felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): add NEEDS-VARIABLE to abs using variable.

Browse source 
Will be used by aa-logprof.
This commit is contained in:
Alexandre Pujol 2025-09-13 01:09:31 +02:00
parent f199cfe84d
commit cd6bb7bd52
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
7 changed files with 20 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/abstractions/app/chromium
View file

@ -2,6 +2,11 @@
# Copyright (C) 2022-2024 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2022-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
# LOGPROF-SUGGEST: no # LOGPROF-SUGGEST: no
# NEEDS-VARIABLE: name
# NEEDS-VARIABLE: domain
# NEEDS-VARIABLE: lib_dirs
# NEEDS-VARIABLE: config_dirs
# NEEDS-VARIABLE: cache_dirs
# Full set of rules for all chromium based browsers. It works as a *function* # Full set of rules for all chromium based browsers. It works as a *function*
# and requires some variables to be provided as *arguments* and set in the # and requires some variables to be provided as *arguments* and set in the

4
apparmor.d/abstractions/app/firefox
View file

@ -2,6 +2,10 @@
# Copyright (C) 2022-2024 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2022-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
# LOGPROF-SUGGEST: no # LOGPROF-SUGGEST: no
# NEEDS-VARIABLE: name
# NEEDS-VARIABLE: lib_dirs
# NEEDS-VARIABLE: config_dirs
# NEEDS-VARIABLE: cache_dirs
# Full set of rules for all firefox based browsers. It works as a *function* # Full set of rules for all firefox based browsers. It works as a *function*
# and requires some variables to be provided as *arguments* and set in the # and requires some variables to be provided as *arguments* and set in the

1
apparmor.d/abstractions/common/app
View file

@ -2,6 +2,7 @@
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
# LOGPROF-SUGGEST: no # LOGPROF-SUGGEST: no
# NEEDS-VARIABLE: att
# Common rules for applications sandboxed using bwrap. # Common rules for applications sandboxed using bwrap.

1
apparmor.d/abstractions/common/bwrap
View file

@ -1,6 +1,7 @@
# apparmor.d - Full set of apparmor profiles # apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
# NEEDS-VARIABLE: att
# A minimal set of rules for sandboxed programs using bwrap. # A minimal set of rules for sandboxed programs using bwrap.
# A profile using this abstraction still needs to set: # A profile using this abstraction still needs to set:

1
apparmor.d/abstractions/common/chromium
View file

@ -2,6 +2,7 @@
# Copyright (C) 2022 Mikhail Morfikov # Copyright (C) 2022 Mikhail Morfikov
# Copyright (C) 2022-2024 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2022-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
# NEEDS-VARIABLE: domain
# This abstraction is for chromium based application. Chromium based browsers # This abstraction is for chromium based application. Chromium based browsers
# need to use abstractions/app/chromium instead. # need to use abstractions/app/chromium instead.

5
apparmor.d/abstractions/common/electron
View file

@ -1,6 +1,11 @@
# apparmor.d - Full set of apparmor profiles # apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
# NEEDS-VARIABLE: name
# NEEDS-VARIABLE: domain
# NEEDS-VARIABLE: lib_dirs
# NEEDS-VARIABLE: config_dirs
# NEEDS-VARIABLE: cache_dirs
# Minimal set of rules for all electron based UI application. It works as a # Minimal set of rules for all electron based UI application. It works as a
# *function* and requires some variables to be provided as *arguments* and set # *function* and requires some variables to be provided as *arguments* and set

3
apparmor.d/abstractions/common/steam-game
View file

@ -1,6 +1,9 @@
# apparmor.d - Full set of apparmor profiles # apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
# NEEDS-VARIABLE: app_dirs
# NEEDS-VARIABLE: lib_dirs
# NEEDS-VARIABLE: share_dirs
abi <abi/4.0>, abi <abi/4.0>,