180b2f6	bulk cross-OS awk (#75)	2022-09-11 19:40:34 +00:00
nobodysu	8fb8e7ced3	lost abi	2022-09-06 22:03:19 +01:00
nobodysu	912a6c48e5	cleanup2	2022-09-06 22:03:19 +01:00
nobodysu	7720802dac	cleanup	2022-09-06 22:03:19 +01:00
nobodysu	cd646ea899	broader gdm	2022-09-06 22:03:19 +01:00
nobodysu	71a7c25a6d	Delete lightdm-guest-session	2022-09-06 22:02:21 +01:00
nobodysu	fe59b4d3f8	Delete lightdm_chromium-browser	2022-09-06 22:02:21 +01:00
nobodysu	f02ec5d273	Delete lightdm	2022-09-06 22:02:21 +01:00
Jeroen	9818daba5f	LVM and general update (#68) ... * Small fixes * General update * Add LVM * Various small fixes * Add profile * Typo * sbin to regex * Date and time to extends * Read cmdline * Remove grep duplicate * Small fixes * Typo * Permissions for warning scripts * Add net_admin for multipath	2022-09-06 21:01:17 +00:00
nobodysu	1649b427f8	Ubuntu 22.04, third batch (#65) ... * initial * ready * cleanup * cleanup2 * Update dbus-gtk	2022-09-06 17:00:18 +00:00
Alexandre Pujol	70aea89ad4	Revert "fix: the trash abstraction has been upstreamed." ... This reverts commit 688a62e9bc. Fix #71	2022-09-06 17:52:08 +01:00
Alexandre Pujol	746a36bfb4	feat(profiles): add our virt-aa-helper.	2022-09-03 16:10:17 +01:00
Alexandre Pujol	769627fc25	feat(profiles): remove libvirt abstractions.	2022-09-03 16:06:31 +01:00
Alexandre Pujol	892d44cca2	feat(profiles): remove unused abstractions.	2022-09-03 16:05:37 +01:00
Alexandre Pujol	688a62e9bc	fix: the trash abstraction has been upstreamed.	2022-09-03 16:04:53 +01:00
Alexandre Pujol	3b56d3ff0f	feat(profiles): use the new hex variable.	2022-09-03 14:43:34 +01:00
Alexandre Pujol	5d0c521e44	feat(profiles): move aurpublish profile.	2022-09-03 14:29:07 +01:00
Alexandre Pujol	14fd88aa2f	feat(profiles): add profiles for cups.	2022-08-31 22:10:41 +01:00
Alexandre Pujol	30f0b69a67	feat(profiles): add losetup profile.	2022-08-31 21:58:55 +01:00
Alexandre Pujol	0f61c4649c	feat(profiles): general update.	2022-08-31 21:54:33 +01:00
Alexandre Pujol	0238adaaf1	Merge branch 'ubuntu2204__2' of https://github.com/nobodysu/apparmor.d into nobodysu-ubuntu2204__2 ... * 'ubuntu2204__2' of https://github.com/nobodysu/apparmor.d: Update pkexec Update polkitd update polishing polishing Ubuntu 22.04, second batch	2022-08-22 22:10:46 +01:00
nobodysu	bea1aab15a	Update pkexec	2022-08-21 21:24:20 +00:00
nobodysu	43a366cca3	Update polkitd	2022-08-21 21:23:05 +00:00
Alexandre Pujol	9d4956df0d	feat(profiles): general update.	2022-08-21 20:16:29 +01:00
Alexandre Pujol	e1e7d611ed	fix(profiles): ensure pinentry can start. See #66.	2022-08-20 13:45:42 +01:00
Alexandre Pujol	79860f207d	feat(profiles): initial support for dockerd.	2022-08-19 21:26:17 +01:00
Alexandre Pujol	e6c91fdfd7	feat(profiles): general update.	2022-08-19 21:10:10 +01:00
Jeroen Rijken	af603fbc62	Revert "tty and pts are part of abstractions/consoles" ... This reverts commit 51a33f3f5e.	2022-08-19 19:25:22 +01:00
