Jamie Strandboge
834efc7b2c
fix LP: #626451 (GoogleTalk in ubuntu-browsers.d/multimedia)
2010-09-08 08:51:06 -05:00
Jamie Strandboge
d2c61794ea
update fonts abstraction to add '/var/lib/ghostscript/** r,'
2010-09-03 08:38:14 -05:00
Jamie Strandboge
b56e654f26
abstractions/ubuntu-browsers: add '/usr/bin/sensible-browser PUxr'
2010-08-30 07:52:20 -05:00
Jamie Strandboge
40751c2ed3
abstractions/ubuntu-browsers.d/ubuntu-integration: update for kmozillahelper
...
and gnome-appearance-properties (LP: #514356 , LP: #573344 )
abstractions/ubuntu-browsers.d/user-files: update for /net (LP: #593413 )
2010-08-18 10:06:40 -05:00
Jamie Strandboge
c96c8a391f
profiles/apparmor.d/abstractions/ubuntu-browsers.d/java: generalize names
...
of child profiles
2010-08-11 14:10:16 -05:00
Jamie Strandboge
7536899894
create ubuntu-feed-readers abstraction and have ubuntu-browsers.d/multimedia
...
use it instead of specifying liferea directly
2010-08-11 09:58:34 -05:00
Jamie Strandboge
44f2e73d1b
update X abstraction for gdm's new placement of XAUTHORITY (LP: #601583 )
2010-08-11 09:57:54 -05:00
Jamie Strandboge
9e99dfc8b2
add ca-certificates to ssl_certs abstraction (LP: #605835 )
2010-08-11 09:15:56 -05:00
Jamie Strandboge
42cd946ff2
update ubuntu-browsers.d/kde to use PUx for kde4-config
2010-08-10 17:57:42 -05:00
Jamie Strandboge
cbbf3ea75e
update abstractions/ubuntu-browsers.d/java for icedtea
2010-08-10 16:45:23 -05:00
Jamie Strandboge
e1e85f285c
remove kde4-config from the kde abstraction
2010-08-10 15:38:58 -05:00
Jamie Strandboge
1bdb6069da
fix whitespace abstractions/ubuntu-browsers.d/*
...
add 'owner' match to abstractions/ubuntu-browsers.d/java
2010-08-10 14:18:21 -05:00
Jamie Strandboge
0978a1ad8a
update ubuntu-* abstractions to use PUx instead of Ux
2010-08-10 14:11:04 -05:00
Jamie Strandboge
2a3aae6d57
'owner' match in commit 1406 too strict for /tmp/ and /var/tmp/
2010-08-09 09:56:31 -05:00
Jamie Strandboge
d472cf13b1
add Ubuntu-specific profiles/apparmor.d/abstractions/ubuntu-browsers.d/*
...
for use with browser profiles
2010-08-06 16:01:57 -05:00
Jamie Strandboge
24e3b5296e
tighten up the dbus abstractions
2010-08-03 12:04:37 -05:00
Jamie Strandboge
9533ac3405
fix for LP: #611248
2010-08-03 09:13:34 -05:00
Jamie Strandboge
d744377f4a
abstractions/dbus-session: use Pix instead of Ux for dbus-launch since in
...
addition to setting up a dbus session it can be used to launch applications
2010-06-22 11:50:31 -05:00
Jamie Strandboge
23bc2980c6
ubuntu-media-players: add gmplayer
2010-06-08 14:33:31 -05:00
Jamie Strandboge
f8c7cee59c
allow thunderbird 3 in abstractions/ubuntu-email
2010-06-07 08:30:34 -05:00
Kees Cook
34f5510faf
network interface enumeration
2010-06-04 17:44:59 -07:00
Kees Cook
0e07298340
update for font/icon/mime locations in current gnome
2010-06-04 17:44:30 -07:00
Kees Cook
a7fd5abe37
statvfs allowed by default
2010-06-04 17:43:11 -07:00
Jamie Strandboge
7d22b5bdce
abstractions/user-tmp: require 'owner' matching
2010-05-12 10:52:23 +02:00
Jamie Strandboge
369e18202f
add dbus-session abstraction
2010-04-19 12:38:17 -05:00
Jamie Strandboge
6186118aa0
adjust cgi path for php5 abstraction (LP: #538661 )
2010-03-30 12:34:32 -05:00
Jamie Strandboge
98d20bf257
adjust path to extensions in php5 abstraction, since the extensions directory
...
