Jose Maldonado aka Yukiteru
5c35b1d69c
Fix profiles for support Qt5CT and Qt6CT
...
This fix the next profiles
*Birdtray
*Convertall
*Fritzing
2024-04-27 23:51:48 +01:00
Jose Maldonado aka Yukiteru
72784f4cbc
Fix support for Qt5CT and Qt6CT in kde groups profiles
...
This fix support in this apps/binaries
*kio_http
*kiod
*kscreenlocker
*kwalletd
*kwalletmanager
*kwin_wayland
*sddm-greeter
2024-04-27 23:51:48 +01:00
Jose Maldonado aka Yukiteru
7ba5adc6f2
Fix qt5ct and qt6ct support in freedesktop group profiles
2024-04-27 23:51:48 +01:00
Jose Maldonado aka Yukiteru
35f947aaa9
Fix Calibre group profile
...
Forgotten qt5ct line in Calibre group profile.
2024-04-27 23:51:48 +01:00
Jose Maldonado aka Yukiteru
d26b86c5d7
Fix support for Qt5 and Qt5 in apps groups
...
This changes fix access to qt5ct and qt6ct for:
*Calibre
*Flameshot
*Telegram
2024-04-27 23:51:48 +01:00
Jose Maldonado aka Yukiteru
004572349d
Fix support for Qt5 and Qt6 in Akonadi group
2024-04-27 23:51:48 +01:00
Jose Maldonado aka Yukiteru
5d1fae1121
Better support for video devices (ex: webcam)
...
Actually, Wirepumbler profile fail to access to /dev/video devices
this update fix this problem.
2024-04-27 23:51:48 +01:00
Jose Maldonado aka Yukiteru
3291fa7f8f
Better support for Qt in abstractions/chromium
2024-04-27 23:51:48 +01:00
Jose Maldonado aka Yukiteru
4355f707db
Add support for qt5ct and qt6ct
2024-04-27 23:51:48 +01:00
Jose Maldonado aka Yukiteru
4874bd8c7e
Fix path in abstractions/qt5
2024-04-26 00:16:25 +01:00
Jose Maldonado aka Yukiteru
0adb00212a
Changes for use @{user_config_dirs} for abstractions/qt5.d integration
2024-04-26 00:16:25 +01:00
Jose Maldonado aka Yukiteru
c733d6b9c2
Modifications for qbittorrent profile and qt5.d abstractions
...
This modifications allow read system and user qt5ct configs for better
integrations with other DEs (not-KDE).
2024-04-26 00:16:25 +01:00
Alexandre Pujol
e4c3f1f076
fix: flatpak-app was too strict for some app.
...
See #314
2024-04-25 13:26:11 +01:00
Alexandre Pujol
b3a5fb1ce5
fix: enable pam-tmpdir-helper for all distribution.
...
fix #316
2024-04-25 12:10:29 +01:00
Alexandre Pujol
af6d4d698e
fix: clean redundant x transition.
...
See #312
2024-04-15 18:25:24 +01:00
Alexandre Pujol
4c6122598e
fix: add missing systemd-notify profile.
2024-04-13 12:21:47 +01:00
Alexandre Pujol
4a27c92d53
feat(abs): add dummy org.kde.kwalletd bus abs.
2024-04-10 00:02:41 +01:00
Alexandre Pujol
a7f1973246
feat(profile): add more whonix specific profile.
2024-04-10 00:01:26 +01:00
Alexandre Pujol
a966cc0a93
feat(profile): add more xfce profiles.
2024-04-09 23:59:52 +01:00
Alexandre Pujol
3d8cdc0834
feat(profile): improve dbus integration in some apps.
2024-04-09 23:52:26 +01:00
Alexandre Pujol
3c6102e919
feat(profile): general update.
2024-04-09 23:48:33 +01:00
Alexandre Pujol
5873cbff95
feat(profile): add a few gnome core app.
2024-04-09 23:43:14 +01:00
Alexandre Pujol
69f90c5a11
feat(profile): use gnome abs in common gnome app.
2024-04-09 23:42:03 +01:00
Alexandre Pujol
50ce9750d3
feat(abs): add common gnome abstraction for gnome UI app.
2024-04-09 23:34:45 +01:00
Alexandre Pujol
8327fc83b6
feat(profile): add child-open-help.
