apparmor/profiles/apparmor.d/abstractions
intrigeri d482d1a26c Include the wayland abstraction from the gnome one.
This is the least invasive solution to the problem I'm trying to solve
right now (Evince not starting in GNOME on Wayland, and probably
similar issues for other GNOME applications I suppose).

At some point, we will probably want to source the wayland abstraction
from other desktop environments' abstractions, or simply from the
X one. Let's come back to it once people using these other desktop
environments on Wayland with AppArmor enabled tell us what policy
change is needed to make it work for them.
2016-09-11 23:03:24 +02:00
..
apparmor_api Subject: profiles - fix apparmor_api abstractions 2013-01-02 15:02:29 -08:00
ubuntu-browsers.d Change /bin/ paths in profiles to also match on /usr/bin/ 2015-10-20 23:12:35 +02:00
apache2-common profiles: allow apache hats to receive signals from unconfined 2014-06-24 11:06:06 -07:00
aspell profiles: allow aspell access to /usr/share/aspell/ 2015-02-27 23:14:03 -08:00
audio audio abstraction: allow reading /etc/wildmidi/wildmidi.cfg. 2014-09-10 15:40:43 -07:00
authentication add p11-kit to authentication abstraction 2012-01-06 11:46:52 -06:00
base add ld.so.preload to <abstractions/base>, thanks to Uzair Shamim 2016-07-29 11:44:17 -07:00
bash Subject: profiles - use @{pid} tunable 2013-01-02 15:34:38 -08:00
consoles as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
cups-client profiles: rw file perms are now needed on AF_UNIX socket files 2013-12-19 23:19:40 -08:00
dbus profiles: Add strict system bus abstraction 2014-01-10 15:34:45 -06:00
dbus-accessibility profiles: Add strict accessibility bus abstraction 2014-01-10 15:35:30 -06:00
dbus-accessibility-strict profiles: Add strict accessibility bus abstraction 2014-01-10 15:35:30 -06:00
dbus-session profiles: Add strict session bus abstraction 2014-01-10 15:35:09 -06:00
dbus-session-strict Allow dbus-user-session D-Bus path 2016-07-26 22:49:51 -05:00
dbus-strict profiles: Add strict system bus abstraction 2014-01-10 15:34:45 -06:00
dconf dconf abstraction: allow reading /etc/dconf/**. 2015-07-19 15:42:54 +02:00
dovecot-common profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
enchant Fix from Felix Geyer: in the enchant abstraction, allow the creation of 2012-01-10 11:37:54 +01:00
fcitx profiles: Create abstractions for fcitx input method framework 2016-06-04 00:27:59 -05:00
fcitx-strict profiles: Create abstractions for fcitx input method framework 2016-06-04 00:27:59 -05:00
fonts libthai-data is used by LibThai which is the library used to deal with 2014-02-14 14:28:12 -06:00
freedesktop.org Description: update freedesktop.org for new location of mimeapps.list 2014-10-08 14:32:11 -05:00
gnome Include the wayland abstraction from the gnome one. 2016-09-11 23:03:24 +02:00
gnupg Subject: profiles - owner usage for @{HOME} rules 2013-01-04 22:05:53 -08:00
ibus add preliminary ibus abstraction. Will likely need more once more ibus users 2010-12-22 16:57:35 -06:00
kde update kde abstraction for /etc/xdg/Trolltech.conf 2014-09-03 14:48:41 -05:00
kerberosclient Update samba profiles for samba 4.x 2013-11-20 01:17:52 +01:00
launchpad-integration fix up comments in launchpad-integration 2012-01-11 09:27:22 +01:00
ldapclient split off abstractions/ldapclient from abstractions/nameservice 2011-11-01 17:08:37 +01:00
libpam-systemd usr.sbin.sshd: refresh profile and add libpam-systemd abstractions 2016-01-08 20:43:56 -05:00
likewise as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
mdns update for /var/run -> /run udev transition. For compatibility, distributions 2011-07-14 07:57:57 -05:00
mir profiles: add mir abstraction 2015-03-05 11:46:11 -08:00
mozc profiles: Create abstraction for mozc input method editor 2016-06-04 00:28:03 -05:00
mysql abstractions/mysql: allow access to mysqld.sock 2014-04-28 14:07:17 -07:00
nameservice From: Simon McVittie <simon.mcvittie@collabora.co.uk> 2016-06-22 15:15:49 -07:00
nis as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
nvidia Description: update nvidia abstraction for additional /proc and ~/.nv/GLCache 2014-06-06 13:50:58 -05:00
