Commit graph

237 commits

Author SHA1 Message Date
Alexandre Pujol
dd2187552b
feat(fsp): remove the now deprecated generic system service profiles. 2025-05-29 22:35:28 +02:00
Alexandre Pujol
4ffbf84a00
feat(fsp): remove the default profiles. 2025-05-26 23:20:37 +02:00
Alexandre Pujol
7361c21c40
feat(profile): add mdadm-mkconf. 2025-05-26 00:47:47 +02:00
Alexandre Pujol
813758a1e0
feat(profile): add debconf-escape, update dpkg-scripts. 2025-05-26 00:47:47 +02:00
Alexandre Pujol
8546533ad1
fix(build): flag generation. 2025-05-26 00:47:47 +02:00
Alexandre Pujol
0a5743fa46
feat(profile): add profile for more update-* tools. 2025-05-26 00:47:47 +02:00
Alexandre Pujol
17624b95d8
feat(profile): update ucf profiles. 2025-05-26 00:47:47 +02:00
Alexandre Pujol
c03bcbef7a
feat(profile): rewrite the needrestart profiles. 2025-05-26 00:47:46 +02:00
Alexandre Pujol
8b542434bd
feat(profile): update kdump profiles. 2025-05-26 00:47:46 +02:00
Alexandre Pujol
3848838e53
feat(profile): merge dpkg-scripts and dpkg-script-tmp. 2025-05-26 00:47:46 +02:00
Alexandre Pujol
f3ed1a3006
fix: profile compilation. 2025-05-26 00:47:46 +02:00
Alexandre Pujol
31e90e6c58
feat(profile): add kernel update/install profiles. 2025-05-26 00:47:46 +02:00
Alexandre Pujol
6650f45ee0
feat(profile): add pycompile. 2025-05-26 00:47:46 +02:00
Alexandre Pujol
7a3016724a
feat(profile): update linux check scripts. 2025-05-26 00:47:46 +02:00
Alexandre Pujol
760eb91ac6
feat(profile): add profile for t-methods-sq. 2025-05-26 00:47:45 +02:00
Alexandre Pujol
c446c44ded
feat(profile): add dpkg-script-tmp. 2025-05-26 00:47:45 +02:00
Alexandre Pujol
6495061360
feat(profile): add initial version for dpkg-scripts. 2025-05-26 00:47:45 +02:00
Alexandre Pujol
658c054c47
feat(profile): update and enforce a few profiles. 2025-05-18 14:46:35 +02:00
Alexandre Pujol
9499116542
feat(profile): add initial profile for ptyxis. 2025-05-18 13:39:32 +02:00
Alexandre Pujol
5a448cb39d
feat(profile): add initial profile for papers. 2025-05-17 22:23:35 +02:00
Alexandre Pujol
efba6e164e
feat(profile): add initial profile for decibels. 2025-05-17 22:22:00 +02:00
Alexandre Pujol
3e0c3067d8
feat(profile): systemd: add some generators 2025-05-04 20:05:54 +02:00
Alexandre Pujol
4e21ef53e6
feat(profile): systemd: add nsresourced. 2025-05-04 20:01:28 +02:00
Alexandre Pujol
df6378cec0
feat(profile): improve common freedesktop profiles. 2025-05-01 20:34:35 +02:00
Alexandre Pujol
c969faf6e8
feat(profile): add initial version of sshd-auth.
Fix #725
2025-05-01 19:46:32 +02:00
Alexandre Pujol
1aa8b42982 feat(profile): add initial version of dpkg-maintscript-helper 2025-04-13 22:46:53 +02:00
Alexandre Pujol
b765d8174b feat(profile): add initial dpkg-script-* profiles. 2025-04-13 22:46:53 +02:00
Alexandre Pujol
f90208bb7f feat(profile): add deb-systemd-* profiles. 2025-04-13 22:46:53 +02:00
Alexandre Pujol
c008cbda67 feat(profile): add profile for most of udev internat scripts
Required by FSP.
2025-04-13 22:46:53 +02:00
Alexandre Pujol
ee52841833
feat(profile): add sysstat profiles. 2025-03-30 17:07:51 +02:00
Alexandre Pujol
310f06bc03
feat(profile): minor improvment on wechat profiles 2025-03-23 16:53:38 +01:00
Alexandre Pujol
0fce2e526d
Merge branch 'xfce' of github.com:nobody43/apparmor.d into nobody43-xfce
* 'xfce' of github.com:nobody43/apparmor.d:
  xfce, fixes
  Adapt to RO root
  xfce, flags
  xfce, proper abi
  xfce, new profiles
  xfce, updates
2025-03-23 16:18:46 +01:00
Alexandre Pujol
600f9f314e
feat(profile): remove empty snap profiles.
see #693
2025-03-18 21:39:09 +01:00
Alexandre Pujol
01fcfc5438
feat(profile): add finalrd. 2025-03-15 00:27:14 +01:00
Alexandre Pujol
0ef623ed40
fix: ensure pidof use the attach_disconnected and enforce it.
see #677
2025-03-08 21:54:39 +01:00
Alexandre Pujol
ba5079d95c
build: update flag manifest. 2025-02-09 20:33:37 +01:00
Alexandre Pujol
c29927ea2f
fix(profile): ensure all child-open* profiles share the same flags.
fix #630
2025-01-28 23:28:11 +01:00
curiosityseeker
4a978ef9b6
systemd-journald: adding mediate_deleted (#657)
* Update systemd-journald