2024-04-08 22:00:00 +01:00
Alexandre Pujol
f34fbeef7f
fix: ensure can start child-modprobe-nvidia.
2024-04-08 19:50:19 +01:00
Alexandre Pujol
900ef19cff
feat(profile): general update.
2024-04-08 19:28:10 +01:00
Alexandre Pujol
f96e5a9713
feat(profile): update kde integration.
...
See #310
2024-04-08 19:17:01 +01:00
Alexandre Pujol
edf32f923c
feat(abs): add support for xfce in the desktop abs.
2024-04-08 18:08:30 +01:00
Alexandre Pujol
1919d90770
feat(profile): start using child-modprobe-nvidia.
2024-04-08 18:07:18 +01:00
Alexandre Pujol
6cbaefc4d5
feat(profile): whonix: add rads
2024-04-06 15:11:04 +01:00
Alexandre Pujol
279b8b40a6
feat(profile): whonix: add sdwdate profiles.
2024-04-06 15:09:48 +01:00
Alexandre Pujol
9aa9f26507
feat(profile): general update.
2024-04-05 23:55:21 +01:00
Alexandre Pujol
000e68fe0a
Merge branch 'main' of github.com:roddhjav/apparmor.d
...
* 'main' of github.com:roddhjav/apparmor.d:
Create profile for taskwarrior-tui
Create profile for taskwarrior
2024-04-05 23:49:28 +01:00
Alexandre Pujol
4f1f34de3f
feat(abs): internal cleanup.
2024-04-05 23:49:21 +01:00
Alexandre Pujol
5c6f9c51b5
feat(abs): cleanup sudo abs.
2024-04-05 23:48:03 +01:00
Alexandre Pujol
2324da2fa7
feat(profile): add some minor xfce profile.
2024-04-05 23:46:57 +01:00
Alexandre Pujol
129db925ad
build(whonix): handle internal whonix conflict.
2024-04-05 23:44:43 +01:00
Alexandre Pujol
18a0e16d13
feat(profile): update torbrowser profiles.
2024-04-05 23:41:06 +01:00
Alexandre Pujol
257c872395
feat(profile): add xfce-terminal.
2024-04-05 23:32:54 +01:00
Alexandre Pujol
f4a66a3b8e
feat(profile): add all major xfce profiles.
2024-04-05 23:32:00 +01:00
Alexandre Pujol
7a3a856180
feat(whonix): add internal pam profiles.
2024-04-05 23:28:50 +01:00
Alexandre Pujol
14b779d29b
feat(profile): whonix: add msgcollector profiles.
2024-04-05 23:27:31 +01:00
doublez13
8f5c5867f3
Create profile for taskwarrior-tui
2024-04-05 22:22:32 +01:00
doublez13
c81253de14
Create profile for taskwarrior
2024-04-05 22:22:32 +01:00
Alexandre Pujol
c482234b64
fix(profile): ensure integration with kde on firefox.
...
See #310
2024-04-05 12:03:54 +01:00
Alexandre Pujol
3b03d8e20a
featr(profile): add polkit-gnome-authentication-agent.
2024-04-05 12:02:22 +01:00
Alexandre Pujol
ed864b6391
feat(profile): ensure xfce can start.
2024-04-05 12:01:46 +01:00
Alexandre Pujol
839f137de2
feat(profile) add the display-manager group.
...
- Group all display manager profile in the same group
- Ensure unsuported display manager can start a DE without breaking.
2024-04-05 11:59:41 +01:00
Alexandre Pujol
7603ac33d0
feat(profile): improve xfce related profiles
2024-04-05 11:54:59 +01:00
Alexandre Pujol
2c192dfab1
fix(profile): kwin_wayland.
...
See #310
2024-04-04 18:10:43 +01:00
Alexandre Pujol
8348e1dbb5
feat(profile): removed unused profile: spacefm.
2024-04-03 23:20:18 +01:00
Alexandre Pujol
a20360fd7d
fix(profile): snap, cleanup dbus rule.
2024-04-03 22:18:58 +01:00
Alexandre Pujol
4527149c1f
fix: no comments...
2024-04-03 22:01:49 +01:00
Alexandre Pujol
c359c0a2fd
feat(profile): add alsactl.
