814 commits

Author	SHA1	Message	Date
Alexandre Pujol	3c7dda5060	feat(profiles): allow most dbus access to gnome.	2022-09-13 18:17:11 +01:00
Alexandre Pujol	58e060c470	Merge branch 'master' of github.com:roddhjav/apparmor.d ... * 'master' of github.com:roddhjav/apparmor.d: bulk cross-OS awk (#75)	2022-09-11 20:48:03 +01:00
Alexandre Pujol	80a8be6d9e	feat(profiles): move some flags definition in main.flags	2022-09-11 20:47:49 +01:00
Alexandre Pujol	8ff5ed7a69	feat(profiles): general update.	2022-09-11 20:45:14 +01:00
nobodysu	78a180b2f6	bulk cross-OS awk (#75)	2022-09-11 19:40:34 +00:00
nobodysu	8fb8e7ced3	lost abi	2022-09-06 22:03:19 +01:00
nobodysu	912a6c48e5	cleanup2	2022-09-06 22:03:19 +01:00
nobodysu	7720802dac	cleanup	2022-09-06 22:03:19 +01:00
nobodysu	cd646ea899	broader gdm	2022-09-06 22:03:19 +01:00
nobodysu	71a7c25a6d	Delete lightdm-guest-session	2022-09-06 22:02:21 +01:00
nobodysu	fe59b4d3f8	Delete lightdm_chromium-browser	2022-09-06 22:02:21 +01:00
nobodysu	f02ec5d273	Delete lightdm	2022-09-06 22:02:21 +01:00
Jeroen	9818daba5f	LVM and general update (#68) ... * Small fixes * General update * Add LVM * Various small fixes * Add profile * Typo * sbin to regex * Date and time to extends * Read cmdline * Remove grep duplicate * Small fixes * Typo * Permissions for warning scripts * Add net_admin for multipath	2022-09-06 21:01:17 +00:00
nobodysu	1649b427f8	Ubuntu 22.04, third batch (#65) ... * initial * ready * cleanup * cleanup2 * Update dbus-gtk	2022-09-06 17:00:18 +00:00
Alexandre Pujol	70aea89ad4	Revert "fix: the trash abstraction has been upstreamed." ... This reverts commit 688a62e9bc. Fix #71	2022-09-06 17:52:08 +01:00
Alexandre Pujol	746a36bfb4	feat(profiles): add our virt-aa-helper.	2022-09-03 16:10:17 +01:00
Alexandre Pujol	769627fc25	feat(profiles): remove libvirt abstractions.	2022-09-03 16:06:31 +01:00
Alexandre Pujol	892d44cca2	feat(profiles): remove unused abstractions.	2022-09-03 16:05:37 +01:00
Alexandre Pujol	688a62e9bc	fix: the trash abstraction has been upstreamed.	2022-09-03 16:04:53 +01:00
Alexandre Pujol	3b56d3ff0f	feat(profiles): use the new hex variable.	2022-09-03 14:43:34 +01:00
Alexandre Pujol	5d0c521e44	feat(profiles): move aurpublish profile.	2022-09-03 14:29:07 +01:00
Alexandre Pujol	14fd88aa2f	feat(profiles): add profiles for cups.	2022-08-31 22:10:41 +01:00
Alexandre Pujol	30f0b69a67	feat(profiles): add losetup profile.	2022-08-31 21:58:55 +01:00
Alexandre Pujol	0f61c4649c	feat(profiles): general update.	2022-08-31 21:54:33 +01:00
Alexandre Pujol	0238adaaf1	Merge branch 'ubuntu2204__2' of https://github.com/nobodysu/apparmor.d into nobodysu-ubuntu2204__2 ... * 'ubuntu2204__2' of https://github.com/nobodysu/apparmor.d: Update pkexec Update polkitd update polishing polishing Ubuntu 22.04, second batch	2022-08-22 22:10:46 +01:00
nobodysu	bea1aab15a	Update pkexec	2022-08-21 21:24:20 +00:00
nobodysu	43a366cca3	Update polkitd	2022-08-21 21:23:05 +00:00
Alexandre Pujol	9d4956df0d	feat(profiles): general update.	2022-08-21 20:16:29 +01:00
