Commit graph

184 commits

Author SHA1 Message Date
Alexandre Pujol
61a27bc336
feat(profile): initial integration with attached path.
The feature is not yet enabled.

See https://apparmor.pujol.io/development/internal/#re-attached-path
2024-10-11 14:13:17 +01:00
Alexandre Pujol
e17b682e51
feat(profile): minor profile improvments. 2024-10-09 13:56:27 +01:00
Alexandre Pujol
6b0b498244
feat(profile): small profiles update. 2024-10-06 20:43:18 +01:00
Alexandre Pujol
7ccaab8234
chore(profile): add abi and local include when missing. 2024-10-06 15:57:47 +01:00
Alexandre Pujol
d6b7bef89e
feat(profile): enable abi 4 rules by default. 2024-10-02 14:19:26 +01:00
Alexandre Pujol
5ed4df6916
feat(profile): update all profile to abi 4.0 by default. 2024-10-02 14:04:08 +01:00
Alexandre Pujol
239ae17119
feat(profile): modernize some profiles. 2024-10-02 13:46:30 +01:00
Alexandre Pujol
8730c09b96
feat(profile): general update. 2024-10-01 17:43:54 +01:00
Alexandre Pujol
8979d84633
feat(profile): remove rules already included in the base abs. 2024-09-20 23:30:09 +01:00
Alexandre Pujol
305fceb413
feat(profile): add buildx support in dockerd. 2024-09-18 21:10:04 +01:00
Alexandre Pujol
7a53fc3a99
feat(profile): general updtae. 2024-09-18 18:10:27 +01:00
Alexandre Pujol
02d8aaee7f
feat(profile): improve integration with kde
see #496
2024-09-18 16:59:44 +01:00
Alexandre Pujol
7b04e28835
feat(profile): remove transparent_hugepage rule already included in base. 2024-09-08 12:36:35 +01:00
Alexandre Pujol
6b191d9ada
feat(profile): use @{int} on systemd/inhibit. 2024-09-05 14:23:16 +01:00
Alexandre Pujol
b223e2eb8e
feat(profile): general update. 2024-09-01 20:36:23 +01:00
Alexandre Pujol
04898e20f9
fix: conflicting x modifiers. 2024-08-28 19:48:01 +01:00
Alexandre Pujol
ec7715aaf3
feat(profile): general update. 2024-08-28 18:52:55 +01:00
Alexandre Pujol
788d865939
feat(profile): general update. 2024-08-20 20:56:58 +01:00
Alexandre Pujol
fc1ae32e4e
fix(profile): virtlogd: support for user libvirtd.
fix #436
2024-08-20 17:54:34 +01:00
Alexandre Pujol
62e18d04d7
feat(profile): general update. 2024-07-04 22:22:48 +01:00
Alexandre Pujol
f9a93ab67e
feat(profile): general update. 2024-06-29 23:05:45 +01:00
REmerald
68d1222029 feat(groups/{u,v,w,x}*): vim syntax support
Add vim modeline instructing the editor to use syntax plugin provided by apparmor.
Continuation of #395 to keep the diff list relatively short.
2024-06-16 17:31:42 +01:00
Alexandre Pujol
faab4928ed
feat(profile): general update. 2024-06-15 21:59:31 +01:00
Alexandre Pujol
d283ef5196
feat(profile): general update. 2024-06-10 23:58:44 +01:00
Alexandre Pujol
c785b41451
feat(profile): general update. 2024-05-18 22:35:05 +01:00
Alexandre Pujol
ad960d477b
feat(profile): replace former regex by the new @{user} variable. 2024-05-15 17:22:20 +01:00
Alexandre Pujol
1739c07ca1
feat(profile): general update. 2024-05-11 17:38:43 +01:00
Alexandre Pujol
3f69b9fec4
feat(profile): use the new @{tmp} variable.
It is only used with the owner statement.
2024-05-02 22:12:02 +01:00
Alexandre Pujol
65d0cfafe4
feat(profile): general update. 2024-04-28 13:50:48 +01:00
Alexandre Pujol
adb936e62f
feat(abs): add new shells abstraction. 2024-03-29 18:31:15 +00:00
Alexandre Pujol
58a4f1601a
fix(profile): ensure interactive shell use @{shells_path} instead of @{sh_path}. 2024-03-29 18:19:35 +00:00
Alexandre Pujol
e77f8db40f
feat(abs): add bash-strict. 2024-03-27 22:07:43 +00:00
Alexandre Pujol
b88b8b8c26
refractor(abs): move common and app abstraction to their own abstractions subfolder.
As the number of abstraction is increasing, it is valuable to separate "base" abstractions to programs specific ones.
2024-03-27 15:11:21 +00:00
Alexandre Pujol
828f282fc3
feat(profile): cleanup unix_chpwd already present in abs. 2024-03-22 13:11:49 +00:00
Alexandre Pujol
6c38e90b5e
feat(profile): update dbus directive format. 2024-03-21 23:03:08 +00:00
Alexandre Pujol
bdeb62d17d
feat(profile): add some missing dbus own definition. 2024-03-15 15:03:42 +00:00
Alexandre Pujol
09f1babb7c
chore: improve comments on udev data. 2024-03-13 15:58:28 +00:00
Alexandre Pujol
467c38724a
feat(profile): clean superfluous openssl abstraction includes
apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
2024-03-12 16:00:44 +00:00
Alexandre Pujol
c66d3bf9f4
feat(profile): general update. 2024-03-05 16:58:16 +00:00
Jeroen Rijken
ba6172bb8c Review points
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
b532dd6827 Update various profiles
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Alexandre Pujol
555b5e3c3f
feat(profile): general update. 2024-02-28 17:17:20 +00:00
Alexandre Pujol
00051bd2f0
feat(profiles): continue replacing [0-9]* by @{int}. 2024-02-26 21:10:53 +00:00
Alexandre Pujol
2ea53a9dc3
feat(profile): general update. 2024-02-23 20:21:22 +00:00
Jeroen Rijken
40b171ee94 Replace shells with new sh_path variable
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Alexandre Pujol
04683eeccb
feat(profile): general update. 2024-02-11 12:44:40 +00:00
Alexandre Pujol
2cd14aa6bb
chore: add missing and update copyright year. 2024-02-07 00:16:21 +01:00
Alexandre Pujol
a79a3f3311
feat(profile): start using new abstractions (2) 2023-12-19 23:42:30 +00:00
Alexandre Pujol
4032ead9b4
feat(profile): general update. 2023-12-17 23:47:16 +00:00
Alexandre Pujol
e1a30cbf7d
feat(profile): unify udev char dynamic assignment ranges. 2023-12-17 12:46:27 +00:00