Commit graph

1424 commits

Author SHA1 Message Date
Roman Beslik
0525e51cde xdg-mime xdg-open xdg-settings xprop 2024-10-13 14:19:52 +03:00
Alexandre Pujol
61a27bc336
feat(profile): initial integration with attached path.
The feature is not yet enabled.

See https://apparmor.pujol.io/development/internal/#re-attached-path
2024-10-11 14:13:17 +01:00
Alexandre Pujol
e17b682e51
feat(profile): minor profile improvments. 2024-10-09 13:56:27 +01:00
Alexandre Pujol
630e785787
feat(tunable): remove @{user_tmp_dirs} as it refers to different kind of temp folder. 2024-10-08 22:59:50 +01:00
Alexandre Pujol
6b0b498244
feat(profile): small profiles update. 2024-10-06 20:43:18 +01:00
Alexandre Pujol
7ccaab8234
chore(profile): add abi and local include when missing. 2024-10-06 15:57:47 +01:00
Alexandre Pujol
105a9b4def
feat(profile): cleanup and remove open subprofile when it is useless. 2024-10-06 15:46:07 +01:00
Alexandre Pujol
7b73adceeb
feat(abs): common/gnome: remove open_path from the abs, add bus accessibility. 2024-10-04 14:31:54 +01:00
Alexandre Pujol
9b57546312
chore(fsp): add note of current profile stage. 2024-10-03 13:09:20 +01:00
Alexandre Pujol
896254c2ec
feat(profile): rewrite all xdg script profiles. 2024-10-03 11:47:58 +01:00
Alexandre Pujol
d6b7bef89e
feat(profile): enable abi 4 rules by default. 2024-10-02 14:19:26 +01:00
Alexandre Pujol
5ed4df6916
feat(profile): update all profile to abi 4.0 by default. 2024-10-02 14:04:08 +01:00
Alexandre Pujol
239ae17119
feat(profile): modernize some profiles. 2024-10-02 13:46:30 +01:00
odomingao
89e39fc501 Update hyprland 2024-10-01 20:12:03 +00:00
Alexandre Pujol
af50944fb5
feat(profile): general update. 2024-10-01 20:17:13 +01:00
Alexandre Pujol
460ac12bfb
feat(profile): dbus: Dbus can receive any user files 2024-10-01 20:11:03 +01:00
Alexandre Pujol
30999904e7
fix(profile): various fixes
fix #528 #527 #518 #517
2024-10-01 19:19:16 +01:00
Alexandre Pujol
e7620c7517
fix(profile): child-pager: needs file magic
fix #533
2024-10-01 18:34:45 +01:00
Alexandre Pujol
b96362d915
fix(profile): add mkinitcpio to create UKI.
fix #535
2024-10-01 18:30:13 +01:00
Alexandre Pujol
8730c09b96
feat(profile): general update. 2024-10-01 17:43:54 +01:00
Alexandre Pujol
c6c4920598
feat(profile): newer gnome want to read /. 2024-09-26 20:36:14 +01:00
Alexandre Pujol
549c6ba2f5
feat(profile): ubuntu: improve integration with ubuntu. 2024-09-26 20:34:12 +01:00
Alexandre Pujol
3f13aa77bf
feat(profile): update some dbus rules. 2024-09-26 20:29:33 +01:00
Alexandre Pujol
28b32f1ae3
feat(profile): restrict some access to @{PROC}/@{pid}. 2024-09-25 14:00:29 +01:00
Alexandre Pujol
156cce5362
feat(profile): restrict dbus in dbus
even dbus-* profiles do not need access to the full bus.
2024-09-25 00:48:42 +01:00
Alexandre Pujol
69f9e8464f
feat(profile): update profiles for gnome 47. 2024-09-25 00:14:02 +01:00
Alexandre Pujol
457953876a
feat(profile): improve systemd-dissect 2024-09-24 21:49:56 +01:00
valoq
69cc1031ad clean ssh sk helper 2024-09-23 14:46:05 +00:00
valoq
a854b63162 fix profiles 2024-09-23 14:46:05 +00:00
valoq
4660b7d49c add ssh-sk-helper 2024-09-23 14:46:05 +00:00
EricLin0509
3a7e4c6705 A Fix for xdg-permission-store 2024-09-23 14:43:56 +00:00
Alexandre Pujol
6723b43559
feat(profile): improve systemsettings. 2024-09-23 15:12:24 +01:00
Alexandre Pujol
31cadd634f
feat(abs): improve some gnome profiles. 2024-09-23 15:11:50 +01:00
Alexandre Pujol
62cb546afa
feat(fps): improve systemd profiles. 2024-09-23 14:59:44 +01:00
Alexandre Pujol
cc33e29af0
feat(profile): dbus: allow to talk with org.gtk.vfs for some profiles. 2024-09-21 13:35:57 +01:00
Alexandre Pujol
89240929e9
feat(profile): thunderbird: allow to open attachment. 2024-09-21 13:19:35 +01:00
Alexandre Pujol
064e9edec2
fix(profile): ensure torbrowser-update can start torbrowser. 2024-09-21 13:18:03 +01:00
Alexandre Pujol
e15bdcc9ad
feat(profile): firefox: handle nnp with keepassxc-proxy. 2024-09-20 23:34:03 +01:00
Alexandre Pujol
8979d84633
feat(profile): remove rules already included in the base abs. 2024-09-20 23:30:09 +01:00
Alexandre Pujol
96defe021c
feat(abs): add the pkexec app abs. 2024-09-20 23:24:15 +01:00
Alexandre Pujol
92b45f895c
feat(profile): add child-open-any. 2024-09-19 00:16:07 +01:00
Alexandre Pujol
fa668af54a
feat(profile): add some gnome profiles. 2024-09-19 00:00:54 +01:00
Alexandre Pujol
305fceb413
feat(profile): add buildx support in dockerd. 2024-09-18 21:10:04 +01:00
Alexandre Pujol
7a53fc3a99
feat(profile): general updtae. 2024-09-18 18:10:27 +01:00
Alexandre Pujol
cc139f1144
feat(abs): update kde abs with common access. 2024-09-18 18:01:16 +01:00
Alexandre Pujol
619aa709f1
feat(abs): add iceauth to X-strict. 2024-09-18 17:06:04 +01:00
Alexandre Pujol
02d8aaee7f
feat(profile): improve integration with kde
see #496
2024-09-18 16:59:44 +01:00
Alexandre Pujol
516a1fd36d
fix(profile): multiple minor fixes.
fix #493 #480
2024-09-17 12:55:08 +01:00
Alexandre Pujol
7858cae330
feat(profile): torbrowser: do not give access to user dirs by default.
- Remove read-only access to most user dirs.
- Remove read-write access to download directories.

fix #490
2024-09-16 13:36:29 +01:00
Alexandre Pujol
b03b9b05eb
feat(profile): improve kde integration.
see #484
2024-09-13 20:41:22 +01:00