Alexandre Pujol	e1e7d611ed	fix(profiles): ensure pinentry can start. See #66.	2022-08-20 13:45:42 +01:00
Alexandre Pujol	79860f207d	feat(profiles): initial support for dockerd.	2022-08-19 21:26:17 +01:00
Alexandre Pujol	e6c91fdfd7	feat(profiles): general update.	2022-08-19 21:10:10 +01:00
Jeroen Rijken	af603fbc62	Revert "tty and pts are part of abstractions/consoles" ... This reverts commit 51a33f3f5e.	2022-08-19 19:25:22 +01:00
Jeroen Rijken	35087ea4bb	Add missing brackets	2022-08-19 19:25:22 +01:00
Jeroen Rijken	d538d2a718	Add write to block	2022-08-19 19:25:22 +01:00
Jeroen Rijken	be2a66afff	read all block devices	2022-08-19 19:25:22 +01:00
Jeroen Rijken	c680dfe7db	sort rules	2022-08-19 19:25:22 +01:00
Jeroen Rijken	e64011c4de	zed temp file	2022-08-19 19:25:22 +01:00
Jeroen Rijken	3c634e8967	Create sanoid under run	2022-08-19 19:25:22 +01:00
Jeroen Rijken	f5634b2803	Move update-grub to grub	2022-08-19 19:25:22 +01:00
Jeroen Rijken	5c6bf4c91b	Remove duplicate consoles	2022-08-19 19:25:22 +01:00
Jeroen Rijken	75a66e573e	Use openssl abstraction	2022-08-19 19:25:22 +01:00
Jeroen Rijken	af0c622b35	Replace rm with mr.	2022-08-19 19:25:22 +01:00
Jeroen	e62465b72f	Use multiarch for lib ... Co-authored-by: Alex <roddhjav@users.noreply.github.com>	2022-08-19 19:25:22 +01:00
Jeroen Rijken	20f7e01ccc	Brackets	2022-08-19 19:25:22 +01:00
Jeroen Rijken	7621dc9974	Fix typo's	2022-08-19 19:25:22 +01:00
Jeroen Rijken	689f48b217	motd fixes	2022-08-19 19:25:22 +01:00
Jeroen Rijken	cf63b97c9b	Add avahi	2022-08-19 19:25:22 +01:00
Jeroen Rijken	099a97cb36	General update	2022-08-19 19:25:22 +01:00
Jeroen Rijken	575d781c88	Various ZFS fixes	2022-08-19 19:25:22 +01:00
Jeroen Rijken	005dec1a53	tty and pts are part of abstractions/consoles	2022-08-19 19:25:22 +01:00
Jeroen Rijken	7ee9644325	Add profiles for whoami, whereis, which, findmnt, users, sanoid and syncoid.	2022-08-19 19:25:22 +01:00
Jeroen Rijken	6af5c76fb8	Add and update CNI profiles	2022-08-19 19:25:22 +01:00
Jeroen Rijken	b1112e35a7	Add templates for all grub commands	2022-08-19 19:25:22 +01:00
Jeroen Rijken	169a730d3f	Add profiles for grub-mkconfig, grub-mkrelpath, grub-probe, grub-script-check and update-grub.	2022-08-19 19:25:22 +01:00
Alexandre Pujol	c0356e92e5	feat(aa-log): add support dbus session log using journactl.	2022-08-19 19:05:46 +01:00
nobodysu	e65a78972b	Merge branch 'master' into ubuntu2204__2	2022-08-18 15:36:21 +00:00
nobodysu	355d958e26	update	2022-08-18 18:22:56 +03:00
Alexandre Pujol	a2fa2421cb	feat(profiles): add the @{hex} variables.	2022-08-13 20:44:59 +01:00
Alexandre Pujol	66b529497d	feat(profiles): initial support for steam & steam games.	2022-08-13 20:36:52 +01:00
Alexandre Pujol	3e331bd656	fix(profiles): @{PROC}/@{uid} -> @{PROC}/@{pid}	2022-08-13 20:33:58 +01:00
Alexandre Pujol	c148aa978c	feat(profiles): general update.	2022-08-13 20:31:57 +01:00
Jeroen Rijken	e02b12aa6d	Add libexec for apt	2022-08-13 15:21:35 +01:00
Jeroen Rijken	cd93d98bf4	Add support for adding snapshots to grub.	2022-08-13 15:21:35 +01:00
