Commit graph

367 commits

Author SHA1 Message Date
Alexandre Pujol
cb4f3af58e
feat(profile): add ddcutil 2024-06-16 20:07:41 +01:00
REmerald
4d707633a1 feat(groups/{c,d,f,s}*): vim syntax support
Add vim modeline instructing the editor to use syntax plugin provided by apparmor.
Continuation of #392 to keep the diff list relatively short.
2024-06-16 17:30:44 +01:00
REmerald
b66274b2ca fix(systemd-oomd): remove double slash
Double slash caused the path to not work
2024-06-06 18:40:35 +01:00
REmerald
8f05f02356 fix(systemd-oomd): shorten paths 2024-06-06 11:38:21 +01:00
REmerald
281768667a fix(systemd-oomd): change to {,**/} 2024-06-06 11:38:21 +01:00
REmerald
6801ae1e0c fix(systemd-oomd): make org.a11y.atspi.Registry.slice as in apparmor.d/groups/gnome/epiphany-search-provider 2024-06-06 11:38:21 +01:00
REmerald
5a8510a1f7 fix(systemd-oomd): add cgroup/system.slice/ and app-dbus* paths 2024-06-06 11:38:21 +01:00
REmerald
f9442e8258 fix(systemd-oomd): add app.slice and session.slice paths 2024-06-03 17:52:34 +01:00
Alexandre Pujol
5e6af16580
feat(profile): small improvment on systemd profiles. 2024-05-18 13:09:25 +01:00
Alexandre Pujol
1739c07ca1
feat(profile): general update. 2024-05-11 17:38:43 +01:00
Alexandre Pujol
4d29127d57
feat(profile): rewrite the child-open* profiles. 2024-05-11 12:13:57 +01:00
Alexandre Pujol
fe1e3c3be8
feat(profile): add some new profile. 2024-05-07 17:25:43 +01:00
Alexandre Pujol
18d1ee66a2
feat(profile): update zram generator. 2024-05-07 13:19:41 +01:00
Alexandre Pujol
0ffd70319b
feat(tunable): add @{hex16} 2024-05-05 17:49:45 +01:00
Alexandre Pujol
3f69b9fec4
feat(profile): use the new @{tmp} variable.
It is only used with the owner statement.
2024-05-02 22:12:02 +01:00
Alexandre Pujol
db87c56f37
feat(profile): general update. 2024-05-01 14:22:42 +01:00
Alexandre Pujol
65d0cfafe4
feat(profile): general update. 2024-04-28 13:50:48 +01:00
Alexandre Pujol
4c6122598e
fix: add missing systemd-notify profile. 2024-04-13 12:21:47 +01:00
Alexandre Pujol
900ef19cff
feat(profile): general update. 2024-04-08 19:28:10 +01:00
Alexandre Pujol
f96e5a9713
feat(profile): update kde integration.
See #310
2024-04-08 19:17:01 +01:00
Alexandre Pujol
9aa9f26507
feat(profile): general update. 2024-04-05 23:55:21 +01:00
Alexandre Pujol
095254864f
feat(profile): general update. 2024-04-03 21:04:18 +01:00
Alexandre Pujol
6dd0c36e9a
feat: prefix variables that refer to a profile 2024-04-02 13:41:08 +01:00
Alexandre Pujol
0619f4dcec
feat(profile): general update. 2024-03-29 19:45:10 +00:00
Alexandre Pujol
197c1bd78a
feat(profile): general update. 2024-03-27 21:53:11 +00:00
Alexandre Pujol
b9cfd787c8
fix(ci): minor fixes. 2024-03-27 17:17:15 +00:00
Alexandre Pujol
b88b8b8c26
refractor(abs): move common and app abstraction to their own abstractions subfolder.
As the number of abstraction is increasing, it is valuable to separate "base" abstractions to programs specific ones.
2024-03-27 15:11:21 +00:00
Alexandre Pujol
8c516ea788
feat(profile): general update. 2024-03-22 22:13:42 +00:00
Alexandre Pujol
6c38e90b5e
feat(profile): update dbus directive format. 2024-03-21 23:03:08 +00:00
Alexandre Pujol
7b880a5142
feat(profile): general update. 2024-03-20 00:04:39 +00:00
Alexandre Pujol
bf613f59a5
feat(profile): replace @{md5} by @{hex32}. 2024-03-19 21:26:12 +00:00
Alexandre Pujol
77945674a5
feat(profile): general update. 2024-03-18 14:31:01 +00:00
Alexandre Pujol
bf22e0770f
feat(profile): improve integration with opensuse. 2024-03-17 22:47:36 +00:00
Alexandre Pujol
0c5e71f971
feat(profile): cleanup some rules already included in abs. 2024-03-16 21:40:35 +00:00
Alexandre Pujol
c6717d2bab
feat(profile): use new dbus profile in dbus label. 2024-03-16 13:10:25 +00:00
Alexandre Pujol
cf4e47f10f
feat(profile): general update. 2024-03-15 16:07:53 +00:00
Alexandre Pujol
09f1babb7c
chore: improve comments on udev data. 2024-03-13 15:58:28 +00:00
Alexandre Pujol
467c38724a
feat(profile): clean superfluous openssl abstraction includes
apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
2024-03-12 16:00:44 +00:00
Alexandre Pujol
0eeefb5f09
feat(profile): general update. 2024-03-11 22:47:22 +00:00
Alexandre Pujol
68fbd81e17
feat(profile): general update. 2024-03-10 21:21:00 +00:00
Alexandre Pujol
beaf1bad16
feat(profile): general update. 2024-03-10 19:35:04 +00:00
Alexandre Pujol
ff849b9f09
feat(profile): general update. 2024-03-05 18:00:36 +00:00
Alexandre Pujol
70963a50b6
feat(profile): start implementing systemctl subprofile instead of using child-systemctl. 2024-03-05 17:45:02 +00:00
Alexandre Pujol
c66d3bf9f4
feat(profile): general update. 2024-03-05 16:58:16 +00:00
Alexandre Pujol
62f1f7df6e
feat(fsp): allow signal from system-user for some user app. 2024-03-05 00:25:39 +00:00
Alexandre Pujol
89cd3d023b
fix: entrypoint for systemd-cryptsetup. 2024-03-04 23:27:21 +00:00
Alexandre Pujol
7e8f854b16
feat(abs): deny apparmor/.null in the base abstraction. 2024-03-03 11:51:39 +00:00
Jeroen Rijken
b0655e9993 Fixes and profile updates
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Alexandre Pujol
92a1d9f65f
feat(profile): general update. 2024-03-01 22:35:49 +00:00
Alexandre Pujol
06abeac2ee
feat(profile): general update. 2024-02-29 21:45:42 +00:00