mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-06 09:21:00 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
apparmor/profiles/apparmor.d/abstractions
History
Jamie Strandboge c51a68eaaf Description: Allow writes to /{,var}/run/systemd/journal/dev-log, the systemd 
journal socket. On Debian and Ubuntu systems, /dev/log is a symlink to
 /run/systemd/journal/dev-log, so this access is now required in the base
 abstraction to maintain current behavior.
Bug: https://bugs.launchpad.net/apparmor/+bug/1413232

Acked-By: Jamie Strandboge <jamie@canonical.com>
Acked-by: Steve Beattie <steve@nxnw.org>
2015-01-21 13:37:49 -06:00
..
apparmor_api Subject: profiles - fix apparmor_api abstractions 2013-01-02 15:02:29 -08:00
ubuntu-browsers.d ubuntu-browsers.d/java: update to allow /run/user/*/icedteaplugin-* 2014-10-09 14:56:34 -05:00
apache2-common profiles: allow apache hats to receive signals from unconfined 2014-06-24 11:06:06 -07:00
aspell Bug: https://bugs.launchpad.net/bugs/917859 2012-01-18 10:15:57 -08:00
audio audio abstraction: allow reading /etc/wildmidi/wildmidi.cfg. 2014-09-10 15:40:43 -07:00
authentication add p11-kit to authentication abstraction 2012-01-06 11:46:52 -06:00
base Description: Allow writes to /{,var}/run/systemd/journal/dev-log, the systemd 2015-01-21 13:37:49 -06:00
bash Subject: profiles - use @{pid} tunable 2013-01-02 15:34:38 -08:00
consoles as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
cups-client profiles: rw file perms are now needed on AF_UNIX socket files 2013-12-19 23:19:40 -08:00
dbus profiles: Add strict system bus abstraction 2014-01-10 15:34:45 -06:00
dbus-accessibility profiles: Add strict accessibility bus abstraction 2014-01-10 15:35:30 -06:00
dbus-accessibility-strict profiles: Add strict accessibility bus abstraction 2014-01-10 15:35:30 -06:00
dbus-session profiles: Add strict session bus abstraction 2014-01-10 15:35:09 -06:00
dbus-session-strict r2606 had updates for the dbus-session-strict and X abstractions but 2014-09-03 15:11:05 -05:00
dbus-strict profiles: Add strict system bus abstraction 2014-01-10 15:34:45 -06:00
dconf Add dconf abstraction for querying dconf settings 2013-10-09 06:18:09 -07:00
dovecot-common profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
enchant Fix from Felix Geyer: in the enchant abstraction, allow the creation of 2012-01-10 11:37:54 +01:00
fonts libthai-data is used by LibThai which is the library used to deal with 2014-02-14 14:28:12 -06:00
freedesktop.org Description: update freedesktop.org for new location of mimeapps.list 2014-10-08 14:32:11 -05:00
gnome Update gnome abstraction to allow unix connections to dbus-vfs-daemon abstract 2014-10-06 14:06:23 -05:00
gnupg Subject: profiles - owner usage for @{HOME} rules 2013-01-04 22:05:53 -08:00
ibus add preliminary ibus abstraction. Will likely need more once more ibus users 2010-12-22 16:57:35 -06:00
kde update kde abstraction for /etc/xdg/Trolltech.conf 2014-09-03 14:48:41 -05:00
kerberosclient Update samba profiles for samba 4.x 2013-11-20 01:17:52 +01:00
launchpad-integration fix up comments in launchpad-integration 2012-01-11 09:27:22 +01:00
ldapclient split off abstractions/ldapclient from abstractions/nameservice 2011-11-01 17:08:37 +01:00
likewise as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
mdns update for /var/run -> /run udev transition. For compatibility, distributions 2011-07-14 07:57:57 -05:00
mysql abstractions/mysql: allow access to mysqld.sock 2014-04-28 14:07:17 -07:00
nameservice fix filename for .../nscd/hosts (which was accidently changed to "host" 3 years ago) 2014-11-18 00:27:10 +01:00
nis as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
nvidia Description: update nvidia abstraction for additional /proc and ~/.nv/GLCache 2014-06-06 13:50:58 -05:00
openssl add FIPS support to abstractions/openssl 2014-01-03 20:43:43 +01:00