2024-04-03 21:56:58 +01:00
Alexandre Pujol
50b720a8b9
feat(profile): add gpu-manager.
2024-04-03 21:56:33 +01:00
Alexandre Pujol
6d3aeaa228
fix: aa syntax.
2024-04-03 21:25:10 +01:00
Alexandre Pujol
766b53beb3
feat(profile): improve xsession.
2024-04-03 21:22:26 +01:00
Alexandre Pujol
c623e6921c
feat(profile): add initial xfce group.
2024-04-03 21:18:08 +01:00
Alexandre Pujol
095254864f
feat(profile): general update.
2024-04-03 21:04:18 +01:00
Alexandre Pujol
6dd0c36e9a
feat: prefix variables that refer to a profile
2024-04-02 13:41:08 +01:00
Alexandre Pujol
751bc683d9
fix(profile): ensure mutt pager can read its local storage.
...
Revert some mutt related change from 0619f4dcec#309
2024-04-01 21:42:58 +01:00
Alexandre Pujol
d07e63d506
feat(abs): cleanup thumbnails abstractions.
2024-04-01 00:51:57 +01:00
Alexandre Pujol
dab928305f
feat(abs): add igfx_user_feature to the graphics abs.
2024-03-31 12:45:13 +01:00
Alexandre Pujol
534b10b261
feat(profile): rewrite some electron based profiles using the new electron abs.
2024-03-30 14:54:21 +00:00
Alexandre Pujol
89def65a17
feat(profile): add child-open-strict
2024-03-30 14:49:37 +00:00
Alexandre Pujol
f8deb46591
feat(abs): add initiall version of the electron common abstraction.
2024-03-30 14:48:29 +00:00
Alexandre Pujol
87459197d3
feat(profile): add child-modprobe-nvidia
2024-03-30 14:46:47 +00:00
Alexandre Pujol
70131163d3
refractror: remove moved abs.
2024-03-30 14:44:58 +00:00
Alexandre Pujol
0ae7b68dc8
feat(abs): really split audio-server & audio-client.
2024-03-29 19:48:13 +00:00
Alexandre Pujol
0619f4dcec
feat(profile): general update.
2024-03-29 19:45:10 +00:00
Alexandre Pujol
1f8507548f
feat(fsp): update the default profile.
...
Note: it is still not usable.
2024-03-29 19:33:55 +00:00
Alexandre Pujol
3a7b9a2c4e
feat(abs): minor update of some core abs.
2024-03-29 19:32:23 +00:00
Alexandre Pujol
adb936e62f
feat(abs): add new shells abstraction.
2024-03-29 18:31:15 +00:00
Alexandre Pujol
58a4f1601a
fix(profile): ensure interactive shell use @{shells_path} instead of @{sh_path}.
2024-03-29 18:19:35 +00:00
Alexandre Pujol
2fc2394bad
feat(abs): rewrite user-read/user-write.
...
See #307
2024-03-28 16:47:40 +00:00
Alexandre Pujol
b089a4d2c5
feat(profile): add the child-open-browsers profile.
2024-03-28 16:40:16 +00:00
Alexandre Pujol
e77f8db40f
feat(abs): add bash-strict.
2024-03-27 22:07:43 +00:00
Alexandre Pujol
bdb2b396b3
feat(abs): add trash-strict.
2024-03-27 22:06:07 +00:00
Alexandre Pujol
197c1bd78a
feat(profile): general update.
2024-03-27 21:53:11 +00:00
Alexandre Pujol
b9cfd787c8
fix(ci): minor fixes.
2024-03-27 17:17:15 +00:00
Alexandre Pujol
b88b8b8c26
refractor(abs): move common and app abstraction to their own abstractions subfolder.
...
As the number of abstraction is increasing, it is valuable to separate "base" abstractions to programs specific ones.
2024-03-27 15:11:21 +00:00
Alexandre Pujol
92f83d9e8d
feat(abs): update some abstractions.
2024-03-27 14:32:08 +00:00
Alexandre Pujol
d8d15c8a35
feat(profile): add ghc-pkg.
2024-03-24 20:45:15 +00:00
Alexandre Pujol
1a097bed36
doc: add the abstactions page.
2024-03-24 15:21:31 +00:00
Alexandre Pujol
8da2fd621a
feat(abs): remove some unused abstractions.