is more free-form than once thought
2010-03-30 12:31:26 -05:00
Jamie Strandboge
f0b380fe5e
add 'k' to /var/lib/samba/**.tdb in the samba abstraction
2010-03-25 18:13:00 -05:00
Jamie Strandboge
fd3baa930e
add ubuntu-bittorrent-clients and ubuntu-media-players abstractions
2010-03-08 13:50:25 -06:00
Jamie Strandboge
df05261cd3
add /etc/sound to audio abstraction
2010-03-08 13:49:37 -06:00
Kees Cook
69ebfc4cda
update python shared library paths for "pyshared"
2010-01-29 10:10:31 -08:00
Kees Cook
a0e8bf9661
update php5 abstraction, add more details to apache hat documentation, include a common apache2 abstraction for use with hats
2010-01-03 13:16:38 -08:00
Jamie Strandboge
45dc9d4d08
add /opt/google/chrome/google-chrome to ubuntu-browsers (TODO: abstract
...
out to third-party-browsers)
2009-12-04 11:37:10 -06:00
Kees Cook
92b9063527
update KDE abstraction, from Ubuntu
2009-11-11 11:45:49 -08:00
Kees Cook
40e8c9f6e6
merge profiles from Ubuntu, including change_hat apache2 template
2009-11-11 11:42:30 -08:00
Jamie Strandboge
84565d5407
abstractions/gnome: add /etc/gnome/defaults.list
2009-11-10 14:04:26 -06:00
Jamie Strandboge
694c9916b9
pull in Ubuntu updates to profiles/apparmor.d
2009-11-04 14:25:42 -06:00
John Johansen
7e49a0004b
Update ntpd to contain rejects for bnc#433368 and bnc#402693
2008-11-05 14:23:25 +00:00
John Johansen
748e398c21
- various patches and cleanups from kees@ubuntu.com
2008-06-11 20:19:36 +00:00
John Johansen
777ff460f8
update profiles for bugs that have been reported by various users
2008-02-19 10:35:19 +00:00
Seth Arnold
d66a9b2886
fixes for abstractions from Mathias Gug
2007-08-28 23:05:56 +00:00
Seth Arnold
c2f555ba0f
abstractions fixes from Mathias Gug (Ubuntu)
2007-08-28 22:39:52 +00:00
Seth Arnold
8621cb193a
some new abstractions from Mathias Gug
2007-08-27 23:49:51 +00:00
Seth Arnold
cbf2d633b2
Bug 295086 - abstractions/X lists /usr/X11R6
2007-08-23 23:26:49 +00:00
Seth Arnold
7486b2bbb0
Bug 288960 - nscd with nss_ldap and sasl/gss bind to ldap server failed
2007-08-23 23:22:06 +00:00
Seth Arnold
448fc73350
Bug 287579 - <abstractions/X> doesn't allow access to /usr/share/X11 and other xorg directories
2007-08-23 23:12:53 +00:00
Seth Arnold
1b92358fe1
Bug 241479 - Fix for usr.sbin.nscd profile
2007-08-23 22:49:11 +00:00
Steve Beattie
4cc2f981a3
[ https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/132468 ]
...
Dur, I put the wrong entry for resolvconf in the nameservice
abstraction, fixing.
2007-08-21 21:53:27 +00:00
Dominic Reynolds
cd007f1162
Updates for cups, add inet|inet6 dgram|stream to nameservice abstraction
2007-08-17 21:46:56 +00:00
Steve Beattie
1f0169a5f9
Launchpad bug #132468 : Nameservice abstraction should also include
...
/var/run/resolvconf/resolv.conf:
The Nameservice abstraction configuration file
(/etc/apparmor.d/abstractions/nameservice) permits reads access to
(amongst other paths) /etc/resolv.conf.
However, on systems using resolvconf, this is a symbolic link to
/etc/resolvconf/run/resolv.conf -- where /etc/resolvconf/run itself
is a symlink to /var/run/resolvconf.
2007-08-14 14:50:09 +00:00
