Commit graph

305 commits

Author SHA1 Message Date
Alexandre Pujol
f12f684eb1
build: remove some old makefile command now handled in the Justfile. 2025-04-05 23:50:47 +02:00
Alexandre Pujol
f86eb8c27c
build: ensure arch pkg can be build inside an OCI container. 2025-04-05 23:42:39 +02:00
Alexandre Pujol
b9ec70b8bb
build: add support for various version in OCI based package build. 2025-04-04 21:52:44 +02:00
Alexandre Pujol
ee52841833
feat(profile): add sysstat profiles. 2025-03-30 17:07:51 +02:00
Alexandre Pujol
5861da3f33
build: set distribution name in dpkg build. 2025-03-29 13:57:00 +01:00
Alexandre Pujol
310f06bc03
feat(profile): minor improvment on wechat profiles 2025-03-23 16:53:38 +01:00
Alexandre Pujol
0fce2e526d
Merge branch 'xfce' of github.com:nobody43/apparmor.d into nobody43-xfce
* 'xfce' of github.com:nobody43/apparmor.d:
  xfce, fixes
  Adapt to RO root
  xfce, flags
  xfce, proper abi
  xfce, new profiles
  xfce, updates
2025-03-23 16:18:46 +01:00
Alexandre Pujol
600f9f314e
feat(profile): remove empty snap profiles.
see #693
2025-03-18 21:39:09 +01:00
Alexandre Pujol
01fcfc5438
feat(profile): add finalrd. 2025-03-15 00:27:14 +01:00
Alexandre Pujol
e4a7e16ec0
build: add support for apparmor 4.1
Enabled when prebuild is run with the --version 4.1 argument
2025-03-14 22:07:59 +01:00
Alexandre Pujol
0ef623ed40
fix: ensure pidof use the attach_disconnected and enforce it.
see #677
2025-03-08 21:54:39 +01:00
Alexandre Pujol
b752ff540c
build: allow the docker build script to be sourced by downstream repository. 2025-03-04 22:38:46 +01:00
Alexandre Pujol
9304c9a668
refractor: moce a lot of profiles inside they own groups. 2025-02-09 21:46:10 +01:00
Alexandre Pujol
ba5079d95c
build: update flag manifest. 2025-02-09 20:33:37 +01:00
Alexandre Pujol
c29927ea2f
fix(profile): ensure all child-open* profiles share the same flags.
fix #630
2025-01-28 23:28:11 +01:00
curiosityseeker
4a978ef9b6
systemd-journald: adding mediate_deleted (#657)
* Update systemd-journald

profile systemd-journald flags=(mediate_deleted) {
link /var/log/journal/@{hex32}/#42742 ,                                                   # Failed name lookup - deleted entry
link /var/log/journal/@{hex32}/#42744 ,                                                   # Failed name lookup - deleted entry
link /var/log/journal/@{hex32}/.#system@@{hex32}-@{hex16}-@{hex16}.journal@{hex16} -> /var/log/journal/@{hex32}/#42744,
link /var/log/journal/@{hex32}/.#user-@{uid}@@{hex32}-@{hex16}-@{hex16}.journal@{hex16} -> /var/log/journal/@{hex32}/#42742,
}

