feat(profile): clean superfluous openssl abstraction includes

apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
2024-03-12 16:00:44 +00:00 · 2024-03-12 16:00:44 +00:00 · 467c38724a
commit 467c38724a
parent d5972cdf1d
173 changed files with 0 additions and 180 deletions
--- a/apparmor.d/profiles-s-z/s3fs
+++ b/apparmor.d/profiles-s-z/s3fs
@ -10,7 +10,6 @@ include <tunables/global>
 profile s3fs @{exec_path} {
  include <abstractions/base>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  network inet dgram,
--- a/apparmor.d/profiles-s-z/smplayer
+++ b/apparmor.d/profiles-s-z/smplayer
@ -19,7 +19,6 @@ profile smplayer @{exec_path} {
  include <abstractions/gtk>
  include <abstractions/mesa>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/qt5-compose-cache-write>
  include <abstractions/qt5-settings-write>
  include <abstractions/user-download-strict>
--- a/apparmor.d/profiles-s-z/smtube
+++ b/apparmor.d/profiles-s-z/smtube
@ -19,7 +19,6 @@ profile smtube @{exec_path} {
  include <abstractions/mesa>
  include <abstractions/nameservice-strict>
  include <abstractions/qt5-compose-cache-write>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>
  include <abstractions/gstreamer>

--- a/apparmor.d/profiles-s-z/spectre-meltdown-checker
+++ b/apparmor.d/profiles-s-z/spectre-meltdown-checker
@ -148,7 +148,6 @@ profile spectre-meltdown-checker @{exec_path} {
    include <abstractions/base>
    include <abstractions/consoles>
    include <abstractions/nameservice-strict>
-    include <abstractions/openssl>
    include <abstractions/ssl_certs>

    deny capability net_admin,
--- a/apparmor.d/profiles-s-z/speedtest
+++ b/apparmor.d/profiles-s-z/speedtest
@ -11,7 +11,6 @@ include <tunables/global>
 profile speedtest @{exec_path} {
  include <abstractions/base>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  network inet dgram,
--- a/apparmor.d/profiles-s-z/spotify
+++ b/apparmor.d/profiles-s-z/spotify
@ -21,7 +21,6 @@ profile spotify @{exec_path} {
  include <abstractions/desktop>
  include <abstractions/graphics>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  network inet dgram,
--- a/apparmor.d/profiles-s-z/strawberry
+++ b/apparmor.d/profiles-s-z/strawberry
@ -22,7 +22,6 @@ profile strawberry @{exec_path} {
  include <abstractions/qt5-compose-cache-write>
  include <abstractions/qt5-settings-write>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>
  include <abstractions/devices-usb>
  include <abstractions/gstreamer>
--- a/apparmor.d/profiles-s-z/strawberry-tagreader
+++ b/apparmor.d/profiles-s-z/strawberry-tagreader
@ -11,7 +11,6 @@ include <tunables/global>
 profile strawberry-tagreader @{exec_path} {
  include <abstractions/base>
  include <abstractions/consoles>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  signal (receive) set=(term, kill) peer=strawberry,
--- a/apparmor.d/profiles-s-z/swtpm
+++ b/apparmor.d/profiles-s-z/swtpm
@ -9,7 +9,6 @@ include <tunables/global>
@{exec_path} = @{bin}/swtpm
 profile swtpm @{exec_path} {
  include <abstractions/base>
-  include <abstractions/openssl>

  signal (receive) set=(term) peer=libvirtd,

--- a/apparmor.d/profiles-s-z/system-config-printer
+++ b/apparmor.d/profiles-s-z/system-config-printer
@ -21,7 +21,6 @@ profile system-config-printer @{exec_path} flags=(complain) {
  include <abstractions/freedesktop.org>
  include <abstractions/gtk>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/python>
  include <abstractions/wayland>

--- a/apparmor.d/profiles-s-z/system-config-printer-applet
+++ b/apparmor.d/profiles-s-z/system-config-printer-applet
@ -12,7 +12,6 @@ profile system-config-printer-applet @{exec_path} {
  include <abstractions/base>
  include <abstractions/python>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>

  network inet stream,
  network inet6 stream,
--- a/apparmor.d/profiles-s-z/terminator
+++ b/apparmor.d/profiles-s-z/terminator
@ -16,7 +16,6 @@ profile terminator @{exec_path} flags=(attach_disconnected) {
  include <abstractions/dconf-write>
  include <abstractions/desktop>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/python>

  capability sys_ptrace,
--- a/apparmor.d/profiles-s-z/thunderbird
+++ b/apparmor.d/profiles-s-z/thunderbird
@ -27,7 +27,6 @@ profile thunderbird @{exec_path} {
  include <abstractions/fontconfig-cache-read>
  include <abstractions/graphics>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>
  include <abstractions/thumbnails-cache-read>
  include <abstractions/uim>
--- a/apparmor.d/profiles-s-z/transmission-gtk
+++ b/apparmor.d/profiles-s-z/transmission-gtk
@ -13,7 +13,6 @@ profile transmission-gtk @{exec_path} {
  include <abstractions/desktop>
  include <abstractions/graphics>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>
  include <abstractions/trash>
  include <abstractions/user-download-strict>
--- a/apparmor.d/profiles-s-z/transmission-qt
+++ b/apparmor.d/profiles-s-z/transmission-qt
@ -14,7 +14,6 @@ profile transmission-qt @{exec_path} {
  include <abstractions/fontconfig-cache-read>
  include <abstractions/graphics>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/private-files-strict>
  include <abstractions/qt5-settings-write>
  include <abstractions/ssl_certs>
--- a/apparmor.d/profiles-s-z/udisksd
+++ b/apparmor.d/profiles-s-z/udisksd
@ -15,7 +15,6 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
  include <abstractions/bus/org.freedesktop.PolicyKit1>
  include <abstractions/disks-write>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>

