Commit graph

51 commits

Author SHA1 Message Date
Alexandre Pujol
6e0c646d14
feat(profile): add profile for ischroot. 2025-05-26 00:47:46 +02:00
Alexandre Pujol
3a568ba307
feat(profile): add more programs to the list of sbin program. 2025-05-01 15:17:03 +02:00
Alexandre Pujol
fd17a77b17
feat(profile): use @{sbin} for all program inside /usr/sbin. 2025-04-28 21:27:57 +02:00
Alexandre Pujol
41757ec4e4
feat(profile): remove now automatically added internal dbus rules. 2025-03-23 13:40:45 +01:00
Alexandre Pujol
cfccb7894d
feat(profile): general update. 2025-03-14 21:59:55 +01:00
Alexandre Pujol
24ea5f0a3a
feat(tunable): add p_dbus_* variables.
This allow for better integration for system when dbus is not confined.
2024-11-13 12:23:36 +00:00
Alexandre Pujol
61a27bc336
feat(profile): initial integration with attached path.
The feature is not yet enabled.

See https://apparmor.pujol.io/development/internal/#re-attached-path
2024-10-11 14:13:17 +01:00
Alexandre Pujol
e17b682e51
feat(profile): minor profile improvments. 2024-10-09 13:56:27 +01:00
Alexandre Pujol
5ed4df6916
feat(profile): update all profile to abi 4.0 by default. 2024-10-02 14:04:08 +01:00
Alexandre Pujol
6b191d9ada
feat(profile): use @{int} on systemd/inhibit. 2024-09-05 14:23:16 +01:00
REmerald
40a30dc310 fix(profiles-m-r): move vim modeline
Move vim syntax comment to the end of the file, separated by newline, as requested in #380.
2024-06-15 17:20:22 +03:00
REmerald
e362aa9107 feat(profiles-m-r): vim syntax support
Add vim modeline instructing the editor to use the syntax plugin provided by apparmor.
2024-06-09 19:44:15 +03:00
Alexandre Pujol
3f69b9fec4
feat(profile): use the new @{tmp} variable.
It is only used with the owner statement.
2024-05-02 22:12:02 +01:00
Alexandre Pujol
0619f4dcec
feat(profile): general update. 2024-03-29 19:45:10 +00:00
Alexandre Pujol
b88b8b8c26
refractor(abs): move common and app abstraction to their own abstractions subfolder.
As the number of abstraction is increasing, it is valuable to separate "base" abstractions to programs specific ones.
2024-03-27 15:11:21 +00:00
Alexandre Pujol
5149b55bd0
feat(profile): add only directive. 2024-03-21 23:18:03 +00:00
Alexandre Pujol
6c38e90b5e
feat(profile): update dbus directive format. 2024-03-21 23:03:08 +00:00
Alexandre Pujol
77945674a5
feat(profile): general update. 2024-03-18 14:31:01 +00:00
Alexandre Pujol
bf22e0770f
feat(profile): improve integration with opensuse. 2024-03-17 22:47:36 +00:00
Alexandre Pujol
c6717d2bab
feat(profile): use new dbus profile in dbus label. 2024-03-16 13:10:25 +00:00
Alexandre Pujol
467c38724a
feat(profile): clean superfluous openssl abstraction includes
apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
2024-03-12 16:00:44 +00:00
Jeroen Rijken
40b171ee94 Replace shells with new sh_path variable
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00
Alexandre Pujol
2cd14aa6bb
chore: add missing and update copyright year. 2024-02-07 00:16:21 +01:00
Alexandre Pujol
ceb4c582e1
feat(dbus): update dbus rules. 2023-12-16 21:30:47 +00:00
Alexandre Pujol
1cf268b770
refractor(dbus): use the new bus-{systemd,session} abstractions. 2023-12-06 21:56:59 +00:00
Alexandre Pujol
1307250250
feat(dbus): rewrite some dbus rules (9). 2023-12-06 19:55:48 +00:00
Alexandre Pujol
3425419f0e
feat(dbus): rename dbus abstractions. 2023-12-06 19:38:47 +00:00
Alexandre Pujol
da3b5103e4
feat(dbus): rewrite some dbus rules (5). 2023-12-04 21:54:45 +00:00
Alexandre Pujol
1edf507abf
feat(dbus): rewrite some dbus rules (4). 2023-12-03 16:53:25 +00:00
Alexandre Pujol
c27ec457d0
feat(profile): cleanup some dbus path/interfaces 2023-11-30 00:29:37 +00:00
Alexandre Pujol
d1c8471b1d
fix: rule compilation. 2023-11-19 11:39:24 +00:00
Alexandre Pujol
b79a1fcd31
feat(profile): general update.
Also include some preparation for the systemd profile.
2023-11-19 11:08:35 +00:00
nobody43
d414083113 Debian 12 Gnome DE 2023-09-10 11:58:13 +01:00
Alexandre Pujol
360230b2a5
feat(profiles): general update. 2023-08-21 23:32:10 +01:00
Alexandre Pujol
275d6b6e62
feat(profiles): replace old [0-9]* glob by @{int}
Beware some [0-9]* glob are actually not proper @{int}.
2023-08-18 17:09:53 +01:00
Alexandre Pujol
557d905543
Merge branch 'tunables' of https://github.com/nobody43/apparmor.d into nobody43-tunables
* 'tunables' of https://github.com/nobody43/apparmor.d:
  dbus temp tails
  Update apparmor.d
  Update gdm-runtime-config
  more unrelated changes
  adjust date-time
  random tails
  rename to int, convert more profiles
  fixes
  tunables
2023-08-17 20:01:53 +01:00
Alexandre Pujol
5d47dfba95
feat(profiles): general update. 2023-08-17 18:43:56 +01:00
Alexandre Pujol
7c2c806ffa
refactor(profiles): use @{bin} and @{lib} in profiles (6) 2023-07-09 14:46:56 +01:00
Alexandre Pujol
b45987ee8c
feat(profiles): improve some profiles related to kde (with xorg). 2023-04-30 21:41:23 +01:00
Alexandre Pujol
ef687d7149
feat(profiles): general update. 2023-04-24 18:58:58 +01:00
Alexandre Pujol
5ea6ede589
feat(profile): general update. 2023-04-15 11:52:00 +01:00
Alexandre Pujol
a01c0ec989
feat(kde): better packagekit support. 2023-04-06 00:01:37 +01:00
Alexandre Pujol
02499d90f0
feat(profiles): general update. 2023-03-25 15:48:59 +00:00
Alexandre Pujol
52b3c1bcc5
feat(profiles): general update. 2023-03-10 10:20:48 +00:00
Alexandre Pujol
3ff8e3847d
feat(profiles): general update. 2023-03-03 12:20:10 +00:00
Alexandre Pujol
e93e80ee20
feat(opensuse): final opensuse integration. 2023-02-04 23:55:14 +00:00
Alexandre Pujol
e9d61fb7d9
feat(profiles): gpg -> gpg{,2} 2023-02-04 19:02:47 +00:00
Alexandre Pujol
2246e8ae63
feat(profiles): merge the two packagekitd profiles in one. 2022-12-09 19:12:19 +00:00
Alexandre Pujol
26f838b73f
feat(profiles): general update. 2022-11-11 22:18:55 +00:00
Alexandre Pujol
e7fbf5fbef
feat(profiles): better ubuntu integration. 2022-10-15 18:03:23 +01:00