Jamie Strandboge
2a3aae6d57
'owner' match in commit 1406 too strict for /tmp/ and /var/tmp/
2010-08-09 09:56:31 -05:00
Jamie Strandboge
d472cf13b1
add Ubuntu-specific profiles/apparmor.d/abstractions/ubuntu-browsers.d/*
...
for use with browser profiles
2010-08-06 16:01:57 -05:00
Jamie Strandboge
eace04e2e7
profiles/Makefile: use LOCAL_ADDITIONS using filter-out in clean target, which
...
is much cleaner.
2010-08-05 16:00:23 -05:00
Jamie Strandboge
f9187ac661
profiles/Makefile: use same logic in 'clean' target as we did in 'local'
2010-08-05 15:53:07 -05:00
Jamie Strandboge
b550fa291c
adjust profiles/Makefile for local files
2010-08-05 15:10:33 -05:00
Jamie Strandboge
6fb3f5c4a6
move profiles/local to profiles/apparmor.d/local
2010-08-05 14:15:56 -05:00
Jamie Strandboge
f25949cf84
start on 'local/' mechanism to aid in packaging:
...
- add profiles/local/README
- adjust profiles/apparmor.d/{bin,sbin,usr}* to include a file from local/
- adjust profiles/apparmor.d/{bin,sbin,usr}* for for copyright, some whitespace
and svn conventions
2010-08-05 14:00:02 -05:00
Jamie Strandboge
24e3b5296e
tighten up the dbus abstractions
2010-08-03 12:04:37 -05:00
Jamie Strandboge
9533ac3405
fix for LP: #611248
2010-08-03 09:13:34 -05:00
Jamie Strandboge
d744377f4a
abstractions/dbus-session: use Pix instead of Ux for dbus-launch since in
...
addition to setting up a dbus session it can be used to launch applications
2010-06-22 11:50:31 -05:00
Jamie Strandboge
23bc2980c6
ubuntu-media-players: add gmplayer
2010-06-08 14:33:31 -05:00
Jamie Strandboge
f8c7cee59c
allow thunderbird 3 in abstractions/ubuntu-email
2010-06-07 08:30:34 -05:00
Kees Cook
34f5510faf
network interface enumeration
2010-06-04 17:44:59 -07:00
Kees Cook
0e07298340
update for font/icon/mime locations in current gnome
2010-06-04 17:44:30 -07:00
Kees Cook
a7fd5abe37
statvfs allowed by default
2010-06-04 17:43:11 -07:00
Jamie Strandboge
7d22b5bdce
abstractions/user-tmp: require 'owner' matching
2010-05-12 10:52:23 +02:00
Jamie Strandboge
369e18202f
add dbus-session abstraction
2010-04-19 12:38:17 -05:00
Jamie Strandboge
6186118aa0
adjust cgi path for php5 abstraction (LP: #538661 )
2010-03-30 12:34:32 -05:00
Jamie Strandboge
98d20bf257
adjust path to extensions in php5 abstraction, since the extensions directory
...
is more free-form than once thought
2010-03-30 12:31:26 -05:00
Jamie Strandboge
f0b380fe5e
add 'k' to /var/lib/samba/**.tdb in the samba abstraction
2010-03-25 18:13:00 -05:00
Jamie Strandboge
fd3baa930e
add ubuntu-bittorrent-clients and ubuntu-media-players abstractions
2010-03-08 13:50:25 -06:00
Jamie Strandboge
df05261cd3
add /etc/sound to audio abstraction
2010-03-08 13:49:37 -06:00
Kees Cook
69ebfc4cda
update python shared library paths for "pyshared"
2010-01-29 10:10:31 -08:00
Jamie Strandboge
d98c8ae8b5
add commented, but blank tunables/alias
...
profiles/apparmor.d/tunables/global: include tunables/alias
parser/apparmor.d.pod: add alias rules and home.d. clean up
HOMEDIRS
2010-01-11 14:19:35 -06:00
Kees Cook
8b54df93dd
make note of the trailing slash requirement in the home.d/site.local example
2010-01-05 15:43:32 -08:00
Jamie Strandboge
2d8246668c
fix typo in profiles/apparmor.d/tunables/home.d/site.local
2010-01-05 16:16:16 -06:00
Jamie Strandboge
ebedab89e5
add local site configuration for HOMEDIRS tunable
...