  capability chown,
  capability dac_override,
--- a/apparmor.d/profiles-s-z/update-ca-certificates
+++ b/apparmor.d/profiles-s-z/update-ca-certificates
@ -11,7 +11,6 @@ include <tunables/global>
 profile update-ca-certificates @{exec_path} {
  include <abstractions/base>
  include <abstractions/consoles>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  @{exec_path} rmix,
--- a/apparmor.d/profiles-s-z/update-pciids
+++ b/apparmor.d/profiles-s-z/update-pciids
@ -45,7 +45,6 @@ profile update-pciids @{exec_path} {
  profile browse {
    include <abstractions/base>
    include <abstractions/nameservice-strict>
-    include <abstractions/openssl>
    include <abstractions/ssl_certs>

    network inet dgram,
--- a/apparmor.d/profiles-s-z/update-smart-drivedb
+++ b/apparmor.d/profiles-s-z/update-smart-drivedb
@ -64,7 +64,6 @@ profile update-smart-drivedb @{exec_path} {
    include <abstractions/base>
    include <abstractions/consoles>
    include <abstractions/nameservice-strict>
-    include <abstractions/openssl>
    include <abstractions/ssl_certs>

    network inet dgram,
--- a/apparmor.d/profiles-s-z/vidcutter
+++ b/apparmor.d/profiles-s-z/vidcutter
@ -16,7 +16,6 @@ profile vidcutter @{exec_path} {
  include <abstractions/fontconfig-cache-read>
  include <abstractions/graphics>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/python>
  include <abstractions/qt5-compose-cache-write>
  include <abstractions/qt5-settings-write>
--- a/apparmor.d/profiles-s-z/virt-manager
+++ b/apparmor.d/profiles-s-z/virt-manager
@ -19,7 +19,6 @@ profile virt-manager @{exec_path} flags=(attach_disconnected) {
  include <abstractions/graphics>
  include <abstractions/gstreamer>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/python>
  include <abstractions/ssl_certs>
  include <abstractions/thumbnails-cache-read>
--- a/apparmor.d/profiles-s-z/vlc-cache-gen
+++ b/apparmor.d/profiles-s-z/vlc-cache-gen
@ -9,7 +9,6 @@ include <tunables/global>
@{exec_path} = @{lib}/vlc/vlc-cache-gen
 profile vlc-cache-gen @{exec_path} {
  include <abstractions/base>
-  include <abstractions/openssl>

  @{exec_path} mr,

--- a/apparmor.d/profiles-s-z/vsftpd
+++ b/apparmor.d/profiles-s-z/vsftpd
@ -11,7 +11,6 @@ include <tunables/global>
 profile vsftpd @{exec_path} {
  include <abstractions/base>
  include <abstractions/nameservice>
-  include <abstractions/openssl>

  # Only for local users authentication
  include <abstractions/authentication>
--- a/apparmor.d/profiles-s-z/wpa-supplicant
+++ b/apparmor.d/profiles-s-z/wpa-supplicant
@ -12,7 +12,6 @@ profile wpa-supplicant @{exec_path} flags=(attach_disconnected) {
  include <abstractions/base>
  include <abstractions/bus-system>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>

  capability chown,
  capability dac_override,
--- a/apparmor.d/profiles-s-z/yadifad
+++ b/apparmor.d/profiles-s-z/yadifad
@ -7,7 +7,6 @@ include <tunables/global>
 profile yadifad @{exec_path} {
  include <abstractions/base>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/nis>

  capability dac_override,
--- a/apparmor.d/profiles-s-z/youtube-dl
+++ b/apparmor.d/profiles-s-z/youtube-dl
@ -16,7 +16,6 @@ profile youtube-dl @{exec_path} {
  include <abstractions/fonts>
  include <abstractions/freedesktop.org>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/python>
  include <abstractions/ssl_certs>
  include <abstractions/user-download-strict>
--- a/apparmor.d/profiles-s-z/youtube-viewer
+++ b/apparmor.d/profiles-s-z/youtube-viewer
@ -13,7 +13,6 @@ profile youtube-viewer @{exec_path} {
  include <abstractions/consoles>
  include <abstractions/nameservice-strict>
  include <abstractions/perl>
-  include <abstractions/openssl>
  include <abstractions/ssl_certs>

  signal (receive) set=(hup, winch) peer=gtk-youtube-viewer//xterm,
--- a/apparmor.d/profiles-s-z/yt-dlp
+++ b/apparmor.d/profiles-s-z/yt-dlp
@ -12,7 +12,6 @@ profile yt-dlp @{exec_path} {
  include <abstractions/base>
  include <abstractions/consoles>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/python>
  include <abstractions/ssl_certs>
  include <abstractions/user-download-strict>
--- a/apparmor.d/profiles-s-z/ytdl
+++ b/apparmor.d/profiles-s-z/ytdl
@ -11,7 +11,6 @@ include <tunables/global>
 profile ytdl @{exec_path} {
  include <abstractions/base>
  include <abstractions/nameservice-strict>
-  include <abstractions/openssl>
  include <abstractions/python>
  include <abstractions/ssl_certs>
  include <abstractions/user-download-strict>