2024-03-24 14:44:58 +00:00
Alexandre Pujol
863034438d
fix(profile): resolve kdeconnectd path manunally.
2024-03-22 22:20:47 +00:00
Alexandre Pujol
8c516ea788
feat(profile): general update.
2024-03-22 22:13:42 +00:00
Alexandre Pujol
6d84301698
feat(profile): start using the exec directive.
2024-03-22 21:12:38 +00:00
Alexandre Pujol
a5f71675ea
feat(profile): general update.
2024-03-22 19:45:13 +00:00
Alexandre Pujol
828f282fc3
feat(profile): cleanup unix_chpwd already present in abs.
2024-03-22 13:11:49 +00:00
Alexandre Pujol
8c31008385
refractor: audio2 -> audio-server.
2024-03-22 13:03:52 +00:00
Alexandre Pujol
325068b705
feat(profile): all electron based software need userns.
2024-03-22 11:49:00 +00:00
Alexandre Pujol
87db46113c
feat(profile): cleanup common desktop files.
2024-03-21 23:28:57 +00:00
Alexandre Pujol
5149b55bd0
feat(profile): add only directive.
2024-03-21 23:18:03 +00:00
Alexandre Pujol
6052b95347
feat(profile): update stack directives.
2024-03-21 23:11:07 +00:00
Alexandre Pujol
7bc16fddfd
fix(profile): remove duplicate dbus rule.
2024-03-21 23:10:29 +00:00
Alexandre Pujol
6c38e90b5e
feat(profile): update dbus directive format.
2024-03-21 23:03:08 +00:00
Alexandre Pujol
dbb0d76e52
feat(abs): add the bash-strict.
2024-03-20 16:14:29 +00:00
Alexandre Pujol
5039dae148
feat(profile): improve kde support on debian.
2024-03-20 16:13:20 +00:00
Alexandre Pujol
7b880a5142
feat(profile): general update.
2024-03-20 00:04:39 +00:00
Alexandre Pujol
cbd0b61491
feat(profile): improve sudo abstraction.
2024-03-19 22:00:05 +00:00
Alexandre Pujol
7ae05eb397
feat(abs): add download directory to user-read.
2024-03-19 21:55:32 +00:00
Alexandre Pujol
bf613f59a5
feat(profile): replace @{md5} by @{hex32}.
2024-03-19 21:26:12 +00:00
Alexandre Pujol
ceb78d971e
feat(tunables): improve hex variables.
2024-03-19 21:15:50 +00:00
Alexandre Pujol
9007daf842
feat(tunable): opensuse has a special multiarch.
2024-03-19 14:49:17 +00:00
Alexandre Pujol
928f27dbf5
feat(profile): bwrap always need userns.
2024-03-19 14:48:32 +00:00
Alexandre Pujol
dee02b8698
fix: rule compilation.
2024-03-19 11:33:30 +00:00
Alexandre Pujol
091a93194d
feat(fsp): stack more profile on systemd.
2024-03-19 11:30:45 +00:00
Alexandre Pujol
3787eb1745
feat(profile): enable desktop user variable everywhere.
...
Also restrict access to these files.
2024-03-19 11:26:57 +00:00
Alexandre Pujol
a370281e9b
feat(profile): use desktop user variable in gnome.
...
Also restrict access to these files.
2024-03-18 15:31:55 +00:00
Alexandre Pujol
04b9e60072
feat(profile): replace some path with the new desktop variables.
2024-03-18 14:42:02 +00:00
Alexandre Pujol
77945674a5
feat(profile): general update.
2024-03-18 14:31:01 +00:00
Alexandre Pujol
437bef18ca
feat(abs): redeine the DE users paths.
2024-03-18 01:03:44 +00:00
Alexandre Pujol
25c2dc3399
feat(profile): improve gnome startup process.
2024-03-18 00:50:59 +00:00
Alexandre Pujol
8290c74e66
feat(profile): add some kde related profiles.
2024-03-17 22:49:19 +00:00
Alexandre Pujol
bf22e0770f
feat(profile): improve integration with opensuse.
2024-03-17 22:47:36 +00:00
Alexandre Pujol
eb66feef62
feat(abs): extend the bash abs with some common values.
2024-03-17 22:43:43 +00:00
Alexandre Pujol
233b1f2f0e
feat(profile): improve gnome profiles.
