From 467b24ccee6cdb45d0fe8471554d26cba5e73b19 Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Wed, 23 Oct 2024 14:10:52 +0100 Subject: [PATCH] build: add initial pkg definition for the base pkg. Note: we are purposelly not using yaml to not add externak build dependencies. --- dists/packages/base.conf | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 dists/packages/base.conf diff --git a/dists/packages/base.conf b/dists/packages/base.conf new file mode 100644 index 000000000..8138f7a7d --- /dev/null +++ b/dists/packages/base.conf @@ -0,0 +1,22 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +# Minimal core with tunables, abstractions, and dependencies of other profiles + +mode=enforce + +tunables + +abstractions +!abstractions/app/chromium +!abstractions/app/firefox + +groups/children +!groups/children/user_confined +!groups/children/user_default +!groups/children/user_unconfined + +groups/bus +profiles-s-z/unix-chkpwd +profiles-m-r/pam-tmpdir-helper