Commit graph

203 commits

Author SHA1 Message Date
Alexandre Pujol
af85db9148
refractor: use @{python_path} in all profiles. 2025-02-17 21:28:40 +01:00
Alexandre Pujol
fa85d909d7
feat(profile): general update. 2025-01-09 22:58:53 +01:00
Alexandre Pujol
2560e9645f
feat(profile): various improvements and update. 2024-12-25 00:05:36 +01:00
Alexandre Pujol
c7030f16a6 feat(profile): minor update. 2024-12-12 22:52:55 +01:00
Alexandre Pujol
815e9bfda2
feat(profile): general update. 2024-11-19 23:07:41 +00:00
Alexandre Pujol
e149e77538
fix(profile): dhcpcd executes resolvconf
fix #608
2024-11-19 21:52:12 +00:00
Alexandre Pujol
4e5f4cb06a
feat: profiles and integration tests improvments.
Add the udbus variable to be used in `unix bind` rule for dbus.
2024-11-19 19:04:27 +00:00
Alexandre Pujol
24ea5f0a3a
feat(tunable): add p_dbus_* variables.
This allow for better integration for system when dbus is not confined.
2024-11-13 12:23:36 +00:00
Alexandre Pujol
66455a9251
feat(profile): improve support for some profiles.
Most of the rules have come from the integration tests.
2024-11-12 22:18:11 +00:00
Alexandre Pujol
4108d6a987
feat(profile): update some core profiles. 2024-11-12 20:42:31 +00:00
Alexandre Pujol
d9208e0648
feat(profile): general update and fixes. 2024-10-22 22:04:04 +01:00
Alexandre Pujol
38b973c596
chore(profile): remove trailing whitespace in profiles. 2024-10-22 20:03:24 +01:00
Alexandre Pujol
37bafddc80
chore: enforce indentation consistency across profile. 2024-10-16 23:36:13 +01:00
Alexandre Pujol
61a27bc336
feat(profile): initial integration with attached path.
The feature is not yet enabled.

See https://apparmor.pujol.io/development/internal/#re-attached-path
2024-10-11 14:13:17 +01:00
Alexandre Pujol
7ccaab8234
chore(profile): add abi and local include when missing. 2024-10-06 15:57:47 +01:00
Alexandre Pujol
5ed4df6916
feat(profile): update all profile to abi 4.0 by default. 2024-10-02 14:04:08 +01:00
Alexandre Pujol
8979d84633
feat(profile): remove rules already included in the base abs. 2024-09-20 23:30:09 +01:00
Alexandre Pujol
7a53fc3a99
feat(profile): general updtae. 2024-09-18 18:10:27 +01:00
Alexandre Pujol
b03b9b05eb
feat(profile): improve kde integration.
see #484
2024-09-13 20:41:22 +01:00
Alexandre Pujol
ab7f45bc31
feat(profile): general update. 2024-09-12 22:26:47 +01:00
Alexandre Pujol
6539b713fb
feat(profile): general update. 2024-09-11 17:54:34 +01:00
Alexandre Pujol
a99fbaa0be
feat(profile): restic some well known path. 2024-09-09 19:47:25 +01:00
Alexandre Pujol
2af1d06f18
feat(tunable): add @{editor_path} & @{pager_path}. 2024-09-08 13:25:49 +01:00
Alexandre Pujol
7b04e28835
feat(profile): remove transparent_hugepage rule already included in base. 2024-09-08 12:36:35 +01:00
Alexandre Pujol
6b191d9ada
feat(profile): use @{int} on systemd/inhibit. 2024-09-05 14:23:16 +01:00
Alexandre Pujol
b223e2eb8e
feat(profile): general update. 2024-09-01 20:36:23 +01:00
Nishit Majithia
fe32720765
socat: add apparmor profile (#454)
* socat: add apparmor profile

Signed-off-by: Nishit Majithia <nishit.nm@gmail.com>

* socat: update profile

 - Follow profile guideline
 - Change copyright texts
 - Update to use abi 3.0
 - Use `ssl_certs` and `console` abstractions instead of explicit rules

Signed-off-by: Nishit Majithia <nishit.nm@gmail.com>

* socat: minor fix in the profile

 - Use @{bin}
 - Allow executable mapping and read for the binary

Signed-off-by: Nishit Majithia <nishit.nm@gmail.com>

---------

Signed-off-by: Nishit Majithia <nishit.nm@gmail.com>
2024-08-30 16:56:04 +00:00
Alexandre Pujol
1655a9f5ab
feat(profile): more kde integration.
fix #442
2024-08-28 18:30:39 +01:00
Alexandre Pujol
cb30dcc4bc
feat(profile): general update.
see #416
2024-07-15 23:47:01 +01:00
REmerald
f1a0349978 feat(groups/{_,k,n,p}*): vim syntax support
Add vim modeline instructing the editor to use syntax plugin provided by apparmor.
Continuation of #394 to keep the diff list relatively short.
2024-06-16 17:31:28 +01:00
Alexandre Pujol
035e1da7b2
feat(abs): add udevadm app abstraction. 2024-06-15 21:59:31 +01:00
REmerald
e937eabd4e fix(nm-dispatcher): add modem-manager-gui 2024-06-06 11:39:04 +01:00
Alexandre Pujol
8b60e56002
feat(profile): general update. 2024-06-04 20:13:40 +01:00
Alexandre Pujol
8f102dea0a
feat(profile): general update. 2024-05-13 20:35:11 +01:00
Alexandre Pujol
fe1e3c3be8
feat(profile): add some new profile. 2024-05-07 17:25:43 +01:00
Alexandre Pujol
239d5efe63
feat(profile): general update. 2024-05-07 16:19:29 +01:00
Alexandre Pujol
4b4e14b1d6
fix(profile): various fix & cleanup 2024-05-06 20:33:01 +01:00
Alex
f75e5047df
Merge branch 'main' into feat/update 2024-05-06 19:56:11 +01:00
Alexandre Pujol
3f69b9fec4
feat(profile): use the new @{tmp} variable.
It is only used with the owner statement.
2024-05-02 22:12:02 +01:00
Jeroen Rijken
821e753572 Various profile updates
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-04-28 15:57:27 +02:00
Alexandre Pujol
65d0cfafe4
feat(profile): general update. 2024-04-28 13:50:48 +01:00
Alexandre Pujol
6dd0c36e9a
feat: prefix variables that refer to a profile 2024-04-02 13:41:08 +01:00
Alexandre Pujol
dab928305f
feat(abs): add igfx_user_feature to the graphics abs. 2024-03-31 12:45:13 +01:00
Alexandre Pujol
534b10b261
feat(profile): rewrite some electron based profiles using the new electron abs. 2024-03-30 14:54:21 +00:00
Alexandre Pujol
b88b8b8c26
refractor(abs): move common and app abstraction to their own abstractions subfolder.
As the number of abstraction is increasing, it is valuable to separate "base" abstractions to programs specific ones.
2024-03-27 15:11:21 +00:00
Alexandre Pujol
8c516ea788
feat(profile): general update. 2024-03-22 22:13:42 +00:00
Alexandre Pujol
6c38e90b5e
feat(profile): update dbus directive format. 2024-03-21 23:03:08 +00:00
Alexandre Pujol
7b880a5142
feat(profile): general update. 2024-03-20 00:04:39 +00:00
Alexandre Pujol
77945674a5
feat(profile): general update. 2024-03-18 14:31:01 +00:00
Alexandre Pujol
c6717d2bab
feat(profile): use new dbus profile in dbus label. 2024-03-16 13:10:25 +00:00