feat(profile): clean superfluous openssl abstraction includes

apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
2024-03-12 16:00:44 +00:00 · 2024-03-12 16:00:44 +00:00 · 467c38724a
commit 467c38724a
parent d5972cdf1d
173 changed files with 0 additions and 180 deletions
--- a/apparmor.d/profiles-a-f/anyremote
+++ b/apparmor.d/profiles-a-f/anyremote
@ -141,7 +141,6 @@ profile anyremote @{exec_path} {
  profile curl {
    include <abstractions/base>
    include <abstractions/nameservice-strict>
-    include <abstractions/openssl>
    include <abstractions/ssl_certs>

    @{bin}/curl mr,
--- a/apparmor.d/profiles-a-f/appstreamcli
+++ b/apparmor.d/profiles-a-f/appstreamcli
@ -65,7 +65,6 @@ profile appstreamcli @{exec_path} flags=(complain) {
  profile curl {
    include <abstractions/base>
    include <abstractions/nameservice-strict>
-    include <abstractions/openssl>
    include <abstractions/ssl_certs>

    @{bin}/curl mr,
--- a/apparmor.d/profiles-a-f/birdtray
+++ b/apparmor.d/profiles-a-f/birdtray
@ -19,7 +19,6 @@ profile birdtray @{exec_path} {
  include <abstractions/mesa>
  include <abstractions/dri-enumerate>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  network inet dgram,
--- a/apparmor.d/profiles-a-f/conky
+++ b/apparmor.d/profiles-a-f/conky
@ -15,7 +15,6 @@ profile conky @{exec_path} {
  include <abstractions/fonts>
  include <abstractions/fontconfig-cache-read>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  # To get the external IP address
@ -155,7 +154,6 @@ profile conky @{exec_path} {
    include <abstractions/base>
    include <abstractions/consoles>
    include <abstractions/nameservice-strict>
-    include <abstractions/openssl>
    include <abstractions/ssl_certs>

    network inet dgram,
--- a/apparmor.d/profiles-a-f/cupsd
+++ b/apparmor.d/profiles-a-f/cupsd
@ -12,7 +12,6 @@ profile cupsd @{exec_path} flags=(attach_disconnected) {
  include <abstractions/bus/org.freedesktop.Avahi>
  include <abstractions/bus/org.freedesktop.ColorManager>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/python>

  capability audit_write,
--- a/apparmor.d/profiles-a-f/ddclient
+++ b/apparmor.d/profiles-a-f/ddclient
@ -12,7 +12,6 @@ profile ddclient @{exec_path} {
  include <abstractions/base>
  include <abstractions/perl>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  @{exec_path} r,
--- a/apparmor.d/profiles-a-f/dhclient
+++ b/apparmor.d/profiles-a-f/dhclient
@ -11,7 +11,6 @@ include <tunables/global>
 profile dhclient @{exec_path} {
  include <abstractions/base>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>

  capability net_admin,
  capability net_bind_service,
--- a/apparmor.d/profiles-a-f/dhclient-script
+++ b/apparmor.d/profiles-a-f/dhclient-script
@ -11,7 +11,6 @@ include <tunables/global>
 profile dhclient-script @{exec_path} {
  include <abstractions/base>
  include <abstractions/nameservice>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  capability net_admin,
--- a/apparmor.d/profiles-a-f/dig
+++ b/apparmor.d/profiles-a-f/dig
@ -12,7 +12,6 @@ profile dig @{exec_path} {
  include <abstractions/base>
  include <abstractions/consoles>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>

  capability dac_override,
  capability dac_read_search,
--- a/apparmor.d/profiles-a-f/dkms
+++ b/apparmor.d/profiles-a-f/dkms
@ -13,7 +13,6 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
  include <abstractions/base>
  include <abstractions/consoles>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>

  capability dac_read_search,
  capability mknod,
@ -118,7 +117,6 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
  profile kmod {
    include <abstractions/base>
    include <abstractions/consoles>
-    include <abstractions/openssl>

    @{bin}/kmod mr,

--- a/apparmor.d/profiles-a-f/downloadhelper
+++ b/apparmor.d/profiles-a-f/downloadhelper
@ -10,7 +10,6 @@ include <tunables/global>
 profile downloadhelper @{exec_path} {
  include <abstractions/base>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/user-download-strict>

  network inet dgram,
--- a/apparmor.d/profiles-a-f/evince
+++ b/apparmor.d/profiles-a-f/evince
@ -17,7 +17,6 @@ profile evince @{exec_path} {
  include <abstractions/gnome-strict>
  include <abstractions/ibus>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/user-download-strict>
  include <abstractions/user-read>
  include <abstractions/user-write>
--- a/apparmor.d/profiles-a-f/fail2ban-server
+++ b/apparmor.d/profiles-a-f/fail2ban-server
@ -10,7 +10,6 @@ include <tunables/global>
 profile fail2ban-server @{exec_path} flags=(attach_disconnected) {
  include <abstractions/base>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/python>

  capability dac_read_search,
--- a/apparmor.d/profiles-a-f/firewalld
+++ b/apparmor.d/profiles-a-f/firewalld
@ -14,7 +14,6 @@ profile firewalld @{exec_path} {
  include <abstractions/bus/org.freedesktop.PolicyKit1>
  include <abstractions/bus/org.freedesktop.NetworkManager>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>

  capability mknod,
  capability net_admin,
--- a/apparmor.d/profiles-a-f/flatpak
+++ b/apparmor.d/profiles-a-f/flatpak
@ -16,7 +16,6 @@ profile flatpak @{exec_path} flags=(attach_disconnected,mediate_deleted,complain
  include <abstractions/dconf-write>
  include <abstractions/gnome-strict>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  # userns,
--- a/apparmor.d/profiles-a-f/flatpak-oci-authenticator
+++ b/apparmor.d/profiles-a-f/flatpak-oci-authenticator
@ -9,7 +9,6 @@ include <tunables/global>
@{exec_path} = @{lib}/flatpak-oci-authenticator
 profile flatpak-oci-authenticator @{exec_path} {
  include <abstractions/base>
-  include <abstractions/openssl>

  @{exec_path} mr,

--- a/apparmor.d/profiles-a-f/flatpak-system-helper
+++ b/apparmor.d/profiles-a-f/flatpak-system-helper
@ -10,7 +10,6 @@ include <tunables/global>
 profile flatpak-system-helper @{exec_path} {
  include <abstractions/base>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/p11-kit>
  include <abstractions/ssl_certs>

--- a/apparmor.d/profiles-a-f/fwupd
+++ b/apparmor.d/profiles-a-f/fwupd
@ -20,7 +20,6 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
  include <abstractions/disks-read>
  include <abstractions/fonts>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>

  capability dac_override,
  capability dac_read_search,
--- a/apparmor.d/profiles-a-f/fwupdmgr
+++ b/apparmor.d/profiles-a-f/fwupdmgr
@ -13,7 +13,6 @@ profile fwupdmgr @{exec_path} flags=(attach_disconnected,complain) {
  include <abstractions/bus-system>
  include <abstractions/dconf-write>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  capability sys_nice,