Jeroen Rijken	30cbac1181	Fix typo	2022-08-13 15:21:35 +01:00
Jeroen Rijken	5646c90d4c	Fix zsysd profile name	2022-08-13 15:21:35 +01:00
Jeroen Rijken	b6b510aa36	Remove entries duplicate with base abstractions.	2022-08-13 15:21:35 +01:00
Jeroen Rijken	ddf5f1f512	Use nameservice-strict, fix exec	2022-08-13 15:21:35 +01:00
Jeroen Rijken	e2e14510ff	Small fixes	2022-08-13 15:21:35 +01:00
Jeroen Rijken	2affbf6734	Cosmetic fixes	2022-08-13 15:21:35 +01:00
Jeroen Rijken	03881d5614	Add capability, dbus and some proc	2022-08-13 15:21:35 +01:00
Jeroen Rijken	a9fd0706d1	Move complain flag	2022-08-13 15:21:35 +01:00
Jeroen Rijken	d083e927a4	Initial support for zsys	2022-08-13 15:21:35 +01:00
nobodysu	33ff1abc35	Update thunderbird	2022-08-12 14:41:58 +00:00
nobodysu	db8e881c06	Merge branch 'master' into thunderbird2	2022-08-12 14:35:53 +00:00
nobodysu	00a1e70720	polishing	2022-08-12 17:23:13 +03:00
nobodysu	f2394963d0	cleanup	2022-08-08 02:39:35 +03:00
nobodysu	2c2f6e5557	rearrangement	2022-08-02 19:31:00 +03:00
nobodysu	af49797425	cleanup	2022-08-02 01:59:54 +03:00
nobodysu	c96b6d8ee7	dbus-gtk	2022-08-02 01:47:47 +03:00
Alexandre Pujol	2878fa6a2e	feat(profiles): general update.	2022-07-29 16:47:09 +01:00
Jeroen Rijken	58cfe9ad37	Small fixes	2022-07-29 16:41:19 +01:00
Jeroen Rijken	616753aea0	Consolidate rules	2022-07-29 16:41:19 +01:00
Jeroen Rijken	fcea04c69b	Remove complain flags	2022-07-29 16:41:19 +01:00
Jeroen Rijken	e724d835ed	Add ps to ptrace	2022-07-29 16:41:19 +01:00
Jeroen Rijken	e4d118365a	Add Kubernetes pause container	2022-07-29 16:41:19 +01:00
Jeroen Rijken	e6525e1f04	Add missing volumes	2022-07-29 16:41:19 +01:00
Jeroen Rijken	07f1db2725	Fix some typo's	2022-07-29 16:41:19 +01:00
Jeroen Rijken	465a31c638	General updates	2022-07-29 16:41:19 +01:00
Jeroen Rijken	33da7af6e8	container updates	2022-07-29 16:41:19 +01:00
Jeroen Rijken	3af11c4d16	ZFS updates	2022-07-29 16:41:19 +01:00
Alexandre Pujol	7aca29b244	feat(profiles): initial snap support.	2022-07-21 22:40:06 +01:00
Alexandre Pujol	177d27d94c	feat(profiles): general update.	2022-07-21 22:37:17 +01:00
Alexandre Pujol	58b96a7ba9	feat(profiles): add aptd profile.	2022-07-21 22:31:59 +01:00
Alexandre Pujol	595a27560f	feat(profiles): add mullvad profiles.	2022-07-21 20:17:03 +01:00
Alexandre Pujol	48c023d4bd	feat(profiles): containerd support for docker & cosmetic.	2022-07-21 20:15:02 +01:00
Jeroen Rijken	55bd85796c	packagekitd dbus updates	2022-07-21 20:05:56 +01:00
Jeroen Rijken	137433ce6e	dbus to NetworkManager	2022-07-21 20:05:56 +01:00
Jeroen Rijken	eb87e035b8	Initial containerd-shim-runc support	2022-07-21 20:05:56 +01:00
Jeroen Rijken	266d5c6dc0	Add IPV6	2022-07-21 19:46:45 +01:00
Jeroen Rijken	b404d7e4c4	Move xtables-nft to separate profile	2022-07-21 19:46:45 +01:00
Jeroen Rijken	130c562488	Allow containerd signal from k3s	2022-07-21 19:46:45 +01:00
Jeroen Rijken	61eab33cd8	Add ptrace subprofile	2022-07-21 19:46:45 +01:00
Jeroen Rijken	d6d9c943ae	Add missing permission	2022-07-21 19:46:45 +01:00
