Commit graph

1189 commits

Author SHA1 Message Date
Alexandre Pujol
467c38724a
feat(profile): clean superfluous openssl abstraction includes
apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
2024-03-12 16:00:44 +00:00
Alexandre Pujol
9c859cec9d
feat(profile): modernize some profiles. 2024-03-12 15:48:43 +00:00
Alexandre Pujol
81b9de3aff
feat(profile): use the new audio-client abs in profiles. 2024-03-12 15:44:40 +00:00
Alexandre Pujol
e4c0f683d2
feat(profile): replace old audio abstraction by the new stack. 2024-03-12 15:39:10 +00:00
Alexandre Pujol
0eeefb5f09
feat(profile): general update. 2024-03-11 22:47:22 +00:00
Alexandre Pujol
0a9021bcf1
feat(profile): finalize the update kde profiles to plasma 6. 2024-03-11 22:43:37 +00:00
Alexandre Pujol
042e9ff543
feat(profile): rewrite the okular profile. 2024-03-11 22:37:59 +00:00
Alexandre Pujol
a3f91f4224
feat(profile): ensure at bus start in the same profile. 2024-03-11 22:36:14 +00:00
Alexandre Pujol
2acd7d8a10
feat(profile): rewrite how gdm starts gnome. 2024-03-11 22:34:35 +00:00
Alexandre Pujol
68fbd81e17
feat(profile): general update. 2024-03-10 21:21:00 +00:00
Alexandre Pujol
ad8e5a9797
feat(fsp): update profile stack. 2024-03-10 21:17:50 +00:00
Alexandre Pujol
10ce0ba4a1
feat(profile): merge colord-sane into colord.
Required due to nnp flag enabled on colord-sane. As the profiles are similar it is easier to merge them.
2024-03-10 20:27:05 +00:00
Alexandre Pujol
7882ae2153
feat(profile): remove rule moved to the base abstraction. 2024-03-10 20:01:58 +00:00
Alexandre Pujol
beaf1bad16
feat(profile): general update. 2024-03-10 19:35:04 +00:00
Alexandre Pujol
a8b8bf52f8
feat(fsp): stack audio profiles using the new stack directive. 2024-03-10 14:51:22 +00:00
Alexandre Pujol
16d0af1c5e
feat(fsp): improve systemd profile. 2024-03-10 14:49:31 +00:00
Alexandre Pujol
4ab5e99a6f
feat(profile): add support for plasma 6. 2024-03-08 15:22:15 +00:00
Alexandre Pujol
3d425c7fdd
feat(profile): add support for qt6. 2024-03-08 15:15:58 +00:00
Alexandre Pujol
1df176cf7b
feat: small update and minor fixes. 2024-03-05 18:29:44 +00:00
Alexandre Pujol
ff849b9f09
feat(profile): general update. 2024-03-05 18:00:36 +00:00
Alexandre Pujol
70963a50b6
feat(profile): start implementing systemctl subprofile instead of using child-systemctl. 2024-03-05 17:45:02 +00:00
Alexandre Pujol
a7e37528d5
feat(profile): update some browser based profiles. 2024-03-05 17:39:36 +00:00
Alexandre Pujol
c66d3bf9f4
feat(profile): general update. 2024-03-05 16:58:16 +00:00
Alexandre Pujol
faa40c8cde
feat(fsp): cleanup main systemd profiles. 2024-03-05 16:53:34 +00:00
Alexandre Pujol
62f1f7df6e
feat(fsp): allow signal from system-user for some user app. 2024-03-05 00:25:39 +00:00
Alexandre Pujol
3c77da8f7d
feat(fsp): improve the systemd profiles. 2024-03-05 00:20:05 +00:00
Alexandre Pujol
c80449719e
feat(fsp): rewrite mount rules for systemd. 2024-03-05 00:18:40 +00:00
Alexandre Pujol
1699260a87
fear(fsp): expand systemd-service for more services. 2024-03-05 00:16:24 +00:00
Alexandre Pujol
89cd3d023b
fix: entrypoint for systemd-cryptsetup. 2024-03-04 23:27:21 +00:00
Alexandre Pujol
8ea0964724
feat(fsp): restrict @{run} for systemd. 2024-03-04 22:02:43 +00:00
Alexandre Pujol
f1b01d03cd
feat(profile): add gnome-desktop-thumbnailers. 2024-03-04 12:54:39 +00:00
Alexandre Pujol
7e8f854b16
feat(abs): deny apparmor/.null in the base abstraction. 2024-03-03 11:51:39 +00:00
Jeroen Rijken
ba6172bb8c Review points
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
346285720d Small updates
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
04cf3d3850 Various fixes
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
b0655e9993 Fixes and profile updates
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
b532dd6827 Update various profiles
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Alexandre Pujol
92a1d9f65f
feat(profile): general update. 2024-03-01 22:35:49 +00:00
Alexandre Pujol
06abeac2ee
feat(profile): general update. 2024-02-29 21:45:42 +00:00
Alexandre Pujol
f76051f114
feat(profile): add some unix rules with local address. 2024-02-29 21:15:59 +00:00
Alexandre Pujol
ffb189ef65
feat(profile): general update. 2024-02-29 00:32:40 +00:00
Alexandre Pujol
1f3b812cfb
feat(profile): add the loupe profile. 2024-02-28 23:52:57 +00:00
Alexandre Pujol
cda8f30c29
feat(profile): start using the new bwrap abs. 2024-02-28 23:52:15 +00:00
Alexandre Pujol
555b5e3c3f
feat(profile): general update. 2024-02-28 17:17:20 +00:00
Alexandre Pujol
d187514fd3
feat(profile): add new userns rule. 2024-02-28 15:39:18 +00:00
Alexandre Pujol
00051bd2f0
feat(profiles): continue replacing [0-9]* by @{int}. 2024-02-26 21:10:53 +00:00
Alexandre Pujol
7bd500b979
Merge branch 'main' of github.com:roddhjav/apparmor.d
* 'main' of github.com:roddhjav/apparmor.d:
  Add Profiles for imv and zathura (#291)
2024-02-23 22:50:34 +00:00
Alexandre Pujol
9bd21e9361
fix(profile): add bluetooth network to dbus-broker. 2024-02-23 22:35:10 +00:00
valoq
df455f93eb
Add Profiles for imv and zathura (#291)
* add profiles

* fix minor issues

* fix read permissions

* remove leftover line
2024-02-23 20:48:24 +00:00
Alexandre Pujol
2ea53a9dc3
feat(profile): general update. 2024-02-23 20:21:22 +00:00