Jeroen Rijken	35087ea4bb	Add missing brackets	2022-08-19 19:25:22 +01:00
Jeroen Rijken	d538d2a718	Add write to block	2022-08-19 19:25:22 +01:00
Jeroen Rijken	be2a66afff	read all block devices	2022-08-19 19:25:22 +01:00
Jeroen Rijken	c680dfe7db	sort rules	2022-08-19 19:25:22 +01:00
Jeroen Rijken	e64011c4de	zed temp file	2022-08-19 19:25:22 +01:00
Jeroen Rijken	3c634e8967	Create sanoid under run	2022-08-19 19:25:22 +01:00
Jeroen Rijken	f5634b2803	Move update-grub to grub	2022-08-19 19:25:22 +01:00
Jeroen Rijken	5c6bf4c91b	Remove duplicate consoles	2022-08-19 19:25:22 +01:00
Jeroen Rijken	75a66e573e	Use openssl abstraction	2022-08-19 19:25:22 +01:00
Jeroen Rijken	af0c622b35	Replace rm with mr.	2022-08-19 19:25:22 +01:00
Jeroen	e62465b72f	Use multiarch for lib ... Co-authored-by: Alex <roddhjav@users.noreply.github.com>	2022-08-19 19:25:22 +01:00
Jeroen Rijken	20f7e01ccc	Brackets	2022-08-19 19:25:22 +01:00
Jeroen Rijken	7621dc9974	Fix typo's	2022-08-19 19:25:22 +01:00
Jeroen Rijken	689f48b217	motd fixes	2022-08-19 19:25:22 +01:00
Jeroen Rijken	cf63b97c9b	Add avahi	2022-08-19 19:25:22 +01:00
Jeroen Rijken	099a97cb36	General update	2022-08-19 19:25:22 +01:00
Jeroen Rijken	575d781c88	Various ZFS fixes	2022-08-19 19:25:22 +01:00
Jeroen Rijken	005dec1a53	tty and pts are part of abstractions/consoles	2022-08-19 19:25:22 +01:00
Jeroen Rijken	7ee9644325	Add profiles for whoami, whereis, which, findmnt, users, sanoid and syncoid.	2022-08-19 19:25:22 +01:00
Jeroen Rijken	6af5c76fb8	Add and update CNI profiles	2022-08-19 19:25:22 +01:00
Jeroen Rijken	b1112e35a7	Add templates for all grub commands	2022-08-19 19:25:22 +01:00
Jeroen Rijken	169a730d3f	Add profiles for grub-mkconfig, grub-mkrelpath, grub-probe, grub-script-check and update-grub.	2022-08-19 19:25:22 +01:00
Alexandre Pujol	c0356e92e5	feat(aa-log): add support dbus session log using journactl.	2022-08-19 19:05:46 +01:00
nobodysu	e65a78972b	Merge branch 'master' into ubuntu2204__2	2022-08-18 15:36:21 +00:00
nobodysu	355d958e26	update	2022-08-18 18:22:56 +03:00
Alexandre Pujol	a2fa2421cb	feat(profiles): add the @{hex} variables.	2022-08-13 20:44:59 +01:00
Alexandre Pujol	66b529497d	feat(profiles): initial support for steam & steam games.	2022-08-13 20:36:52 +01:00
Alexandre Pujol	3e331bd656	fix(profiles): @{PROC}/@{uid} -> @{PROC}/@{pid}	2022-08-13 20:33:58 +01:00
Alexandre Pujol	c148aa978c	feat(profiles): general update.	2022-08-13 20:31:57 +01:00
Jeroen Rijken	e02b12aa6d	Add libexec for apt	2022-08-13 15:21:35 +01:00
Jeroen Rijken	cd93d98bf4	Add support for adding snapshots to grub.	2022-08-13 15:21:35 +01:00
Jeroen Rijken	30cbac1181	Fix typo	2022-08-13 15:21:35 +01:00
Jeroen Rijken	5646c90d4c	Fix zsysd profile name	2022-08-13 15:21:35 +01:00
Jeroen Rijken	b6b510aa36	Remove entries duplicate with base abstractions.	2022-08-13 15:21:35 +01:00
Jeroen Rijken	ddf5f1f512	Use nameservice-strict, fix exec	2022-08-13 15:21:35 +01:00