2024-03-17 21:29:49 +00:00
Alexandre Pujol
fb064431be
feat(profile): add gnome-session-migration.
2024-03-16 22:20:12 +00:00
Alexandre Pujol
6a41184a0e
feat(profile): kglobalaccel5 -> kglobalacceld
2024-03-16 21:49:49 +00:00
Alexandre Pujol
14680e736d
feat(profile): mirnor cleanup on the new dbus profiles.
2024-03-16 21:46:02 +00:00
Alexandre Pujol
0c5e71f971
feat(profile): cleanup some rules already included in abs.
2024-03-16 21:40:35 +00:00
Alexandre Pujol
b15aaae553
feat(profile): add support for new dbus-session in systemd-user.
2024-03-16 21:33:36 +00:00
Alexandre Pujol
30d8e16ffc
feat(profile): ensure plasma support new dbus stack.
2024-03-16 21:28:54 +00:00
Alexandre Pujol
9be9b442a9
feat(profile): rewrite the gnome startup process.
...
The changes in the dbus stack required to rewrite how gnome startup is handled
by our various profiles.
2024-03-16 20:52:02 +00:00
Alexandre Pujol
af5171e39d
feat(tunable): add variables for some system-users.
2024-03-16 19:43:22 +00:00
Alexandre Pujol
1148b8faad
feat(tunable): improve our variables definition.
2024-03-16 19:42:25 +00:00
Alexandre Pujol
be3d625b7f
feat(profile): general update.
2024-03-16 19:41:27 +00:00
Alexandre Pujol
c9b87efebe
chore: cosmetic.
2024-03-16 19:27:45 +00:00
Alexandre Pujol
c6717d2bab
feat(profile): use new dbus profile in dbus label.
2024-03-16 13:10:25 +00:00
Alexandre Pujol
61e2cb55ac
feat(profile): rewrite the dbus profiles.
...
Replace the old dbus-broker/dbus-daemon profiles stack by a new unified set of
profiles that does not depend-on the dbus implementation used.
Ensure that a given bus is fully managed by one unified profile:
- We need to allow far fewer rules than before (especially by splitting
dbus-system and dbus-session).
- It has the side effect to fix some long-running issues regarding dbus start
(see: #74 , #80 & #235 ) while keeping all dbus server in the same place.
2024-03-16 13:03:32 +00:00
Alexandre Pujol
4819022202
feat(abs): add unix_chkpwd to the authentication abs as upstream.
2024-03-16 12:27:23 +00:00
Alexandre Pujol
e658d1c4d3
feat(profile): restrict access to /var/lib/gdm in gnome-shell.
2024-03-16 00:22:30 +00:00
Alexandre Pujol
66aa230b90
feat(profile): some dbus rule improvment.
2024-03-15 23:56:23 +00:00
Alexandre Pujol
1b8b52962b
feat(fsp): update mounting rules.
2024-03-15 23:45:18 +00:00
Alexandre Pujol
e3f9013c3a
feat(profile): add some new profiles.
2024-03-15 16:21:17 +00:00
Alexandre Pujol
dd1b3b16e2
feat(profile): move gcr tools.
2024-03-15 16:18:44 +00:00
Alexandre Pujol
cf4e47f10f
feat(profile): general update.
2024-03-15 16:07:53 +00:00
Alexandre Pujol
9f3be7a96d
feat(abs): small improvements.
2024-03-15 15:55:46 +00:00
Alexandre Pujol
bdeb62d17d
feat(profile): add some missing dbus own definition.
2024-03-15 15:03:42 +00:00
Alexandre Pujol
30656bdc48
feat(abs): minor improvements over some abstractions.
2024-03-13 16:18:54 +00:00
Alexandre Pujol
c33cd740c9
feat(profile): start using the sudo abstraction.
2024-03-13 16:17:20 +00:00
Alexandre Pujol
7415b85e1c
feat(profile): add some internal kde profile.
2024-03-13 16:10:02 +00:00
Alexandre Pujol
0ecf923fb9
feat(profile): cleanup tool available for pacman hooks.
2024-03-13 16:07:43 +00:00
Alexandre Pujol
09f1babb7c
chore: improve comments on udev data.
