Commit graph

380 commits

Author SHA1 Message Date
Alexandre Pujol
bd9ab55bf0
feta(profile): remove the now duplicated @{bin}/perl r. 2025-03-18 23:10:38 +01:00
Alexandre Pujol
ebc8b29b1d
feat(profile): add initial profile for resolvectl. 2025-03-14 22:00:52 +01:00
Alexandre Pujol
cfccb7894d
feat(profile): general update. 2025-03-14 21:59:55 +01:00
Alexandre Pujol
47b6e3c616
feat(profile): various core update. 2025-03-09 23:04:32 +01:00
Alexandre Pujol
b623dc4a77
feat(profile): minor improvements. 2025-03-07 00:07:11 +01:00
Alexandre Pujol
e3a1ba5d0d
feat(profile): systemd-tty-ask-password-agent: add support for rpm.
see #576
2025-03-06 21:15:46 +01:00
Alexandre Pujol
334b48749a
feat(profile): various minor update. 2025-03-04 22:33:42 +01:00
Alexandre Pujol
d8d4ec11a6
feat(profile): systemd-networkd: update cap. 2025-03-01 14:20:35 +01:00
Alexandre Pujol
7bc248577a
feat(profile): small improvment with systemd. 2025-02-23 20:13:21 +01:00
Alexandre Pujol
8912aaf126
feat(profile): general update. 2025-02-21 00:55:52 +01:00
Alexandre Pujol
9d74168be2
refractor: move more profiles to groups. 2025-02-10 00:20:15 +01:00
Alexandre Pujol
da68c4f2d9
feat(profile): general update. 2025-02-09 00:11:09 +01:00
curiosityseeker
4a978ef9b6
systemd-journald: adding mediate_deleted (#657)
* Update systemd-journald

profile systemd-journald flags=(mediate_deleted) {
link /var/log/journal/@{hex32}/#42742 ,                                                   # Failed name lookup - deleted entry
link /var/log/journal/@{hex32}/#42744 ,                                                   # Failed name lookup - deleted entry
link /var/log/journal/@{hex32}/.#system@@{hex32}-@{hex16}-@{hex16}.journal@{hex16} -> /var/log/journal/@{hex32}/#42744,
link /var/log/journal/@{hex32}/.#user-@{uid}@@{hex32}-@{hex16}-@{hex16}.journal@{hex16} -> /var/log/journal/@{hex32}/#42742,
}