Jeroen Rijken	e2e14510ff	Small fixes	2022-08-13 15:21:35 +01:00
Jeroen Rijken	2affbf6734	Cosmetic fixes	2022-08-13 15:21:35 +01:00
Jeroen Rijken	03881d5614	Add capability, dbus and some proc	2022-08-13 15:21:35 +01:00
Jeroen Rijken	a9fd0706d1	Move complain flag	2022-08-13 15:21:35 +01:00
Jeroen Rijken	d083e927a4	Initial support for zsys	2022-08-13 15:21:35 +01:00
nobodysu	33ff1abc35	Update thunderbird	2022-08-12 14:41:58 +00:00
nobodysu	db8e881c06	Merge branch 'master' into thunderbird2	2022-08-12 14:35:53 +00:00
nobodysu	00a1e70720	polishing	2022-08-12 17:23:13 +03:00
nobodysu	f2394963d0	cleanup	2022-08-08 02:39:35 +03:00
nobodysu	2c2f6e5557	rearrangement	2022-08-02 19:31:00 +03:00
nobodysu	af49797425	cleanup	2022-08-02 01:59:54 +03:00
nobodysu	c96b6d8ee7	dbus-gtk	2022-08-02 01:47:47 +03:00
Alexandre Pujol	2878fa6a2e	feat(profiles): general update.	2022-07-29 16:47:09 +01:00
Jeroen Rijken	58cfe9ad37	Small fixes	2022-07-29 16:41:19 +01:00
Jeroen Rijken	616753aea0	Consolidate rules	2022-07-29 16:41:19 +01:00
Jeroen Rijken	fcea04c69b	Remove complain flags	2022-07-29 16:41:19 +01:00
Jeroen Rijken	e724d835ed	Add ps to ptrace	2022-07-29 16:41:19 +01:00
Jeroen Rijken	e4d118365a	Add Kubernetes pause container	2022-07-29 16:41:19 +01:00
Jeroen Rijken	e6525e1f04	Add missing volumes	2022-07-29 16:41:19 +01:00
Jeroen Rijken	07f1db2725	Fix some typo's	2022-07-29 16:41:19 +01:00
Jeroen Rijken	465a31c638	General updates	2022-07-29 16:41:19 +01:00
Jeroen Rijken	33da7af6e8	container updates	2022-07-29 16:41:19 +01:00
Jeroen Rijken	3af11c4d16	ZFS updates	2022-07-29 16:41:19 +01:00
Alexandre Pujol	7aca29b244	feat(profiles): initial snap support.	2022-07-21 22:40:06 +01:00
Alexandre Pujol	177d27d94c	feat(profiles): general update.	2022-07-21 22:37:17 +01:00
Alexandre Pujol	58b96a7ba9	feat(profiles): add aptd profile.	2022-07-21 22:31:59 +01:00
Alexandre Pujol	595a27560f	feat(profiles): add mullvad profiles.	2022-07-21 20:17:03 +01:00
Alexandre Pujol	48c023d4bd	feat(profiles): containerd support for docker & cosmetic.	2022-07-21 20:15:02 +01:00
Jeroen Rijken	55bd85796c	packagekitd dbus updates	2022-07-21 20:05:56 +01:00
Jeroen Rijken	137433ce6e	dbus to NetworkManager	2022-07-21 20:05:56 +01:00
Jeroen Rijken	eb87e035b8	Initial containerd-shim-runc support	2022-07-21 20:05:56 +01:00
Jeroen Rijken	266d5c6dc0	Add IPV6	2022-07-21 19:46:45 +01:00
Jeroen Rijken	b404d7e4c4	Move xtables-nft to separate profile	2022-07-21 19:46:45 +01:00
Jeroen Rijken	130c562488	Allow containerd signal from k3s	2022-07-21 19:46:45 +01:00
Jeroen Rijken	61eab33cd8	Add ptrace subprofile	2022-07-21 19:46:45 +01:00
Jeroen Rijken	d6d9c943ae	Add missing permission	2022-07-21 19:46:45 +01:00
Jeroen Rijken	dca33292f7	Update ruleset for clean installation.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	a1f4dbee50	First batch of cleanups based on PR comments.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	c03c624472	Allow signals from containerd to calico	2022-07-21 19:46:45 +01:00
