Commit graph

3399 commits

Author SHA1 Message Date
Alexandre Pujol
cbea160416
ci(github): also test with re-attach disconnected path. 2025-03-30 21:16:18 +02:00
Alexandre Pujol
41ff05369d
fix(profile): integration tests. 2025-03-30 21:07:47 +02:00
Alexandre Pujol
86759f2ef1
feat(profile): update docker profiles. 2025-03-30 21:04:05 +02:00
Alexandre Pujol
c80c82fda2
fix(profile): integration tests. 2025-03-30 19:42:59 +02:00
Alexandre Pujol
71a8bf6be8
feat(profile): improve signal across profiles. 2025-03-30 18:54:27 +02:00
Alexandre Pujol
73e3ac6cbd
feat(profile): snap: improve update-ns. 2025-03-30 18:50:16 +02:00
Alexandre Pujol
811cb64390
tests: update requirments list. 2025-03-30 18:47:28 +02:00
Alexandre Pujol
94c7c1b33c
feat(profile): run-parts: use the motd profile. 2025-03-30 18:33:36 +02:00
Alexandre Pujol
5173d3177c
fix(profile): qemu: ensure guest addition can shutdown the system. 2025-03-30 18:32:26 +02:00
Alexandre Pujol
e73ea12cea
feat(profile): aa-log - move call to journalctl to a subprofile. 2025-03-30 18:31:25 +02:00
Alexandre Pujol
fbbf68f0ee
feat(profile): udiskd needs ipc_lock. 2025-03-30 18:30:24 +02:00
Alexandre Pujol
1751a9997c
fix(profile): integration tests. 2025-03-30 18:28:50 +02:00
Alexandre Pujol
9ef8db9cbc
fix: remove unused import. 2025-03-30 17:39:20 +02:00
Alexandre Pujol
5975c7f250
feat(profile): add ufw-init. 2025-03-30 17:12:25 +02:00
Alexandre Pujol
ee52841833
feat(profile): add sysstat profiles. 2025-03-30 17:07:51 +02:00
Alexandre Pujol
baa3f8f639
build: generalise the use of apparmor version during the build. 2025-03-30 17:06:00 +02:00
Alexandre Pujol
d3e9a7ec70
tests: allow some tests to fail as we don't test the software but the profile. 2025-03-30 16:55:24 +02:00
Alexandre Pujol
3ffcc533b4
feat(profile): allow pacman to pwd anywhere. 2025-03-30 16:36:24 +02:00
Alexandre Pujol
735f5de518
feat(profile): general update. 2025-03-30 16:27:41 +02:00
Alexandre Pujol
5861da3f33
build: set distribution name in dpkg build. 2025-03-29 13:57:00 +01:00
Alexandre Pujol
42818ddcf6
ci: remove rsync as deps. 2025-03-29 13:47:50 +01:00
Alexandre Pujol
414d8a3a47
feat(profile): update flatpak profiles. 2025-03-29 13:05:56 +01:00
Alexandre Pujol
2e5c860f0d
feat(profile): docker: add git & init subprofile. 2025-03-28 23:33:12 +01:00
Alexandre Pujol
7a352cb7df
feat(profile): motd: make it more generic. 2025-03-28 23:32:28 +01:00
Alexandre Pujol
1204e29fb9
test: update integration tests. 2025-03-28 23:31:05 +01:00
Alexandre Pujol
8e2a7e8068
build: ensure the justfile could fully replace the makefile. 2025-03-28 20:13:00 +01:00
Alexandre Pujol
fbb71fb47b
fix(profile): thunar
fix #704
2025-03-28 18:16:42 +01:00
Alexandre Pujol
4e1b983103
fix(abs): remove duplicated rule
fix #709
2025-03-28 18:00:04 +01:00
Alexandre Pujol
7562f87d9d
fix(profile): flatpak
fix #710
2025-03-28 17:56:46 +01:00
Roman Beslik
647d22ab9f read access to the hwmon directory 2025-03-26 10:21:22 +01:00
Alexandre Pujol
921503f514
feat(profile): small improvment on UI profiles. 2025-03-24 22:00:54 +01:00
Alexandre Pujol
c53c236648
feat(profile): improve gnome profiles. 2025-03-24 22:00:54 +01:00
Alexandre Pujol
dd129c1a03
feat(profile): minor kde improvments. 2025-03-24 22:00:54 +01:00
Alexandre Pujol
28111ab9a5
feat(profile): update gvfsd. 2025-03-24 22:00:54 +01:00
EricLin0509
7f3f0809a6 Fix can't parse mount rule error 2025-03-23 19:15:05 +01:00
Alexandre Pujol
8c9d61a28e
feat(abs): add /usr/share/ssl/ to the openssl abs.
fix #673
2025-03-23 16:57:19 +01:00
Alexandre Pujol
310f06bc03
feat(profile): minor improvment on wechat profiles 2025-03-23 16:53:38 +01:00
EricLin0509
11fc80663f A small fix 2025-03-23 16:48:32 +01:00
EricLin0509
7d06d07450 Apply suggestions 2025-03-23 16:48:32 +01:00
EricLin0509
5ac4a521ca Add support for different Wechat variants 2025-03-23 16:48:32 +01:00
curiosityseeker
9525c6c008 Update protonmail-bridge-core
Adding bridge-gui
2025-03-23 16:40:35 +01:00
Alexandre Pujol
97af63b483
chore(profile): minor cleanup 2025-03-23 16:39:41 +01:00
remph
8730fa55e5 Various fixes
* nvidia-strict: nvidia libraries get argv from /proc/self
* iwd:
  * sends lots of UDP on packet sockets
  * writes to accept_ra and optimistic_dad
  * DNS daemons other than systemd-resolvd may require iwd to use resolvconf
* lynx: now handles brotli'd HTML as well as gzipped
2025-03-23 16:36:37 +01:00
EliasTheGrandMasterOfMistakes
f1f84045fc wirepumbler: Allow access to /dev/udmabuf 2025-03-23 16:34:59 +01:00
Alexandre Pujol
d44001b71f
feat(profile): snap - ensure snap profile can all rm their own lib_dirs. 2025-03-23 16:33:18 +01:00
Alexandre Pujol
a5385c594a
fix(profile): cosmetic. 2025-03-23 16:28:55 +01:00
Alexandre Pujol
0fce2e526d
Merge branch 'xfce' of github.com:nobody43/apparmor.d into nobody43-xfce
* 'xfce' of github.com:nobody43/apparmor.d:
  xfce, fixes
  Adapt to RO root
  xfce, flags
  xfce, proper abi
  xfce, new profiles
  xfce, updates
2025-03-23 16:18:46 +01:00
Alexandre Pujol
7ef841716e
fix(profile): ensure kde-powerdevil can read card state
see #675
2025-03-23 15:52:12 +01:00
Alexandre Pujol
21dfc6ea26
feat(profile): improve kde profiles.
fix #676
2025-03-23 15:35:27 +01:00
Alexandre Pujol
7684de3459
fix(profile): integration fix. 2025-03-23 15:27:00 +01:00