feat(profile): clean superfluous openssl abstraction includes

apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
2024-03-12 16:00:44 +00:00 · 2024-03-12 16:00:44 +00:00 · 467c38724a
commit 467c38724a
parent d5972cdf1d
173 changed files with 0 additions and 180 deletions
--- a/apparmor.d/groups/gnome/chrome-gnome-shell
+++ b/apparmor.d/groups/gnome/chrome-gnome-shell
@ -11,7 +11,6 @@ profile chrome-gnome-shell @{exec_path} {
  include <abstractions/base>
  include <abstractions/dconf-write>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/python>
  include <abstractions/ssl_certs>

--- a/apparmor.d/groups/gnome/evolution-alarm-notify
+++ b/apparmor.d/groups/gnome/evolution-alarm-notify
@ -17,7 +17,6 @@ profile evolution-alarm-notify @{exec_path} {
  include <abstractions/gnome-strict>
  include <abstractions/nameservice-strict>
  include <abstractions/graphics>
-  include <abstractions/openssl>

  network netlink raw,

--- a/apparmor.d/groups/gnome/gdm-xsession
+++ b/apparmor.d/groups/gnome/gdm-xsession
@ -13,7 +13,6 @@ profile gdm-xsession @{exec_path} {
  include <abstractions/consoles>
  include <abstractions/dconf-write>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>

  @{exec_path} mr,

--- a/apparmor.d/groups/gnome/gjs-console
+++ b/apparmor.d/groups/gnome/gjs-console
@ -23,7 +23,6 @@ profile gjs-console @{exec_path} flags=(attach_disconnected) {
  include <abstractions/gnome-strict>
  include <abstractions/graphics>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>

  network netlink raw,

--- a/apparmor.d/groups/gnome/gnome-calendar
+++ b/apparmor.d/groups/gnome/gnome-calendar
@ -21,7 +21,6 @@ profile gnome-calendar @{exec_path} {
  include <abstractions/gnome-strict>
  include <abstractions/graphics>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/p11-kit>
  include <abstractions/ssl_certs>

--- a/apparmor.d/groups/gnome/gnome-contacts
+++ b/apparmor.d/groups/gnome/gnome-contacts
@ -18,7 +18,6 @@ profile gnome-contacts @{exec_path} {
  include <abstractions/graphics>
  include <abstractions/gstreamer>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  network netlink raw,
--- a/apparmor.d/groups/gnome/gnome-contacts-search-provider
+++ b/apparmor.d/groups/gnome/gnome-contacts-search-provider
@ -13,7 +13,6 @@ profile gnome-contacts-search-provider @{exec_path} {
  include <abstractions/dconf-write>
  include <abstractions/gnome-strict>
  include <abstractions/graphics>
-  include <abstractions/openssl>

  signal (send) set=(term) peer=unconfined,

--- a/apparmor.d/groups/gnome/gnome-control-center-goa-helper
+++ b/apparmor.d/groups/gnome/gnome-control-center-goa-helper
@ -19,7 +19,6 @@ profile gnome-control-center-goa-helper @{exec_path} {
  include <abstractions/gnome-strict>
  include <abstractions/graphics>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/p11-kit>
  include <abstractions/ssl_certs>

--- a/apparmor.d/groups/gnome/gnome-extension-gsconnect
+++ b/apparmor.d/groups/gnome/gnome-extension-gsconnect
@ -21,7 +21,6 @@ profile gnome-extension-gsconnect @{exec_path} {
  include <abstractions/freedesktop.org>
  include <abstractions/gtk>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/p11-kit>
  include <abstractions/ssl_certs>

--- a/apparmor.d/groups/gnome/gnome-keyring-daemon
+++ b/apparmor.d/groups/gnome/gnome-keyring-daemon
@ -15,7 +15,6 @@ profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) {
  include <abstractions/bus/org.freedesktop.login1.Session>
  include <abstractions/bus/org.freedesktop.portal.Desktop>
  include <abstractions/bus/org.gnome.SessionManager>
-  include <abstractions/openssl>

  capability ipc_lock,

--- a/apparmor.d/groups/gnome/gnome-music
+++ b/apparmor.d/groups/gnome/gnome-music
@ -15,7 +15,6 @@ profile gnome-music @{exec_path} flags=(attach_disconnected) {
  include <abstractions/graphics>
  include <abstractions/gstreamer>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/p11-kit>
  include <abstractions/python>
  include <abstractions/ssl_certs>
--- a/apparmor.d/groups/gnome/gnome-remote-desktop-daemon
+++ b/apparmor.d/groups/gnome/gnome-remote-desktop-daemon
@ -12,7 +12,6 @@ profile gnome-remote-desktop-daemon @{exec_path} {
  include <abstractions/bus-session>
  include <abstractions/dconf-write>
  include <abstractions/graphics>
-  include <abstractions/openssl>

  network inet stream,
  network inet6 stream,
--- a/apparmor.d/groups/gnome/gnome-software
+++ b/apparmor.d/groups/gnome/gnome-software
@ -14,7 +14,6 @@ profile gnome-software @{exec_path} {
  include <abstractions/gnome-strict>
  include <abstractions/graphics>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/p11-kit>
  include <abstractions/ssl_certs>

--- a/apparmor.d/groups/gnome/goa-daemon
+++ b/apparmor.d/groups/gnome/goa-daemon
@ -15,7 +15,6 @@ profile goa-daemon @{exec_path} {
  include <abstractions/dconf-write>
  include <abstractions/gnome-strict>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/p11-kit>
  include <abstractions/ssl_certs>

--- a/apparmor.d/groups/gnome/nautilus
+++ b/apparmor.d/groups/gnome/nautilus
@ -24,7 +24,6 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
  include <abstractions/gnome-strict>
  include <abstractions/graphics>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/trash>

  # userns,
--- a/apparmor.d/groups/gnome/org.gnome.NautilusPreviewer
+++ b/apparmor.d/groups/gnome/org.gnome.NautilusPreviewer
@ -18,7 +18,6 @@ profile org.gnome.NautilusPreviewer @{exec_path} {
  include <abstractions/nameservice-strict>
  include <abstractions/private-files-strict>
  include <abstractions/video>
-  include <abstractions/openssl>

  network netlink raw,

--- a/apparmor.d/groups/gnome/seahorse
+++ b/apparmor.d/groups/gnome/seahorse
@ -18,7 +18,6 @@ profile seahorse @{exec_path} {
  include <abstractions/bus/org.freedesktop.secrets>
  include <abstractions/dconf-write>
  include <abstractions/gnome-strict>
-  include <abstractions/openssl>
  include <abstractions/p11-kit>
  include <abstractions/ssl_certs>

--- a/apparmor.d/groups/gnome/tracker-extract
+++ b/apparmor.d/groups/gnome/tracker-extract
@ -21,7 +21,6 @@ profile tracker-extract @{exec_path} flags=(attach_disconnected) {
  include <abstractions/graphics>
  include <abstractions/gstreamer>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>

  network netlink raw,