Jeroen Rijken	dca33292f7	Update ruleset for clean installation.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	a1f4dbee50	First batch of cleanups based on PR comments.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	c03c624472	Allow signals from containerd to calico	2022-07-21 19:46:45 +01:00
Jeroen Rijken	8f81a39df1	Support read AppArmor profiles	2022-07-21 19:46:45 +01:00
Jeroen Rijken	560250cf5f	Fix mode	2022-07-21 19:46:45 +01:00
Jeroen Rijken	2deb2a48a6	Fix name range.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	a3415dc42c	Typo and calico proc.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	c84455cca4	Fixes for container network creation.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	3e006e3c76	Fix for calico unable to create network namespace.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	5565217c91	Move xtables profile to child profile of k3s.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	78cfb23bff	Apply suggested fixes from PR	2022-07-21 19:46:45 +01:00
Jeroen Rijken	5af6cda328	Allow dbus messages and user database reading.	2022-07-21 19:46:45 +01:00
Jeroen Rijken	28a3584c14	Initial support for xtables-nft-multi	2022-07-21 19:46:45 +01:00
Jeroen Rijken	463da2a8f4	Initial support for k3s	2022-07-21 19:46:45 +01:00
nobodysu	b8445e3b45	dbus style	2022-07-20 00:48:58 +03:00
Alexandre Pujol	f4dd2745d1	feat(profiles): add software-properties-dbus.	2022-07-19 00:03:01 +01:00
Alexandre Pujol	5b01f7963b	feat(profiles): add file-roller.	2022-07-18 23:58:12 +01:00
Alexandre Pujol	9692926752	feat(profiles): general update.	2022-07-18 23:57:25 +01:00
Jeroen Rijken	2ec802d40d	Remove deny root	2022-07-18 19:45:04 +01:00
Jeroen Rijken	e9bcd3f820	Small fixes	2022-07-18 19:45:04 +01:00
Jeroen Rijken	70aa5fdbb2	Small fixes	2022-07-18 19:45:04 +01:00
Jeroen Rijken	5a02490082	Needed for certain containers like calico	2022-07-18 19:45:04 +01:00
Jeroen Rijken	13aee74df9	Various containerd fixes	2022-07-18 19:45:04 +01:00
Alexandre Pujol	c750cb1b77	feat(profiles): general update.	2022-07-18 11:36:16 +01:00
Jeroen	081308db2f	Add ZFS Event Daemon (#56)	2022-07-17 22:04:13 +00:00
Alexandre Pujol	eb6c7548f5	feat(profiles): general update.	2022-07-15 21:55:59 +01:00
Jeroen Rijken	682df516bf	Make calico part of cni	2022-07-15 21:43:08 +01:00
Jeroen Rijken	02ad72b024	Allow containerd to (u)mount cni devices, and loopback to access them.	2022-07-15 21:43:08 +01:00
Jeroen Rijken	6c8e50534b	Cleanup profile ... Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>	2022-07-15 21:43:08 +01:00
nobodysu	2d7ec5ad2c	Update spectre-meltdown-checker (#50) ... * Update spectre-meltdown-checker	2022-07-15 20:42:15 +00:00
Alexandre Pujol	63f1a98c37	feat(profiles): add cron-ubuntu-fan.	2022-07-10 14:30:56 +01:00
Alexandre Pujol	23642eb0be	feat(profiles): general update.	2022-07-10 14:28:44 +01:00
Alexandre Pujol	c0e62f30bb	feat(profiles): add wireguard.	2022-07-10 14:24:30 +01:00
Alexandre Pujol	d8449de55e	feat(profiles): add and merge some cni profiles.	2022-07-10 14:24:09 +01:00
