Commit graph

3423 commits

Author SHA1 Message Date
Alexandre Pujol
fbb71fb47b
fix(profile): thunar
fix #704
2025-03-28 18:16:42 +01:00
Alexandre Pujol
4e1b983103
fix(abs): remove duplicated rule
fix #709
2025-03-28 18:00:04 +01:00
Alexandre Pujol
7562f87d9d
fix(profile): flatpak
fix #710
2025-03-28 17:56:46 +01:00
Roman Beslik
647d22ab9f read access to the hwmon directory 2025-03-26 10:21:22 +01:00
Alexandre Pujol
921503f514
feat(profile): small improvment on UI profiles. 2025-03-24 22:00:54 +01:00
Alexandre Pujol
c53c236648
feat(profile): improve gnome profiles. 2025-03-24 22:00:54 +01:00
Alexandre Pujol
dd129c1a03
feat(profile): minor kde improvments. 2025-03-24 22:00:54 +01:00
Alexandre Pujol
28111ab9a5
feat(profile): update gvfsd. 2025-03-24 22:00:54 +01:00
EricLin0509
7f3f0809a6 Fix can't parse mount rule error 2025-03-23 19:15:05 +01:00
Alexandre Pujol
8c9d61a28e
feat(abs): add /usr/share/ssl/ to the openssl abs.
fix #673
2025-03-23 16:57:19 +01:00
Alexandre Pujol
310f06bc03
feat(profile): minor improvment on wechat profiles 2025-03-23 16:53:38 +01:00
EricLin0509
11fc80663f A small fix 2025-03-23 16:48:32 +01:00
EricLin0509
7d06d07450 Apply suggestions 2025-03-23 16:48:32 +01:00
EricLin0509
5ac4a521ca Add support for different Wechat variants 2025-03-23 16:48:32 +01:00
curiosityseeker
9525c6c008 Update protonmail-bridge-core
Adding bridge-gui
2025-03-23 16:40:35 +01:00
Alexandre Pujol
97af63b483
chore(profile): minor cleanup 2025-03-23 16:39:41 +01:00
remph
8730fa55e5 Various fixes
* nvidia-strict: nvidia libraries get argv from /proc/self
* iwd:
  * sends lots of UDP on packet sockets
  * writes to accept_ra and optimistic_dad
  * DNS daemons other than systemd-resolvd may require iwd to use resolvconf
* lynx: now handles brotli'd HTML as well as gzipped
2025-03-23 16:36:37 +01:00
EliasTheGrandMasterOfMistakes
f1f84045fc wirepumbler: Allow access to /dev/udmabuf 2025-03-23 16:34:59 +01:00
Alexandre Pujol
d44001b71f
feat(profile): snap - ensure snap profile can all rm their own lib_dirs. 2025-03-23 16:33:18 +01:00
Alexandre Pujol
a5385c594a
fix(profile): cosmetic. 2025-03-23 16:28:55 +01:00
Alexandre Pujol
0fce2e526d
Merge branch 'xfce' of github.com:nobody43/apparmor.d into nobody43-xfce
* 'xfce' of github.com:nobody43/apparmor.d:
  xfce, fixes
  Adapt to RO root
  xfce, flags
  xfce, proper abi
  xfce, new profiles
  xfce, updates
2025-03-23 16:18:46 +01:00
Alexandre Pujol
7ef841716e
fix(profile): ensure kde-powerdevil can read card state
see #675
2025-03-23 15:52:12 +01:00
Alexandre Pujol
21dfc6ea26
feat(profile): improve kde profiles.
fix #676
2025-03-23 15:35:27 +01:00
Alexandre Pujol
7684de3459
fix(profile): integration fix. 2025-03-23 15:27:00 +01:00
Alexandre Pujol
291713d902
feat(profile): add nvidia-uvm to the gstreamer abs.
- Needed internally by multiqueue
- Lots of program using gstreamer was requiring it
2025-03-23 15:24:05 +01:00
Alexandre Pujol
bc422ab5b8
feat(profile): revisit the gparted profiles
fix #697
2025-03-23 15:17:25 +01:00
Alexandre Pujol
acf423fd86
feat(profile): add support for qemu-img in gnome-boxes
fix #698
2025-03-23 14:19:02 +01:00
Alexandre Pujol
5e225ed0ec
feat(fsp): small improvments. 2025-03-23 14:16:31 +01:00
Alexandre Pujol
46b0b19d5b
fix(profile): various fixes. 2025-03-23 14:08:50 +01:00
Alexandre Pujol
018e31375b
fix(abs): add missing vim syntax. 2025-03-23 13:47:48 +01:00
Alexandre Pujol
054b723255
feat(profile): improve core snap profiles. 2025-03-23 13:44:50 +01:00
Alexandre Pujol
41757ec4e4
feat(profile): remove now automatically added internal dbus rules. 2025-03-23 13:40:45 +01:00
Alexandre Pujol
85be9316e1
feat(abs): remove dbus rules handled in the new abs. 2025-03-23 12:33:54 +01:00
Alexandre Pujol
1f55c07692
build: automatically include bus/own-* abstraction when required. 2025-03-23 12:31:43 +01:00
Alexandre Pujol
9ab321d146
feat(abs): dbus interfaces definition update. 2025-03-23 12:28:01 +01:00
Alexandre Pujol
a1559d23c7
feat(abs): update pkexec. 2025-03-20 20:13:54 +01:00
Alexandre Pujol
d2c231653b
feat(abs): add bus/own-* abstactions 2025-03-20 20:13:44 +01:00
Alexandre Pujol
ec04495c4a
feat(profile): update for ubuntu/debian based systems. 2025-03-20 00:34:24 +01:00
Alexandre Pujol
a69dc5bc8b
feat(abs): ensure ca.desrt.dconf.Writer dbus is part of dconf-write only. 2025-03-20 00:30:24 +01:00
Alexandre Pujol
50135cf75b
build: define more variable to resolve during build. 2025-03-18 23:16:11 +01:00
Alexandre Pujol
bd9ab55bf0
feta(profile): remove the now duplicated @{bin}/perl r. 2025-03-18 23:10:38 +01:00
Alexandre Pujol
f6a9a1859a
fix(profile): ensure aplay can list devices. 2025-03-18 22:57:55 +01:00
Alexandre Pujol
5b1702b34c
fix(profile): ensure ssh support security keys.
fix #686
2025-03-18 22:54:56 +01:00
Alexandre Pujol
debed741ca
fix(profile): ensure sbctl can access tpm.
fix #687
2025-03-18 22:52:47 +01:00
Alexandre Pujol
9728042f69
fix(profile): ensure epiphany can generate web apps desktop icons
fix #689
2025-03-18 22:51:01 +01:00
EliasTheGrandMasterOfMistakes
dc83373a0f bwrap(abstractions): Allow read to actions_avail 2025-03-18 22:35:44 +01:00
Alexandre Pujol
600f9f314e
feat(profile): remove empty snap profiles.
see #693
2025-03-18 21:39:09 +01:00
Alexandre Pujol
9ddd24754e
feat(abs): cleanup PUx in app open. 2025-03-18 21:34:11 +01:00
Alexandre Pujol
bf09164b4c
feat(abs): ensure all path of perl binary can rix. 2025-03-18 21:33:13 +01:00
Alexandre Pujol
1d0994979e
feat(abs): add memory mapping to python on its own abs. 2025-03-18 21:32:30 +01:00