- add commented profiles/apparmor.d/tunables/home.d/site.local
- profiles/apparmor.d/tunables/home: include tunables/home.d
- profiles/Makefile: adjust for home.d sub-directory and install
site.local
2010-01-05 15:58:43 -06:00
Kees Cook
a0e8bf9661
update php5 abstraction, add more details to apache hat documentation, include a common apache2 abstraction for use with hats
2010-01-03 13:16:38 -08:00
Jamie Strandboge
45dc9d4d08
add /opt/google/chrome/google-chrome to ubuntu-browsers (TODO: abstract
...
out to third-party-browsers)
2009-12-04 11:37:10 -06:00
Kees Cook
d6a2f8258f
remove profile complain flags -- it is up to a distribution to decide how to use a profile
2009-11-11 11:55:29 -08:00
Kees Cook
92b9063527
update KDE abstraction, from Ubuntu
2009-11-11 11:45:49 -08:00
Kees Cook
40e8c9f6e6
merge profiles from Ubuntu, including change_hat apache2 template
2009-11-11 11:42:30 -08:00
Kees Cook
da6c9246f5
clear remaining $Id$ tags, since bzr does not suppor them
2009-11-11 10:44:26 -08:00
Jamie Strandboge
84565d5407
abstractions/gnome: add /etc/gnome/defaults.list
2009-11-10 14:04:26 -06:00
Jamie Strandboge
6e42e18191
have dnsmasq in enforce mode
2009-11-04 14:30:43 -06:00
Jamie Strandboge
694c9916b9
pull in Ubuntu updates to profiles/apparmor.d
2009-11-04 14:25:42 -06:00
John Johansen
07ded00bd3
Update klogd profile with rejects reported in bnc#436849
2008-11-21 11:51:01 +00:00
John Johansen
f1348fb693
Add missing firefox profile from previous commit
2008-11-21 11:26:27 +00:00
John Johansen
f6d502017d
Allow introspection in avahi bnc#431222
2008-11-07 05:52:01 +00:00
John Johansen
7d8f597c86
Update firefox profile as base for firefox 3
2008-11-05 16:00:39 +00:00
John Johansen
a77734a600
add reject for Novell bnc#425041
2008-11-05 14:53:00 +00:00
John Johansen
7e49a0004b
Update ntpd to contain rejects for bnc#433368 and bnc#402693
2008-11-05 14:23:25 +00:00
John Johansen
aab94f31c0
Allow ntp to have capability dac_override
2008-11-05 14:10:08 +00:00
John Johansen
434bbfc409
Fix ntp chroot rejects Novell bnc#256291
2008-11-05 14:08:43 +00:00
John Johansen
148ed13b5e
Fix reject for opensuse 11.1 listed in Novell bugzilla bnc#405317
2008-11-05 12:03:29 +00:00
John Johansen
f772109c4d
Fix rejects reported in Novell bnc#436849
2008-11-05 11:57:34 +00:00
John Johansen
748e398c21
- various patches and cleanups from kees@ubuntu.com
2008-06-11 20:19:36 +00:00
John Johansen
f6824704c5
fix profile variables with no value to have empty string, as the parser doesn't support having no value yet
2008-05-07 18:38:53 +00:00
John Johansen
5eb6218708
add missing tunables file
2008-05-07 12:07:28 +00:00
John Johansen
3092aaa821
Various profile updates touching on bnc#255270, bnc#331444, bnc#307365
...
bnc#230700
2008-04-10 08:54:05 +00:00