Alex	40d8c68f22	Merge branch 'master' into feat/cni	2022-07-10 13:41:50 +01:00
Jeroen Rijken	d10f2c073c	Alphabetical sorting, group common options.	2022-07-10 13:39:01 +01:00
Jeroen Rijken	59f8b893ff	Cleanup profiles according to standards	2022-07-10 13:39:01 +01:00
Jeroen Rijken	c9b4423e45	Allow mount-zfs access to pts	2022-07-10 13:39:01 +01:00
Jeroen Rijken	da08ef6aa6	Typo	2022-07-10 13:39:01 +01:00
Jeroen Rijken	cc5d1a0e07	Initramfs generation updates	2022-07-10 13:39:01 +01:00
Jeroen Rijken	99c311e699	Executable updates for zpool	2022-07-10 13:39:01 +01:00
Jeroen Rijken	3810c1668e	Basic ZFS support	2022-07-10 13:39:01 +01:00
Alex	6e1e7dc32b	Apply suggestions from code review	2022-07-10 12:38:11 +00:00
Jeroen Rijken	8a13d71edb	Update CNI path, set containerd to attach_disconnected, cleanups.	2022-07-10 13:36:44 +02:00
Jeroen Rijken	9fb43325a3	Add headers to new policies	2022-07-10 12:49:33 +02:00
Jeroen Rijken	7524bfa343	Syntax fixes	2022-07-10 12:43:52 +02:00
Jeroen Rijken	8413f6b9e6	Allow containerd to access SSL certs for pulling container images.	2022-07-10 11:51:15 +02:00
Jeroen Rijken	edcd130432	Calico profile cleanup.	2022-07-09 20:53:21 +02:00
Jeroen Rijken	2ffa3d1339	Cleanup profiles according to standards part 1/2	2022-07-09 20:46:59 +02:00
Jeroen Rijken	3d63f9e21e	Add AppArmor support to containerd	2022-07-06 20:50:14 +02:00
Jeroen Rijken	9ea910d1a0	Add CNI for containerd	2022-07-06 20:49:52 +02:00
Alexandre Pujol	4a37cd1149	feat(profiles): add software-properties-gtk & ubuntu-advantage.	2022-07-03 20:29:45 +01:00
Alexandre Pujol	d04bb8f5b2	feat(profiles): add systemd-resolve.	2022-07-03 20:28:26 +01:00
Alexandre Pujol	f6de2fbe7a	feat(profiles): general update.	2022-07-03 20:27:48 +01:00
Alexandre Pujol	1d45e8ec2e	feat(profiles): add do-release-upgrade.	2022-06-26 23:07:00 +01:00
Alexandre Pujol	72a042e6ef	feat(profiles): add notify-reboot-required.	2022-06-26 23:06:42 +01:00
Alexandre Pujol	6c89ee8630	feat(profiles): add gnome-characters-backgroudservice.	2022-06-26 23:05:53 +01:00
Alexandre Pujol	8969786104	feat(profiles): add plymouthd.	2022-06-26 23:05:24 +01:00
Alexandre Pujol	08beefe867	feat(profiles): general update.	2022-06-26 23:05:09 +01:00
Alexandre Pujol	e087349662	feat(profiles): define more xdg variables.	2022-06-26 17:32:12 +01:00
Alexandre Pujol	e69182e1df	feat(profiles): general update.	2022-06-26 16:40:48 +01:00
Alexandre Pujol	c04363c1b6	feat(profiles): reorganise a few profiles.	2022-06-25 00:18:26 +01:00
Alexandre Pujol	fcbe764ccf	feat(profiles): general update.	2022-06-25 00:16:05 +01:00
Alexandre Pujol	e942c057bd	feat(profiles): move netstat	2022-06-25 00:08:51 +01:00
Alexandre Pujol	20fd8376bd	feat(profiles): Rewrite and largelly restrict the libvirtd profile.	2022-06-18 22:49:32 +01:00
Alexandre Pujol	56afb90084	fix(profiles): fix some abstraction definitions.	2022-06-18 21:56:09 +01:00
Alexandre Pujol	393e339b48	feat(profiles): apply rule from #51.	2022-06-14 22:54:26 +01:00