2024-03-13 15:58:28 +00:00
Alexandre Pujol
fef6390b9e
feat(profile): merge gdm-session.
2024-03-13 15:52:23 +00:00
Alexandre Pujol
3bb5ea72df
feat(profile): add profile for yacreader.
2024-03-12 16:06:24 +00:00
Alexandre Pujol
467c38724a
feat(profile): clean superfluous openssl abstraction includes
...
apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
2024-03-12 16:00:44 +00:00
Alexandre Pujol
d5972cdf1d
feat(abs): add gnutls and openssl config to the crypto abs.
...
Follow (and confirm) recent addition from upstream.
2024-03-12 15:50:28 +00:00
Alexandre Pujol
9c859cec9d
feat(profile): modernize some profiles.
2024-03-12 15:48:43 +00:00
Alexandre Pujol
81b9de3aff
feat(profile): use the new audio-client abs in profiles.
2024-03-12 15:44:40 +00:00
Alexandre Pujol
e4c0f683d2
feat(profile): replace old audio abstraction by the new stack.
2024-03-12 15:39:10 +00:00
Alexandre Pujol
b1235b0c52
feat(abs): rewrite the audio stack.
2024-03-12 15:27:51 +00:00
Alexandre Pujol
394afb1991
feat(abs): add the new sudo abstraction.
2024-03-11 22:48:32 +00:00
Alexandre Pujol
0eeefb5f09
feat(profile): general update.
2024-03-11 22:47:22 +00:00
Alexandre Pujol
0a9021bcf1
feat(profile): finalize the update kde profiles to plasma 6.
2024-03-11 22:43:37 +00:00
Alexandre Pujol
042e9ff543
feat(profile): rewrite the okular profile.
2024-03-11 22:37:59 +00:00
Alexandre Pujol
a3f91f4224
feat(profile): ensure at bus start in the same profile.
2024-03-11 22:36:14 +00:00
Alexandre Pujol
2acd7d8a10
feat(profile): rewrite how gdm starts gnome.
2024-03-11 22:34:35 +00:00
Alexandre Pujol
68fbd81e17
feat(profile): general update.
2024-03-10 21:21:00 +00:00
Alexandre Pujol
ad8e5a9797
feat(fsp): update profile stack.
2024-03-10 21:17:50 +00:00
Alexandre Pujol
10ce0ba4a1
feat(profile): merge colord-sane into colord.
...
Required due to nnp flag enabled on colord-sane. As the profiles are similar it is easier to merge them.
2024-03-10 20:27:05 +00:00
Alexandre Pujol
7882ae2153
feat(profile): remove rule moved to the base abstraction.
2024-03-10 20:01:58 +00:00
Alexandre Pujol
beaf1bad16
feat(profile): general update.
2024-03-10 19:35:04 +00:00
Alexandre Pujol
df21886965
fix(fsp): fix conflicting x modifiers in abstractions
2024-03-10 18:57:05 +00:00
Alexandre Pujol
8f1fff89ab
feat(abs): minor improvments.
2024-03-10 14:56:18 +00:00
Alexandre Pujol
a8b8bf52f8
feat(fsp): stack audio profiles using the new stack directive.
2024-03-10 14:51:22 +00:00
Alexandre Pujol
16d0af1c5e
feat(fsp): improve systemd profile.
2024-03-10 14:49:31 +00:00
Alexandre Pujol
166e786166
feat(abs): allow everyone to receive signal from systemd/systemd-user.
2024-03-10 13:51:02 +00:00
Alexandre Pujol
4ab5e99a6f
feat(profile): add support for plasma 6.
2024-03-08 15:22:15 +00:00
Alexandre Pujol
3d425c7fdd
feat(profile): add support for qt6.
2024-03-08 15:15:58 +00:00
Alexandre Pujol
256980d761
feat(abs): remove deprecated kde4 abstraction.
2024-03-05 18:48:59 +00:00
Alexandre Pujol
1df176cf7b
feat: small update and minor fixes.
2024-03-05 18:29:44 +00:00
Alexandre Pujol
ff849b9f09
feat(profile): general update.
2024-03-05 18:00:36 +00:00
Alexandre Pujol
70963a50b6
feat(profile): start implementing systemctl subprofile instead of using child-systemctl.
2024-03-05 17:45:02 +00:00
Alexandre Pujol
a7e37528d5
feat(profile): update some browser based profiles.