openssl add FIPS support to abstractions/openssl 2014-01-03 20:43:43 +01:00
orbit2 fixes for abstractions from Mathias Gug 2007-08-28 23:05:56 +00:00
p11-kit profiles: rw file perms are now needed on AF_UNIX socket files 2013-12-19 23:19:40 -08:00
perl Update perl abstraction to allow reading /usr/lib/@{multiarch}/perl{,5}/** 2014-08-21 07:28:44 -05:00
php5 abstractions/php: allow access to /etc/php5/**.ini 2014-09-16 21:44:48 +02:00
postfix-common profiles: update postfix-common abstraction 2015-04-15 23:32:50 -07:00
private-files deny writes to upstart user sessions jobs in abstractions/private-files 2013-05-13 14:56:10 -05:00
private-files-strict profiles: rw file perms are now needed on AF_UNIX socket files 2013-12-19 23:19:40 -08:00
python Description: update python abstraction for python 3. 2015-11-19 08:51:05 -06:00
ruby abstractions/ruby: add /usr/local/ and vendor_ruby paths 2014-09-08 21:36:47 +02:00
samba Allow mr for /usr/lib*/ldb/*.so in samba abstractions 2016-07-26 21:12:35 +02:00
smbpass as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
ssl_certs Update abstractions/ssl_* for acmetool-generated certificates 2016-03-28 21:42:39 +02:00
ssl_keys Update abstractions/ssl_* for acmetool-generated certificates 2016-03-28 21:42:39 +02:00
svn-repositories as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
ubuntu-bittorrent-clients profiles: Add deluge-{gtk,console} to ubuntu-bittorrent-clients abstraction 2016-03-19 03:08:52 -05:00
ubuntu-browsers ubuntu-browsers abstraction: re-implement Debian's firefox-esr support in a way that does not affect other Firefox browsers. 2016-06-24 17:34:55 +02:00
ubuntu-console-browsers don't #include ubuntu-helpers in the abstractions. This can only be included 2012-01-11 09:00:35 +01:00
ubuntu-console-email don't #include ubuntu-helpers in the abstractions. This can only be included 2012-01-11 09:00:35 +01:00
ubuntu-email abstractions/ubuntu-email: add geary 2015-02-22 20:23:04 -08:00
ubuntu-feed-readers don't #include ubuntu-helpers in the abstractions. This can only be included 2012-01-11 09:00:35 +01:00
ubuntu-gnome-terminal update ubuntu abstractions to use '# vim:syntax=apparmor' 2010-12-21 12:53:33 -06:00
ubuntu-helpers profiles: allow ubuntu-helpers to generate texlive fonts 2015-04-10 09:14:48 -07:00
ubuntu-konsole Subject: profiles - use @{pid} tunable 2013-01-02 15:34:38 -08:00
ubuntu-media-players don't #include ubuntu-helpers in the abstractions. This can only be included 2012-01-11 09:00:35 +01:00
ubuntu-unity7-base profiles/apparmor.d/abstractions/ubuntu-unity7-base: update to use dbus 2016-03-10 16:53:24 -06:00
ubuntu-unity7-launcher add ubuntu-unity7-* abstractions for Ubuntu desktop users 2014-02-05 23:44:04 -05:00
ubuntu-unity7-messaging add ubuntu-unity7-* abstractions for Ubuntu desktop users 2014-02-05 23:44:04 -05:00
ubuntu-xterm update for /var/run -> /run udev transition. For compatibility, distributions 2011-07-14 07:57:57 -05:00
user-download Update abstractions to use new XDG_*_DIR values. Thanks to Christian Boltz for 2014-02-14 16:28:16 -06:00
user-mail abstractions/user-mail: /var/mail/* should only be accessible to their owners 2016-04-14 15:15:36 -04:00
user-manpages From: Christian Boltz <apparmor@cboltz.de> 2011-08-05 13:12:35 -07:00
user-tmp as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
user-write Update abstractions to use new XDG_*_DIR values. Thanks to Christian Boltz for 2014-02-14 16:28:16 -06:00
video fixes for abstractions from Mathias Gug 2007-08-28 23:05:56 +00:00
wayland Add a basic wayland abstraction. 2016-09-11 23:03:01 +02:00
web-data Add /var/www/html to abstractions/web-data, which is the path used on Debian 2014-02-27 14:49:54 -06:00
winbind update abstractions/winbind 2014-02-14 23:37:13 +01:00
wutmp Merge k permission for /var/log/lastlog into abstractions/wutmp 2011-08-16 12:26:44 +02:00
X profiles/apparmor.d/abstractions/X: also allow unix connections to 2015-07-24 15:01:46 -05:00
xad as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
xdg-desktop Create an xdg-desktop abstraction based on the upstream documentation for 2012-01-11 13:00:34 +01:00