felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
3148 commits 5 branches 0 tags 16 MiB
Commit graph

3148 commits

This branch
This branch
All branches
Author SHA1 Message Date
Alexandre Pujol
57aa1b7459 fix(profile): minor improvment to ensure tests passes. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
a6225df9c9 ci(github): restart some services to ensure they are confined. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
87f6c116f1 feat: profiles and integration tests improvments. 
Add the udbus variable to be used in `unix bind` rule for dbus.
 2024-12-31 00:07:24 +00:00
Alexandre Pujol
1467c2c1aa fix(profile): minor fixes. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
c5367943cb fix(profile): ensure useradd can fully populate the skelleton. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
b36a980461 ci(github): set local tunable for github actions. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
349ca76481 feat(tunable): add p_dbus_* variables. 
This allow for better integration for system when dbus is not confined.
 2024-12-31 00:07:24 +00:00
Alexandre Pujol
72f75b96d3 feat(profile): small profile improvments. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
9ddfc9e32c build(debian): disable make check by default on pkg build. 
Enable it manually in github action.
 2024-12-31 00:07:24 +00:00
Alexandre Pujol
93ade2237d fix(profile): linting issue. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
469677e096 feat(profile): add homectl. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
b30d077992 feat(profile): improve support for some profiles. 
Most of the rules have come from the integration tests.
 2024-12-31 00:07:24 +00:00
Alexandre Pujol
562fcc88a9 tests(ci): install integration tests requirements. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
9aca44908c tests: add more integration tests for core tools. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
245e26f110 feat(profile): fractal uses bwrap for loading image. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
771673c91f feat(profile): update some core profiles. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
06dd90bae1 feat(abs): cover more commonly attached path. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
d85416e2e6 feat(profile): update systemd profiles. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
d40b112185 fix(test): minor fixes. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
c6064a774c tests(integration): add more tests. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
784fe5fdad feat(profile): small profile update. 2024-12-31 00:07:24 +00:00
Alexandre Pujol
2560e9645f
feat(profile): various improvements and update. 2024-12-25 00:05:36 +01:00
Alexandre Pujol
57ddfd29ce
fix(profile): pacman-hook-systemd: add systemd-tty-ask-password-agent. 
fix  #632
 2024-12-24 23:56:12 +01:00
Roman Beslik
f8fc1aa387 systemd user ask-password 2024-12-23 22:49:27 +01:00
Alexandre Pujol
cf1d7504f4
fix(profile): sensors: simplify hwmon access. 
fix #628
 2024-12-23 22:48:24 +01:00
Roman Beslik
b35c2a0abf non-owner accesses authorized_keys 2024-12-23 22:41:42 +01:00
Alexandre Pujol
01c1562e7c
feat(profile): firefox: better naming of possible attachment. 2024-12-23 22:19:29 +01:00
Alexandre Pujol
7167de932c
feat(profile): firefox: restric access to /tmp 2024-12-23 22:17:35 +01:00
nobody43
edaa45067a fix exec_path bug, ignore skipable files 2024-12-13 18:07:57 +01:00
nobody43
8f4b330407 Update profile_check.py 2024-12-13 18:07:57 +01:00
nobody43
3030c28c05 Update profile_check.py 2024-12-13 18:07:57 +01:00
nobody43
679df325de polishing 2024-12-13 18:07:57 +01:00
nobody43
21b60b4fa3 Update profile_check.py 2024-12-13 18:07:57 +01:00
nobody43
313f2f7f2c Create profile_check.py 2024-12-13 18:07:57 +01:00
Besanon
3721d12a5d
more lxqt-files (#613) 
* Create abstraction for lxqt desktop group

first file for the LXQT 2.0 desktop group

* Update lxqt

* xdg-desktop abstraction added

* removing tabs

* Create startlxqt

starter file for LXQT Desktop

* Create startlxqt

* fixing startlxqt

I use sddm as display manager

I cant remove the other file - only use graphical env., sorry

After startlxqt i would add  2 lines to sddm to enable the start of LXQT desktop

* Delete apparmor.d/profiles-s-z/startlxqt

* indented by 2 spaces (like other entries)

* Update sddm

Enable sddm to start an lxqt desktop session

* Create lxqt-session

lxqt-session to be started by startlxqt. Display manager: sddm

* Update lxqt-session

* Update lxqt-session

* removed trailing whitespace

* Update kscreen_backend_launcher to support lxqt desktop

is needed for several complaints:
DENIED  kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open /usr/share/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open /usr/share/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r

* Update lxqt-session

* Create lxqt-panel

* Update lxqt-panel

* Update lxqt-panel

* Update lxqt-panel

* fix conflicting x

* Update lxqt-panel

add child-open

* remove  include <abstractions/app-launcher-user>

you think its too permissive to have app-launcher-user here, right?