* Update main.flags

Adding `systemd-journald attach_disconnected,mediate_deleted`
2025-01-26 20:07:44 +00:00
nobody43
e749145544 xfce, flags 2025-01-22 23:10:50 +00:00
Alexandre Pujol
61939a3bf8
build: disable dummy upstream profile in favor of ours. 2025-01-12 18:22:39 +01:00
Alexandre Pujol
70c06a0547
fix(profile): set dettached flag on some systemd services.
should fix #630
2025-01-09 22:48:23 +01:00
Alexandre Pujol
d406596124
tests: small fixes on builders scripts. 2024-10-16 23:58:48 +01:00
Alexandre Pujol
ffeb68af3b
build: update ignore files with new ignore paths. 2024-10-12 20:58:08 +01:00
Alexandre Pujol
6afcfa85ec
fix(ci): ensure output build directory exist. 2024-10-09 13:31:57 +01:00
Alexandre Pujol
4f861158cf
build: unify locally build package output directory. 2024-10-07 14:05:40 +01:00
Alexandre Pujol
0e96b3b66f
build: cleanup flag manifest. 2024-10-06 17:44:23 +01:00
Alexandre Pujol
cc5416f57a
build: cleanup flags manifest & enforce a few profiles. 2024-10-03 11:58:25 +01:00
Alexandre Pujol
5ed4df6916
feat(profile): update all profile to abi 4.0 by default. 2024-10-02 14:04:08 +01:00
Alexandre Pujol
7033a13bc2
fix(profile): update ufw.
fix #537
2024-10-01 18:15:51 +01:00
Alexandre Pujol
e3a5812bfb
doc: add man page for aa-log. 2024-09-25 23:17:44 +01:00
curiosityseeker
9400e5fd00 Update main.flags 2024-09-24 10:12:52 +00:00
Alexandre Pujol
5def115a0e
build: enforce a few profiles. 2024-09-19 00:20:13 +01:00
Alexandre Pujol
0f4c37c39a
feat(profile): add gimp. 2024-09-18 23:31:48 +01:00
Alexandre Pujol
ecf4eaee14
feat(profile): add superproductivity. 2024-09-12 22:29:59 +01:00
Alexandre Pujol
7e63564c56
feat(profile): add speech-dispatcher. 2024-09-12 22:29:22 +01:00
Alexandre Pujol
f0faf4ba52
build: add signal-desktop to the overwritten list. 2024-09-09 21:03:41 +01:00
Alexandre Pujol
f1dcefabb3
feat(profile): add profile for yay.
fix #420, #466
2024-09-09 20:38:42 +01:00
Alexandre Pujol
d4e380ad46
feat(profile): update & enable profiles in the apps group.
see #471
2024-09-09 19:40:42 +01:00
Alexandre Pujol
a8b1e46095
feat(profile): add dmsetup
fix #469
2024-09-08 12:21:56 +01:00
Alexandre Pujol
26641f585c
feat(profile): add gnome-boxes
see  #457
2024-09-02 14:14:16 +01:00
Alexandre Pujol
b223e2eb8e
feat(profile): general update. 2024-09-01 20:36:23 +01:00
Alexandre Pujol
6b822d0134
feat(profile): add veracrypt. 2024-08-21 10:26:12 +01:00
Alexandre Pujol
f14ed2f024
feat(profile): rewrite the dino profile.
see #426
2024-08-20 20:13:00 +01:00
Alexandre Pujol
28d5ea034e
feat(profile): merge transmission gui profiles.
Fix conflicting file naming with upstream.

fix #429
2024-07-27 15:15:26 +02:00
Alexandre Pujol
a8509af857
build: update overwrite list from upstream
fix #427
2024-07-27 15:07:20 +02:00
Alexandre Pujol
6073dc491f
feat(profile): add nvidia-smi. 2024-07-19 19:23:48 +01:00
REmerald
ef9000e59e Update firewalld
Add changes from aa-log -r.
Add attach_disconnected.
Add profile to main.flags, it was missing there for some reason.
There's some uncertainty about some lines, see comments.
2024-07-16 15:15:06 +00:00
Alexandre Pujol
3f16003ff9
build: ensure hyprland profiles are in complain mode. 2024-07-15 23:01:04 +01:00
Alexandre Pujol
68da315ac2
fix(profile): minor fixes.
see #410
2024-07-14 12:34:12 +01:00
Alexandre Pujol
9c9f743e1e
fix: variour small fixes.
See #409
2024-07-14 12:12:30 +01:00
Alexandre Pujol
d864f5c975
feat(profile): improve general integration
See #407
2024-07-12 20:08:58 +01:00
Alexandre Pujol
435cf47359
fix: ensure dkms module can be installed on system update.
fix #377
2024-07-09 12:10:21 +01:00