Jeroen Rijken	8f81a39df1	Support read AppArmor profiles	2022-07-21 19:46:45 +01:00
Jeroen Rijken	560250cf5f	Fix mode	2022-07-21 19:46:45 +01:00
Jeroen Rijken	2deb2a48a6	Fix name range.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	a3415dc42c	Typo and calico proc.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	c84455cca4	Fixes for container network creation.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	3e006e3c76	Fix for calico unable to create network namespace.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	5565217c91	Move xtables profile to child profile of k3s.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	78cfb23bff	Apply suggested fixes from PR	2022-07-21 19:46:45 +01:00
Jeroen Rijken	5af6cda328	Allow dbus messages and user database reading.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	28a3584c14	Initial support for xtables-nft-multi	2022-07-21 19:46:45 +01:00
Jeroen Rijken	463da2a8f4	Initial support for k3s	2022-07-21 19:46:45 +01:00
nobodysu	b8445e3b45	dbus style	2022-07-20 00:48:58 +03:00
Alexandre Pujol	f4dd2745d1	feat(profiles): add software-properties-dbus.	2022-07-19 00:03:01 +01:00
Alexandre Pujol	5b01f7963b	feat(profiles): add file-roller.	2022-07-18 23:58:12 +01:00
Alexandre Pujol	9692926752	feat(profiles): general update.	2022-07-18 23:57:25 +01:00
Jeroen Rijken	2ec802d40d	Remove deny root	2022-07-18 19:45:04 +01:00
Jeroen Rijken	e9bcd3f820	Small fixes	2022-07-18 19:45:04 +01:00
Jeroen Rijken	70aa5fdbb2	Small fixes	2022-07-18 19:45:04 +01:00
Jeroen Rijken	5a02490082	Needed for certain containers like calico	2022-07-18 19:45:04 +01:00
Jeroen Rijken	13aee74df9	Various containerd fixes	2022-07-18 19:45:04 +01:00
Alexandre Pujol	c750cb1b77	feat(profiles): general update.	2022-07-18 11:36:16 +01:00
Jeroen	081308db2f	Add ZFS Event Daemon (#56)	2022-07-17 22:04:13 +00:00
Alexandre Pujol	eb6c7548f5	feat(profiles): general update.	2022-07-15 21:55:59 +01:00
Jeroen Rijken	682df516bf	Make calico part of cni	2022-07-15 21:43:08 +01:00
Jeroen Rijken	02ad72b024	Allow containerd to (u)mount cni devices, and loopback to access them.	2022-07-15 21:43:08 +01:00
Jeroen Rijken	6c8e50534b	Cleanup profile ... Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>	2022-07-15 21:43:08 +01:00
nobodysu	2d7ec5ad2c	Update spectre-meltdown-checker (#50) ... * Update spectre-meltdown-checker	2022-07-15 20:42:15 +00:00
Alexandre Pujol	63f1a98c37	feat(profiles): add cron-ubuntu-fan.	2022-07-10 14:30:56 +01:00
Alexandre Pujol	23642eb0be	feat(profiles): general update.	2022-07-10 14:28:44 +01:00
Alexandre Pujol	c0e62f30bb	feat(profiles): add wireguard.	2022-07-10 14:24:30 +01:00
Alexandre Pujol	d8449de55e	feat(profiles): add and merge some cni profiles.	2022-07-10 14:24:09 +01:00
Alex	40d8c68f22	Merge branch 'master' into feat/cni	2022-07-10 13:41:50 +01:00