* Update main.flags

Adding `systemd-journald attach_disconnected,mediate_deleted`
2025-01-26 20:07:44 +00:00
curiosityseeker
aec02b8f64 Update systemd-tmpfiles
profile systemd-tmpfiles {
  @{sys}/devices/system/cpu/cpufreq/ r,
  @{sys}/devices/system/cpu/cpufreq/policy0/scaling_governor w,
  @{sys}/devices/system/cpu/cpufreq/policy1/scaling_governor w,
  @{sys}/devices/system/cpu/cpufreq/policy2/scaling_governor w,
  @{sys}/devices/system/cpu/cpufreq/policy3/scaling_governor w,
  @{sys}/devices/system/cpu/cpufreq/policy4/scaling_governor w,
  @{sys}/devices/system/cpu/cpufreq/policy5/scaling_governor w,
  @{sys}/devices/system/cpu/cpufreq/policy6/scaling_governor w,
  @{sys}/devices/system/cpu/cpufreq/policy7/scaling_governor w,
  @{sys}/module/pcie_aspm/parameters/policy w,
}
2025-01-26 20:58:41 +01:00
Alexandre Pujol
693259d8c1
feat(profile): general update 2025-01-20 21:23:31 +01:00
Alexandre Pujol
fa85d909d7
feat(profile): general update. 2025-01-09 22:58:53 +01:00
Alexandre Pujol
2560e9645f
feat(profile): various improvements and update. 2024-12-25 00:05:36 +01:00
Roman Beslik
f8fc1aa387 systemd user ask-password 2024-12-23 22:49:27 +01:00
Alexandre Pujol
212b8dcf54
feat(profile): improve some core profiles. 2024-11-29 15:34:10 +00:00
Alexandre Pujol
cb86f1c076
feat(profile): general update. 2024-11-21 20:37:39 +00:00
Alexandre Pujol
206bc3473d
fix: missing @{udbus} in unix bind. 2024-11-19 20:44:34 +00:00
Alexandre Pujol
4e5f4cb06a
feat: profiles and integration tests improvments.
Add the udbus variable to be used in `unix bind` rule for dbus.
2024-11-19 19:04:27 +00:00
Alexandre Pujol
24ea5f0a3a
feat(tunable): add p_dbus_* variables.
This allow for better integration for system when dbus is not confined.
2024-11-13 12:23:36 +00:00
Alexandre Pujol
9cb3ea244c
feat(profile): add homectl. 2024-11-12 22:18:41 +00:00
Alexandre Pujol
66455a9251
feat(profile): improve support for some profiles.
Most of the rules have come from the integration tests.
2024-11-12 22:18:11 +00:00
Alexandre Pujol
ebd6d54733
feat(profile): update systemd profiles. 2024-11-12 20:36:18 +00:00
Alexandre Pujol
3c0b83d1b0
feat(profile): improve some systemd profiles. 2024-11-10 19:02:07 +00:00
beroal
a37e11f686
Writing locale.conf (#593) 2024-10-28 14:59:54 +00:00
Alexandre Pujol
25049292eb
feat(profile): improve integration with Tumbleweed.
see #576
2024-10-23 11:39:49 +01:00
Alexandre Pujol
38b973c596
chore(profile): remove trailing whitespace in profiles. 2024-10-22 20:03:24 +01:00
Alexandre Pujol
cca8e6508f
fix(profile): apply some fix raised by the test suite. 2024-10-22 00:37:50 +01:00
Alexandre Pujol
c90d2fea94
feat(profile): update some ctl tools. 2024-10-16 23:50:16 +01:00
Alexandre Pujol
37bafddc80
chore: enforce indentation consistency across profile. 2024-10-16 23:36:13 +01:00
Alexandre Pujol
185dc96d45
feat(profile): general update. 2024-10-14 19:32:48 +01:00
Alexandre Pujol
61a27bc336
feat(profile): initial integration with attached path.
The feature is not yet enabled.

See https://apparmor.pujol.io/development/internal/#re-attached-path
2024-10-11 14:13:17 +01:00
Alexandre Pujol
e17b682e51
feat(profile): minor profile improvments. 2024-10-09 13:56:27 +01:00
Alexandre Pujol
6b0b498244
feat(profile): small profiles update. 2024-10-06 20:43:18 +01:00
Alexandre Pujol
7ccaab8234
chore(profile): add abi and local include when missing. 2024-10-06 15:57:47 +01:00
Alexandre Pujol
d6b7bef89e
feat(profile): enable abi 4 rules by default. 2024-10-02 14:19:26 +01:00
Alexandre Pujol
5ed4df6916
feat(profile): update all profile to abi 4.0 by default. 2024-10-02 14:04:08 +01:00
Alexandre Pujol
8730c09b96
feat(profile): general update. 2024-10-01 17:43:54 +01:00
Alexandre Pujol
457953876a
feat(profile): improve systemd-dissect 2024-09-24 21:49:56 +01:00
Alexandre Pujol
8979d84633
feat(profile): remove rules already included in the base abs. 2024-09-20 23:30:09 +01:00
Alexandre Pujol
7a53fc3a99
feat(profile): general updtae. 2024-09-18 18:10:27 +01:00
Alexandre Pujol
516a1fd36d
fix(profile): multiple minor fixes.
fix #493 #480
2024-09-17 12:55:08 +01:00
Alexandre Pujol
2af1d06f18
feat(tunable): add @{editor_path} & @{pager_path}. 2024-09-08 13:25:49 +01:00
Alexandre Pujol
6b191d9ada
feat(profile): use @{int} on systemd/inhibit. 2024-09-05 14:23:16 +01:00
Alexandre Pujol
b223e2eb8e
feat(profile): general update. 2024-09-01 20:36:23 +01:00
Alexandre Pujol
60e00f8c53
fix(profile): zramctl doesn't show algorithm, data, compression, total, streams, mountpoint
fix #456
2024-09-01 15:22:05 +01:00
Alexandre Pujol
1655a9f5ab
feat(profile): more kde integration.
fix #442
2024-08-28 18:30:39 +01:00