felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): clean superfluous openssl abstraction includes

Browse source 
apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
This commit is contained in:
Alexandre Pujol 2024-03-12 16:00:44 +00:00
parent d5972cdf1d
commit 467c38724a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
173 changed files with 0 additions and 180 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/profiles-m-r/megasync
View file

@ -22,7 +22,6 @@ profile megasync @{exec_path} {
include <abstractions/qt5-compose-cache-write>
include <abstractions/qt5-settings-write>
include <abstractions/user-download-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,

1
apparmor.d/profiles-m-r/merkaartor
View file

@ -20,7 +20,6 @@ profile merkaartor @{exec_path} {
include <abstractions/qt5-settings-write>
include <abstractions/nameservice-strict>
include <abstractions/ssl_certs>
include <abstractions/openssl>
include <abstractions/user-download-strict>
network inet dgram,

1
apparmor.d/profiles-m-r/minitube
View file

@ -22,7 +22,6 @@ profile minitube @{exec_path} {
include <abstractions/qt5-settings-write>
include <abstractions/qt5-compose-cache-write>
include <abstractions/qt5-shader-cache>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,

1
apparmor.d/profiles-m-r/mkinitramfs
View file

@ -160,7 +160,6 @@ profile mkinitramfs @{exec_path} {
profile kmod {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/openssl>
@{bin}/kmod mr,

1
apparmor.d/profiles-m-r/mkvtoolnix-gui
View file

@ -17,7 +17,6 @@ profile mkvtoolnix-gui @{exec_path} {
include <abstractions/gtk>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/qt5-compose-cache-write>
include <abstractions/qt5-settings-write>
include <abstractions/ssl_certs>

1
apparmor.d/profiles-m-r/mpsyt
View file

@ -13,7 +13,6 @@ profile mpsyt @{exec_path} {
include <abstractions/python>
include <abstractions/user-download-strict>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
signal (send) set=(term, kill) peer=mpv,

1
apparmor.d/profiles-m-r/mpv
View file

@ -17,7 +17,6 @@ profile mpv @{exec_path} {
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
include <abstractions/user-download-strict>

1
apparmor.d/profiles-m-r/mumble
View file

@ -15,7 +15,6 @@ profile mumble @{exec_path} {
include <abstractions/fontconfig-cache-read>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/qt5-compose-cache-write>
include <abstractions/qt5-settings-write>
include <abstractions/ssl_certs>

1
apparmor.d/profiles-m-r/murmurd
View file

@ -10,7 +10,6 @@ profile murmurd @{exec_path} {
include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.Avahi>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
capability chown,

1
apparmor.d/profiles-m-r/mutt
View file

@ -11,7 +11,6 @@ profile mutt @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
include <abstractions/user-download-strict>
include <abstractions/user-read>

1
apparmor.d/profiles-m-r/nmap
View file

@ -12,7 +12,6 @@ profile nmap @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
capability net_bind_service,
capability net_raw,

1
apparmor.d/profiles-m-r/nslookup
View file

@ -11,7 +11,6 @@ profile nslookup @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
network inet dgram,
network inet6 dgram,

1
apparmor.d/profiles-m-r/onefetch
View file

@ -9,7 +9,6 @@ include <tunables/global>
@{exec_path} = @{bin}/onefetch
profile onefetch @{exec_path} {
include <abstractions/base>
include <abstractions/openssl>
include <abstractions/ssl_certs>
@{exec_path} mr,

1
apparmor.d/profiles-m-r/packagekitd
View file

@ -14,7 +14,6 @@ profile packagekitd @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
include if exists <abstractions/apt-common>

1
apparmor.d/profiles-m-r/pass
View file

@ -100,7 +100,6 @@ profile pass @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,

1
apparmor.d/profiles-m-r/pass-import
View file

@ -10,7 +10,6 @@ include <tunables/global>
profile pass-import @{exec_path} {
include <abstractions/base>
include <abstractions/python>
include <abstractions/openssl>
include <abstractions/nameservice-strict>
network inet dgram,

1
apparmor.d/profiles-m-r/psi
View file

@ -19,7 +19,6 @@ profile psi @{exec_path} {
include <abstractions/gtk>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/qt5-compose-cache-write>
include <abstractions/qt5-settings-write>
include <abstractions/ssl_certs>

1
apparmor.d/profiles-m-r/psi-plus
View file

@ -19,7 +19,6 @@ profile psi-plus @{exec_path} {
include <abstractions/gtk>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/qt5-compose-cache-write>
include <abstractions/qt5-settings-write>
include <abstractions/ssl_certs>

2
apparmor.d/profiles-m-r/qbittorrent
View file

@ -22,7 +22,6 @@ profile qbittorrent @{exec_path} {
include <abstractions/graphics>
include <abstractions/ibus>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/private-files-strict>
include <abstractions/qt5-compose-cache-write>
include <abstractions/qt5-settings-write>
@ -122,7 +121,6 @@ profile qbittorrent @{exec_path} {
profile python {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/python>
include <abstractions/ssl_certs>

1
apparmor.d/profiles-m-r/qbittorrent-nox
View file

@ -11,7 +11,6 @@ include <tunables/global>
profile qbittorrent-nox @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,

1
apparmor.d/profiles-m-r/quiterss
View file

@ -22,7 +22,6 @@ profile quiterss @{exec_path} {
include <abstractions/nameservice-strict>
include <abstractions/user-download-strict>
include <abstractions/wayland>
include <abstractions/openssl>
include <abstractions/ssl_certs>
include <abstractions/gstreamer>
include <abstractions/audio-client>

1
apparmor.d/profiles-m-r/remmina
View file

@ -22,7 +22,6 @@ profile remmina @{exec_path} {
include <abstractions/freedesktop.org>
include <abstractions/ibus>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
include <abstractions/X-strict>

2
apparmor.d/profiles-m-r/repo
View file

@ -14,7 +14,6 @@ profile repo @{exec_path} {
include <abstractions/base>
include <abstractions/python>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,
@ -67,7 +66,6 @@ profile repo @{exec_path} {
profile curl {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
@{bin}/curl mr,

1
apparmor.d/profiles-m-r/rngd
View file

@ -12,7 +12,6 @@ profile rngd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/devices-usb>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
capability dac_read_search,
capability net_admin,

1
apparmor.d/profiles-m-r/rpi-imager
View file

@ -21,7 +21,6 @@ profile rpi-imager @{exec_path} {
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/opencl>
include <abstractions/openssl>
include <abstractions/qt5-shader-cache>
include <abstractions/ssl_certs>
include <abstractions/user-download-strict>

2
apparmor.d/profiles-m-r/rustdesk
View file

@ -15,7 +15,6 @@ profile rustdesk @{exec_path} {
include <abstractions/desktop>
include <abstractions/fontconfig-cache-read>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
capability dac_read_search,
capability dac_override,
@ -110,7 +109,6 @@ profile rustdesk_pynput_service /usr/share/rustdesk/files/pynput_service.py {
profile rustdesk_python {
include <abstractions/base>
include <abstractions/python>
include <abstractions/openssl>
capability dac_read_search,
capability dac_override,