feat(profile): clean superfluous openssl abstraction includes

apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
This commit is contained in:
Alexandre Pujol 2024-03-12 16:00:44 +00:00
parent d5972cdf1d
commit 467c38724a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
173 changed files with 0 additions and 180 deletions

View file

@ -18,7 +18,6 @@ profile gajim @{exec_path} {
include <abstractions/graphics>
include <abstractions/gstreamer>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/python>
include <abstractions/ssl_certs>
include <abstractions/user-download-strict>

View file

@ -9,7 +9,6 @@ include <tunables/global>
@{exec_path} = @{bin}/gio-querymodules
profile gio-querymodules @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/openssl>
capability dac_read_search,
capability mknod,

View file

@ -16,7 +16,6 @@ profile git @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,
@ -130,7 +129,6 @@ profile git @{exec_path} {
profile ssh {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
network inet dgram,
network inet6 dgram,

View file

@ -14,7 +14,6 @@ profile gpo @{exec_path} {
include <abstractions/python>
include <abstractions/nameservice-strict>
include <abstractions/user-download-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,

View file

@ -17,7 +17,6 @@ profile gpodder @{exec_path} {
include <abstractions/python>
include <abstractions/nameservice-strict>
include <abstractions/user-download-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,

View file

@ -16,7 +16,6 @@ profile gtk-youtube-viewer @{exec_path} {
include <abstractions/gtk>
include <abstractions/nameservice-strict>
include <abstractions/perl>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,

View file

@ -17,7 +17,6 @@ profile hexchat @{exec_path} {
include <abstractions/enchant>
include <abstractions/user-download-strict>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
# For python/perl plugins
include <abstractions/python>

View file

@ -11,7 +11,6 @@ profile host @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
capability ipc_lock,

View file

@ -11,7 +11,6 @@ include <tunables/global>
profile hugo @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,

View file

@ -17,7 +17,6 @@ profile hypnotix @{exec_path} {
include <abstractions/fontconfig-cache-read>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/python>
include <abstractions/ssl_certs>
include <abstractions/user-download-strict>

View file

@ -12,7 +12,6 @@ profile inxi @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/perl>
include <abstractions/openssl>
network inet dgram,
network inet6 dgram,

View file

@ -18,7 +18,6 @@ profile keepassxc @{exec_path} {
include <abstractions/fontconfig-cache-read>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/qt5-compose-cache-write>
include <abstractions/qt5-settings-write>
include <abstractions/ssl_certs>

View file

@ -12,7 +12,6 @@ profile kmod @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
capability dac_read_search,
capability dac_override,

View file

@ -10,7 +10,6 @@ include <tunables/global>
profile landscape-sysinfo @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/python>
capability dac_override,

View file

@ -12,7 +12,6 @@ profile lynx @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/wutmp>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,