orbit2 fixes for abstractions from Mathias Gug 2007-08-28 23:05:56 +00:00
p11-kit profiles: rw file perms are now needed on AF_UNIX socket files 2013-12-19 23:19:40 -08:00
perl Update perl abstraction to allow reading /usr/lib/@{multiarch}/perl{,5}/** 2014-08-21 07:28:44 -05:00
php5 abstractions/php: allow access to /etc/php5/**.ini 2014-09-16 21:44:48 +02:00
postfix-common profiles: move postfix-common to abstractions/ 2014-06-26 21:32:56 -07:00
private-files deny writes to upstart user sessions jobs in abstractions/private-files 2013-05-13 14:56:10 -05:00
private-files-strict profiles: rw file perms are now needed on AF_UNIX socket files 2013-12-19 23:19:40 -08:00
python Support python 2.[4-7] and python 3.[0-4] for greater cross-distro 2014-03-11 16:03:24 -04:00
ruby abstractions/ruby: add /usr/local/ and vendor_ruby paths 2014-09-08 21:36:47 +02:00
samba profiles: permit clustered Samba access to CTDB socket and databases 2014-07-04 12:09:58 +02:00
smbpass as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
ssl_certs add /var/lib/ca-certificates/ to abstractions/ssl_certs. 2013-11-26 00:41:04 +01:00
ssl_keys as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
svn-repositories as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
ubuntu-bittorrent-clients don't #include ubuntu-helpers in the abstractions. This can only be included 2012-01-11 09:00:35 +01:00
ubuntu-browsers Include IceWeasel in ubuntu-browsers abstraction. 2012-04-25 12:13:15 -07:00
ubuntu-console-browsers don't #include ubuntu-helpers in the abstractions. This can only be included 2012-01-11 09:00:35 +01:00
ubuntu-console-email don't #include ubuntu-helpers in the abstractions. This can only be included 2012-01-11 09:00:35 +01:00
ubuntu-email add /usr/bin/gnome-gmail to ubuntu-email (LP: #1169881) 2014-09-24 15:26:38 -05:00
ubuntu-feed-readers don't #include ubuntu-helpers in the abstractions. This can only be included 2012-01-11 09:00:35 +01:00
ubuntu-gnome-terminal update ubuntu abstractions to use '# vim:syntax=apparmor' 2010-12-21 12:53:33 -06:00
ubuntu-helpers update Ubuntu-specific abstractions/ubuntu-helpers for unix mediation 2014-09-15 16:18:51 -05:00
ubuntu-konsole Subject: profiles - use @{pid} tunable 2013-01-02 15:34:38 -08:00
ubuntu-media-players don't #include ubuntu-helpers in the abstractions. This can only be included 2012-01-11 09:00:35 +01:00
ubuntu-unity7-base add ubuntu-unity7-* abstractions for Ubuntu desktop users 2014-02-05 23:44:04 -05:00
ubuntu-unity7-launcher add ubuntu-unity7-* abstractions for Ubuntu desktop users 2014-02-05 23:44:04 -05:00
ubuntu-unity7-messaging add ubuntu-unity7-* abstractions for Ubuntu desktop users 2014-02-05 23:44:04 -05:00
ubuntu-xterm update for /var/run -> /run udev transition. For compatibility, distributions 2011-07-14 07:57:57 -05:00
user-download Update abstractions to use new XDG_*_DIR values. Thanks to Christian Boltz for 2014-02-14 16:28:16 -06:00
user-mail Description: also allow /var/mail in user-mail 2014-10-09 15:48:37 -05:00
user-manpages From: Christian Boltz <apparmor@cboltz.de> 2011-08-05 13:12:35 -07:00
user-tmp as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
user-write Update abstractions to use new XDG_*_DIR values. Thanks to Christian Boltz for 2014-02-14 16:28:16 -06:00
video fixes for abstractions from Mathias Gug 2007-08-28 23:05:56 +00:00
web-data Add /var/www/html to abstractions/web-data, which is the path used on Debian 2014-02-27 14:49:54 -06:00
winbind update abstractions/winbind 2014-02-14 23:37:13 +01:00
wutmp Merge k permission for /var/log/lastlog into abstractions/wutmp 2011-08-16 12:26:44 +02:00
X X abstraction: adjust for LightDM xauthority location 2014-10-02 11:06:05 -07:00
xad as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
xdg-desktop Create an xdg-desktop abstraction based on the upstream documentation for 2012-01-11 13:00:34 +01:00