Jeroen Rijken	d10f2c073c	Alphabetical sorting, group common options.	2022-07-10 13:39:01 +01:00
Jeroen Rijken	59f8b893ff	Cleanup profiles according to standards	2022-07-10 13:39:01 +01:00
Jeroen Rijken	c9b4423e45	Allow mount-zfs access to pts	2022-07-10 13:39:01 +01:00
Jeroen Rijken	da08ef6aa6	Typo	2022-07-10 13:39:01 +01:00
Jeroen Rijken	cc5d1a0e07	Initramfs generation updates	2022-07-10 13:39:01 +01:00
Jeroen Rijken	99c311e699	Executable updates for zpool	2022-07-10 13:39:01 +01:00
Jeroen Rijken	3810c1668e	Basic ZFS support	2022-07-10 13:39:01 +01:00
Alex	6e1e7dc32b	Apply suggestions from code review	2022-07-10 12:38:11 +00:00
Jeroen Rijken	8a13d71edb	Update CNI path, set containerd to attach_disconnected, cleanups.	2022-07-10 13:36:44 +02:00
Jeroen Rijken	9fb43325a3	Add headers to new policies	2022-07-10 12:49:33 +02:00
Jeroen Rijken	7524bfa343	Syntax fixes	2022-07-10 12:43:52 +02:00
Jeroen Rijken	8413f6b9e6	Allow containerd to access SSL certs for pulling container images.	2022-07-10 11:51:15 +02:00
Jeroen Rijken	edcd130432	Calico profile cleanup.	2022-07-09 20:53:21 +02:00
Jeroen Rijken	2ffa3d1339	Cleanup profiles according to standards part 1/2	2022-07-09 20:46:59 +02:00
Jeroen Rijken	3d63f9e21e	Add AppArmor support to containerd	2022-07-06 20:50:14 +02:00
Jeroen Rijken	9ea910d1a0	Add CNI for containerd	2022-07-06 20:49:52 +02:00
Alexandre Pujol	4a37cd1149	feat(profiles): add software-properties-gtk & ubuntu-advantage.	2022-07-03 20:29:45 +01:00
Alexandre Pujol	d04bb8f5b2	feat(profiles): add systemd-resolve.	2022-07-03 20:28:26 +01:00
Alexandre Pujol	f6de2fbe7a	feat(profiles): general update.	2022-07-03 20:27:48 +01:00
Alexandre Pujol	1d45e8ec2e	feat(profiles): add do-release-upgrade.	2022-06-26 23:07:00 +01:00
Alexandre Pujol	72a042e6ef	feat(profiles): add notify-reboot-required.	2022-06-26 23:06:42 +01:00
Alexandre Pujol	6c89ee8630	feat(profiles): add gnome-characters-backgroudservice.	2022-06-26 23:05:53 +01:00
Alexandre Pujol	8969786104	feat(profiles): add plymouthd.	2022-06-26 23:05:24 +01:00
Alexandre Pujol	08beefe867	feat(profiles): general update.	2022-06-26 23:05:09 +01:00
Alexandre Pujol	e087349662	feat(profiles): define more xdg variables.	2022-06-26 17:32:12 +01:00
Alexandre Pujol	e69182e1df	feat(profiles): general update.	2022-06-26 16:40:48 +01:00
Alexandre Pujol	c04363c1b6	feat(profiles): reorganise a few profiles.	2022-06-25 00:18:26 +01:00
Alexandre Pujol	fcbe764ccf	feat(profiles): general update.	2022-06-25 00:16:05 +01:00
Alexandre Pujol	e942c057bd	feat(profiles): move netstat	2022-06-25 00:08:51 +01:00
Alexandre Pujol	20fd8376bd	feat(profiles): Rewrite and largelly restrict the libvirtd profile.	2022-06-18 22:49:32 +01:00
Alexandre Pujol	56afb90084	fix(profiles): fix some abstraction definitions.	2022-06-18 21:56:09 +01:00
Alexandre Pujol	393e339b48	feat(profiles): apply rule from #51.	2022-06-14 22:54:26 +01:00
Alexandre Pujol	d93879d9df	chore: move some cron profiles.	2022-06-14 20:14:32 +01:00