2024-03-05 17:39:36 +00:00
Alexandre Pujol
bc69b193ea
feat(abs): minor update to abs definitions.
2024-03-05 17:37:38 +00:00
Alexandre Pujol
c66d3bf9f4
feat(profile): general update.
2024-03-05 16:58:16 +00:00
Alexandre Pujol
faa40c8cde
feat(fsp): cleanup main systemd profiles.
2024-03-05 16:53:34 +00:00
Alexandre Pujol
62f1f7df6e
feat(fsp): allow signal from system-user for some user app.
2024-03-05 00:25:39 +00:00
Alexandre Pujol
3c77da8f7d
feat(fsp): improve the systemd profiles.
2024-03-05 00:20:05 +00:00
Alexandre Pujol
c80449719e
feat(fsp): rewrite mount rules for systemd.
2024-03-05 00:18:40 +00:00
Alexandre Pujol
1699260a87
fear(fsp): expand systemd-service for more services.
2024-03-05 00:16:24 +00:00
Alexandre Pujol
89cd3d023b
fix: entrypoint for systemd-cryptsetup.
2024-03-04 23:27:21 +00:00
Alexandre Pujol
8ea0964724
feat(fsp): restrict @{run} for systemd.
2024-03-04 22:02:43 +00:00
Alexandre Pujol
532162f302
feat(abs): improve mount rule for bwrap.
2024-03-04 12:55:32 +00:00
Alexandre Pujol
f1b01d03cd
feat(profile): add gnome-desktop-thumbnailers.
2024-03-04 12:54:39 +00:00
Alexandre Pujol
0533e03756
feat(abs): add some dbus access to bwrap-app.
...
See #302
2024-03-03 23:15:19 +00:00
Alexandre Pujol
b91cf4da41
feat(abs): cleanup bwrap mount rule as it is not maintainable to restrict more.
2024-03-03 23:11:27 +00:00
Alexandre Pujol
0ffa51aca4
feat(abs): rewrite bwrap mount rules.
2024-03-03 12:08:30 +00:00
Alexandre Pujol
af0c87f712
feat(abs): add the initial version of the systemctl abstraction.
2024-03-03 12:03:16 +00:00
Alexandre Pujol
7e8f854b16
feat(abs): deny apparmor/.null in the base abstraction.
2024-03-03 11:51:39 +00:00
Jeroen Rijken
ba6172bb8c
Review points
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
346285720d
Small updates
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
0332c9cb1b
Git SSH agent
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
a2a149e0b7
New abstraction uim
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
f807d5a190
Deduplicate and revert
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
13079bbd7e
name to label
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
23fa2b36ab
Remove curly brackets
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
af4038867a
Syntax fixes
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
04cf3d3850
Various fixes
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
c177ca09ed
Typo
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
b0655e9993
Fixes and profile updates
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
b532dd6827
Update various profiles
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Alexandre Pujol
92a1d9f65f
feat(profile): general update.
2024-03-01 22:35:49 +00:00
Alexandre Pujol
06abeac2ee
feat(profile): general update.
2024-02-29 21:45:42 +00:00
Alexandre Pujol
cd09dc7688
feat(abs): update dbus absractions.
2024-02-29 21:38:49 +00:00
Alexandre Pujol
f76051f114
feat(profile): add some unix rules with local address.
2024-02-29 21:15:59 +00:00
Alexandre Pujol
956c282794
feat(abs): add apps to the launcher-user abs.
2024-02-29 21:06:32 +00:00
Alexandre Pujol
ffb189ef65
feat(profile): general update.
2024-02-29 00:32:40 +00:00
Alexandre Pujol
1f3b812cfb
feat(profile): add the loupe profile.
2024-02-28 23:52:57 +00:00
Alexandre Pujol
cda8f30c29
feat(profile): start using the new bwrap abs.
2024-02-28 23:52:15 +00:00
Alexandre Pujol
cbbb2b4a3e
fix(profile): better libdir for snap based profiles.
2024-02-28 23:47:47 +00:00
Alexandre Pujol
741980f8ab
feat(abs): use @{pci} in pci path.
2024-02-28 23:32:34 +00:00
Alexandre Pujol
431e93c9df
feat(abs): update bwrap minimal requirments.