Alexandre Pujol	d93879d9df	chore: move some cron profiles.	2022-06-14 20:14:32 +01:00
Alexandre Pujol	08bb1b44a6	style(profiles): small rules improvment.	2022-06-14 19:25:45 +01:00
Alexandre Pujol	454456a844	style(profiles): better header for the abstractions.	2022-06-14 19:17:41 +01:00
Alexandre Pujol	10de7941b0	feat(profiles): add fprintd.	2022-06-14 19:12:38 +01:00
Alexandre Pujol	9ccda2a0a5	feat(profiles): initial version of mount.zfs	2022-06-14 19:11:46 +01:00
Alexandre Pujol	a792c4cb4e	feat(profiles): add some missing ubuntu profiles.	2022-06-14 19:09:50 +01:00
Alexandre Pujol	fb61f8ebff	feat(profiles): add language-validate.	2022-06-14 19:07:35 +01:00
Alexandre Pujol	9d81f5e88f	feat(profiles): reorganise the cron & run-parts profiles.	2022-06-14 19:06:34 +01:00
Alexandre Pujol	cc78beddda	feat(profiles): disks add support for zfs.	2022-06-14 19:03:46 +01:00
Alexandre Pujol	8487f5475a	feat(profiles): update ubuntu advantage profiles.	2022-06-13 22:18:17 +01:00
Alexandre Pujol	20303f53e3	feat(profiles): add the XDG_SCREENSHOTS_DIR variable.	2022-06-13 22:16:25 +01:00
Alexandre Pujol	2c6843f5fe	feat(profiles): add audit related profiles.	2022-06-13 22:15:13 +01:00
Alexandre Pujol	939363a9a7	feat(profiles): add mdevctl.	2022-06-13 22:14:29 +01:00
Alexandre Pujol	391131aad1	feat(profiles): update pkexec.	2022-06-13 22:14:11 +01:00
Alexandre Pujol	f71c0e41f8	feat(profiles): minor improvments.	2022-06-13 22:13:17 +01:00
Alexandre Pujol	7c2e92ba03	feat(profiles): add nologin.	2022-06-13 22:09:23 +01:00
Alexandre Pujol	10148786d2	feat(profiles): add some freedesktop related profiles.	2022-06-13 22:08:33 +01:00
Alexandre Pujol	039b7ab2cb	feat(profiles): update polkit-mate-authentication-agent.	2022-06-13 22:05:03 +01:00
Alexandre Pujol	d998b1dd6e	feat(profiles): improve ubuntu compatibility.	2022-06-13 22:04:12 +01:00
Alexandre Pujol	0cbcbb29a4	feat(profiles): improve/update apt related profiles.	2022-06-13 21:42:25 +01:00
Alexandre Pujol	7b0ef88358	feat(profiles): add some missing dbus rules.	2022-06-13 21:41:48 +01:00
Alexandre Pujol	6898bac12f	feat(profiles): add some missing dbus, MOUNTS and dconf rules.	2022-06-13 21:38:14 +01:00
Alexandre Pujol	50a18aac08	feat(profiles): add some core dbus rules.	2022-06-12 23:50:58 +01:00
Alexandre Pujol	24056c8cd1	feat(profiles): ensure bin, sbin compatibility for (u)mount.	2022-06-12 22:56:27 +01:00
Alexandre Pujol	779853dc7f	feat(profiles): new definition for MOUNTs, add MOUNTDIRS.	2022-06-12 22:51:37 +01:00
Alexandre Pujol	9493e783ce	feat(profiles): rethink the su & sudo profiles.	2022-06-12 22:19:13 +01:00
Alexandre Pujol	0896343bbc	feat(profiles): rethink the app launchers.	2022-06-12 22:17:38 +01:00
Alexandre Pujol	a5c9a58c3c	feat(profiles): complete the dbus-session abstactions and related rules.	2022-06-12 22:15:21 +01:00
Alexandre Pujol	8f53366cd8	feat(profiles): allow gnome-shell to send signal to all profiles.	2022-06-12 12:04:24 +01:00
Alexandre Pujol	80b337bdf4	revert(profiles): remove tor related profiles.	2022-06-12 12:02:16 +01:00