profile systemd-journald flags=(mediate_deleted) {
link /var/log/journal/@{hex32}/#42742 ,                                                   # Failed name lookup - deleted entry
link /var/log/journal/@{hex32}/#42744 ,                                                   # Failed name lookup - deleted entry
link /var/log/journal/@{hex32}/.#system@@{hex32}-@{hex16}-@{hex16}.journal@{hex16} -> /var/log/journal/@{hex32}/#42744,
link /var/log/journal/@{hex32}/.#user-@{uid}@@{hex32}-@{hex16}-@{hex16}.journal@{hex16} -> /var/log/journal/@{hex32}/#42742,
}

* Update main.flags

Adding `systemd-journald attach_disconnected,mediate_deleted`
2025-01-26 20:07:44 +00:00
nobody43
e749145544 xfce, flags 2025-01-22 23:10:50 +00:00
Alexandre Pujol
70c06a0547
fix(profile): set dettached flag on some systemd services.
should fix #630
2025-01-09 22:48:23 +01:00
Alexandre Pujol
0e96b3b66f
build: cleanup flag manifest. 2024-10-06 17:44:23 +01:00
Alexandre Pujol
cc5416f57a
build: cleanup flags manifest & enforce a few profiles. 2024-10-03 11:58:25 +01:00
Alexandre Pujol
7033a13bc2
fix(profile): update ufw.
fix #537
2024-10-01 18:15:51 +01:00
curiosityseeker
9400e5fd00 Update main.flags 2024-09-24 10:12:52 +00:00
Alexandre Pujol
5def115a0e
build: enforce a few profiles. 2024-09-19 00:20:13 +01:00
Alexandre Pujol
0f4c37c39a
feat(profile): add gimp. 2024-09-18 23:31:48 +01:00
Alexandre Pujol
ecf4eaee14
feat(profile): add superproductivity. 2024-09-12 22:29:59 +01:00
Alexandre Pujol
7e63564c56
feat(profile): add speech-dispatcher. 2024-09-12 22:29:22 +01:00
Alexandre Pujol
f1dcefabb3
feat(profile): add profile for yay.
fix #420, #466
2024-09-09 20:38:42 +01:00
Alexandre Pujol
d4e380ad46
feat(profile): update & enable profiles in the apps group.
see #471
2024-09-09 19:40:42 +01:00