2024-02-28 17:17:51 +00:00
Alexandre Pujol
555b5e3c3f
feat(profile): general update.
2024-02-28 17:17:20 +00:00
Alexandre Pujol
d187514fd3
feat(profile): add new userns rule.
2024-02-28 15:39:18 +00:00
Alexandre Pujol
175d243c54
refractor: rename element -> element-desktop.
2024-02-28 15:37:52 +00:00
Alexandre Pujol
00051bd2f0
feat(profiles): continue replacing [0-9]* by @{int}.
2024-02-26 21:10:53 +00:00
Alexandre Pujol
99e4c4622d
feat(abs): add initial version of the bwrap abs.
...
- To be used by profile that runs bwrap directly.
- Needs more rule when used alongside flatpak
2024-02-24 18:41:36 +00:00
Alexandre Pujol
7bd500b979
Merge branch 'main' of github.com:roddhjav/apparmor.d
...
* 'main' of github.com:roddhjav/apparmor.d:
Add Profiles for imv and zathura (#291 )
2024-02-23 22:50:34 +00:00
Alexandre Pujol
9bd21e9361
fix(profile): add bluetooth network to dbus-broker.
2024-02-23 22:35:10 +00:00
valoq
df455f93eb
Add Profiles for imv and zathura ( #291 )
...
* add profiles
* fix minor issues
* fix read permissions
* remove leftover line
2024-02-23 20:48:24 +00:00
Alexandre Pujol
2ea53a9dc3
feat(profile): general update.
2024-02-23 20:21:22 +00:00
Alexandre Pujol
4b23bccb47
fix: ensure fsck.ext4 is has only one profile.
...
fsck.ext4 was in the profile attachment for both fsck-ext4 and e2fsck, breaking transition to the profile.
Also reorganise some entrypoint to avoid this kind of confusion.
2024-02-23 20:12:32 +00:00
Alexandre Pujol
a9e767462d
fix: remove useless rule.
...
Rule already present in the base abs.
2024-02-23 19:54:54 +00:00
Alexandre Pujol
d2ab121d08
feat(profile): stack colord-sane on colord.
...
Both profile could be merged to avoid nnp issue.
2024-02-23 19:53:18 +00:00
doublez13
b2af7a631a
whatis: initial profile
...
AppArmor profile for whatis
2024-02-21 14:10:51 +00:00
Jeroen Rijken
434fc6e954
Update after review
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
f60234d74a
Restore libexec
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
0fb3706bbd
Fixes after review
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
c8856f6383
Fix konsole links
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
640cf9e1d3
Dolphin updates
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
7fa4113131
Dolphin copy and delete from trash
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
062a766e06
Typo
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
943f52fbc4
Add ptrace to kded5
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
7addadfa7b
Add multiarch to lib
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
8a342749ba
rename dbus to bus.
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
2b65e58b19
Flatpak dbus addition
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
cd3cf50638
Cannot reproduce
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
7a61919f71
Flatpak dbus and kio
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
4c5a21145a
General update
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Jeroen Rijken
40b171ee94
Replace shells with new sh_path variable
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
doublez13
3b1b187d13
Abook: Fix missing directory ( #298 )
...
Allow abook to create ~/.abook
2024-02-19 12:38:24 +00:00
Alexandre Pujol
14fe43714a
feat(profile): general update.
2024-02-15 00:19:13 +00:00
Alexandre Pujol
a334b461d0
feat(fsp): update systemd related profiles.
2024-02-15 00:16:53 +00:00
Alexandre Pujol
e02bf03cca
feat(tunable): add new system_user variable.
2024-02-14 23:58:18 +00:00
doublez13
ea97ff6a5f
Mutt and Abook profiles ( #288 )
...
There are an innumerable number of mutt configurations. This AA profile is intended to work with a stock mutt config. Any customizations should be placed in local/mutt
This might be a little annoying because by default mutt saves attachments in the directory that it was started from (most likely ~/), and there is no config option that I'm aware of to set a default download location.
A user will either need to manually specify a location (like ~/Downloads) when saving, or allow saving to ~/ in the local override.
2024-02-14 23:03:03 +00:00
Alexandre Pujol
804bde0172
chore: remove unneeded abi definition in abstraction.
2024-02-11 13:34:12 +00:00
