Commit graph

3996 commits

Author SHA1 Message Date
Alexandre Pujol
2ceaa16d9a
feat(abs): rewrite the avahi abs, add avahi-observe 2025-09-14 13:06:06 +02:00
Alexandre Pujol
962b372390
fix(profile): qemu-ga path on opensuse. 2025-09-14 01:08:15 +02:00
Alexandre Pujol
8e73353cc8
feat(abs): add pcscd 2025-09-14 00:09:16 +02:00
Alexandre Pujol
939a2b7f4b
feat(abs): add upower-observe 2025-09-14 00:01:30 +02:00
Alexandre Pujol
e4b6e7e92b
feat(abs): add the devices-u2f abs. 2025-09-14 00:01:10 +02:00
Alexandre Pujol
94444077a8
feat(profile): update attachement for gnome-extension-ding 2025-09-13 23:53:05 +02:00
Alexandre Pujol
3c49755d18
refractor(abs): reorganize dbus abstraction (2)
- new upower-observe abstraction
2025-09-13 23:52:37 +02:00
Alexandre Pujol
34aa208ec9
refractor(abs): reorganize dbus abstraction (1) 2025-09-13 16:11:16 +02:00
Alexandre Pujol
4982ff104d
feat(profile): remove rules not needed anymore
Moved into the nvidia-strict abs.
2025-09-13 12:03:00 +02:00
Alexandre Pujol
bd487d1b66
fear(profile): remove profile for spectre-meltdown-checker. 2025-09-13 11:58:25 +02:00
Alexandre Pujol
31cbe5e2e9
fix(profile): revert 06d476c
fix #855
2025-09-13 11:33:24 +02:00
Alexandre Pujol
84f3f947cb
feat(abs): improve chromium common. 2025-09-13 01:11:18 +02:00
Alexandre Pujol
cd6bb7bd52
feat(abs): add NEEDS-VARIABLE to abs using variable.
Will be used by aa-logprof.
2025-09-13 01:09:31 +02:00
Alexandre Pujol
f199cfe84d
feat(abs): app: minor improvement to common app action. 2025-09-13 01:06:51 +02:00
Alexandre Pujol
ddfe75f23f
refractor(abs): move org.kde.StatusNotifierItem inside the session abs dir. 2025-09-13 01:05:02 +02:00
Alexandre Pujol
4bbe0a1a32
feat(abs): use the new secrets-service abstraction. 2025-09-13 00:55:32 +02:00
Alexandre Pujol
608ff3db0c
fix(abs): ColorManager peer name. 2025-09-13 00:50:01 +02:00
Alexandre Pujol
ad406da5de
feat(abs): add org.freedesktop.portal.Settings. 2025-09-13 00:49:08 +02:00
Alexandre Pujol
8c6b0ce33f
feat(profile): cleanup profiles using the new abs. 2025-09-13 00:47:50 +02:00
Alexandre Pujol
51bcdd5e14
feat(abs): add the input abs. 2025-09-13 00:43:40 +02:00
Alexandre Pujol
34cc1ab131
feat(abs): graphics: limit access to cpu sys value. 2025-09-13 00:42:10 +02:00
Alexandre Pujol
170575fbff
feat(abs): ensure graphics devices are in nvidia-strict. 2025-09-13 00:40:54 +02:00
Alexandre Pujol
26f905bcc2
feat(abs): X-strict: use tunables. 2025-09-13 00:38:34 +02:00
Alexandre Pujol
db347d13de
feat(abs): revisit and restrict the devices-usb abs. 2025-09-13 00:37:35 +02:00
Alexandre Pujol
7cf4719728
feat(abs): add the secrets-service abs. 2025-09-13 00:35:07 +02:00
Alexandre Pujol
122b004c2e
feat(abs): aff the uinput abs. 2025-09-13 00:29:29 +02:00
Alexandre Pujol
56948a54eb
feat(abs): reorganise the audio abstractions. 2025-09-13 00:03:20 +02:00
Alexandre Pujol
fda74f574f
chore(abs): add some device description. 2025-09-13 00:02:35 +02:00
doublez13
53501d8bf4 ssh: allow ssh to write to the kerberos CC when it picks up a ticket 2025-09-12 20:40:35 +02:00
doublez13
c67773947e ssh: allow ssh to authenticate to remote hosts using kerberos tickets 2025-09-12 20:40:35 +02:00
doublez13
1d2b271dfc ssh-keygen: allow execution of ssh-sk-helper
The ssh-sk-helper  profile was added last year but never hooked into the ssh-keygen profile.

This is needed for generating SSH keys that live on a yubikey.
2025-09-12 20:03:40 +02:00
doublez13
1540315d5c mdadm: include all config file locations
pulled from strings
2025-09-12 20:03:18 +02:00
doublez13
c4bad04fed mdadm
Make the linter happy :)
2025-09-12 20:03:18 +02:00
doublez13
0c90adb24d Update mdadm
There were lots of missing components of mdadm.

I have a few scripts that create and tear down MD RAID arrays.  I've ran them all and added the missing entries.

Note that mdadm has the ability to run in daemon mode and send mail when an array fails. That's why it requires all the network entries.
2025-09-12 20:03:18 +02:00
Alexandre Pujol
865bac4cc6
feat(abs): update org.freedesktop.ColorManager. 2025-09-11 23:59:07 +02:00
Alexandre Pujol
76c5586688
feat(abs): add org.freedesktop.IBus.Portal 2025-09-11 23:58:11 +02:00
Alexandre Pujol
8f0ee24000
feat(abs): add org.gtk.vfs.MountOperation 2025-09-11 23:57:10 +02:00
Alexandre Pujol
93c94836e2
feat(abs): add snapcraft dbus reference call. 2025-09-11 23:56:14 +02:00
Alexandre Pujol
fce5de8d19
feat(abs): update org.freedesktop.PackageKit 2025-09-11 23:55:29 +02:00
Alexandre Pujol
e09251d266
feat(abs): update org.freedesktop.PolicyKit1 2025-09-11 23:53:00 +02:00
Alexandre Pujol
445576fe1c
Merge branch 'main' of github.com:roddhjav/apparmor.d
* 'main' of github.com:roddhjav/apparmor.d:
  slurp review fixes
  fix slurp
2025-09-11 23:50:26 +02:00
Alexandre Pujol
69fcef01b7
feat(profile): add a large profile for mkosi. 2025-09-11 23:50:23 +02:00
Alexandre Pujol
e5012e381e
chore: pids means all pid. 2025-09-11 23:39:13 +02:00
Alexandre Pujol
4d7e03a9e2
feat(profile): add missing grep to locale-gen. 2025-09-11 23:34:44 +02:00
Alexandre Pujol
c7e999fe30
feat(profile): update freedesktop profiles. 2025-09-11 23:32:29 +02:00
Alexandre Pujol
d32fd03650
feat(profile): improve ibus-portal. 2025-09-11 23:30:30 +02:00
Alexandre Pujol
17eac0b62c
feat(abs): add missing dbus rule on org.freedesktop.DBus 2025-09-11 23:30:02 +02:00
Alexandre Pujol
1b97efa215
feat(abs): add org.gtk.Menus. 2025-09-11 23:27:15 +02:00
Alexandre Pujol
c7b99bb84e
feat(profile): update some core profiles. 2025-09-11 23:26:31 +02:00
Alexandre Pujol
4317538747
feat(profile): update ubuntu profiles. 2025-09-11 23:21:34 +02:00