* Update lxqt-panel

add needed programs

* Update lxqt-panel

turning back to layout of corresponding xfce file.

* Create lxqt-globalkeysd

* Create lxqt-about

* Create lxqt-leave

* Create lxqt-runner

* Update lxqt-leave

* Update lxqt-runner

* Update lxqt-globalkeysd

* remove video in lxqt-about

* Update lxqt-about

* Update lxqt-runner

* remove abstr. in lxqt-globalkeysd

* remove abstr. in lxqt-runner

* remove abstr. in lxqt-leave

* Create lxqt-config-notificationd

* Create lxqt-config-locale

* Create lxqt-config-printer

* Create lxqt-config-file-associations

* Create lxqt-config-powermanagement

* enable wayland-session for lxqt 2.1

startlxqtwayland for starting the session, support for labwc and kwin_wayland

* Update lxqt-config-printer

* Update lxqt-config-powermanagement

* Update sddm

* Update sddm

* adapt pci-rules

ok, havent seen this profile yet. I will change that in lxqt-powermanagement as well and check the other profiles

* Update lxqt-config-powermanagement

* Update lxqt-config-powermanagement

* Update lxqt-config-powermanagement

* Update lxqt-config-powermanagement
 2024-12-13 18:06:59 +01:00
odomingao
6dcb6c0362 Add wttrbar 2024-12-13 18:05:53 +01:00
Alex
c8cbeac9b2 fix(profile): snapd 2024-12-12 22:52:55 +01:00
Alex
64ed654fdf fix(profile): cron communication with dbus. 2024-12-12 22:52:55 +01:00
Alexandre Pujol
c8b1751f37 fix(profile): snap integration with dbus. 2024-12-12 22:52:55 +01:00
Alexandre Pujol
c7030f16a6 feat(profile): minor update. 2024-12-12 22:52:55 +01:00
Alexandre Pujol
14e9fea29a feat: improve dbus integration for chsh, better handling of generic needrestart. 2024-12-12 22:52:55 +01:00
Alexandre Pujol
3690a4c327 fix: apparmor parser inside snap. 2024-12-12 22:52:55 +01:00
Alexandre Pujol
94bf2495e3 feat(profile): needrestart improve mqueue rule. 2024-12-12 22:52:55 +01:00
Alexandre Pujol
212b8dcf54
feat(profile): improve some core profiles. 2024-11-29 15:34:10 +00:00
odomingao
3cc7f82d30 Fix typo 2024-11-24 19:39:04 +00:00
valoq
e5ed979ce1
add profile for swayimg (#612) 
* add profile for swayimg

* fix exec
 2024-11-23 21:03:42 +00:00
nobody43
f75fa9a3a6
fix exec_path bug, ignore skipable files 2024-11-23 19:54:17 +00:00
nobody43
93085ece96
Update profile_check.py 2024-11-23 18:35:53 +00:00
Besanon
7acd9079a2
add more lxqt files (#600) 
* Create abstraction for lxqt desktop group

first file for the LXQT 2.0 desktop group

* Update lxqt

* xdg-desktop abstraction added

* removing tabs

* Create startlxqt

starter file for LXQT Desktop

* Create startlxqt

* fixing startlxqt

I use sddm as display manager

I cant remove the other file - only use graphical env., sorry

After startlxqt i would add  2 lines to sddm to enable the start of LXQT desktop

* Delete apparmor.d/profiles-s-z/startlxqt

* indented by 2 spaces (like other entries)

* Update sddm

Enable sddm to start an lxqt desktop session

* Create lxqt-session

lxqt-session to be started by startlxqt. Display manager: sddm

* Update lxqt-session

* Update lxqt-session

* removed trailing whitespace

* Update kscreen_backend_launcher to support lxqt desktop

is needed for several complaints:
DENIED  kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open /usr/share/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open /usr/share/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r

* Update lxqt-session

* Create lxqt-panel

* Update lxqt-panel

* Update lxqt-panel

* Update lxqt-panel

* fix conflicting x

* Update lxqt-panel

add child-open

* remove  include <abstractions/app-launcher-user>

you think its too permissive to have app-launcher-user here, right?

* Update lxqt-panel

add needed programs

* Update lxqt-panel

turning back to layout of corresponding xfce file.

* Create lxqt-globalkeysd

* Create lxqt-about

* Create lxqt-leave

* Create lxqt-runner

* Update lxqt-leave

* Update lxqt-runner

* Update lxqt-globalkeysd

* remove video in lxqt-about

* Update lxqt-about

* Update lxqt-runner

* remove abstr. in lxqt-globalkeysd

* remove abstr. in lxqt-runner

* remove abstr. in lxqt-leave
 2024-11-23 17:44:18 +00:00
nobody43
c9b1dde542
Update profile_check.py 2024-11-22 19:57:13 +00:00