felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2889 commits 5 branches 0 tags 16 MiB
Commit graph

2889 commits

This branch
This branch
All branches
Author SHA1 Message Date
curiosityseeker
f0da1f530f
Update gmenudbusmenuproxy 
profile gmenudbusmenuproxy {
  /usr/share/drirc.d/ r,
  /usr/share/drirc.d/00-mesa-defaults.conf r,
  /usr/share/drirc.d/00-radv-defaults.conf r,

  owner @{user_cache_dirs}/mesa_shader_cache_db/index rw,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part0/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part0/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part1/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part1/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part10/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part10/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part11/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part11/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part12/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part12/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part13/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part13/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part14/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part14/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part15/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part15/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part16/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part16/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part17/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part17/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part18/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part18/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part19/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part19/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part2/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part2/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part20/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part20/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part21/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part21/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part22/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part22/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part23/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part23/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part24/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part24/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part25/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part25/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part26/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part26/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part27/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part27/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part28/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part28/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part29/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part29/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part3/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part3/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part30/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part30/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part31/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part31/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part32/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part32/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part33/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part33/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part34/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part34/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part35/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part35/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part36/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part36/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part37/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part37/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part38/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part38/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part39/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part39/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part4/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part4/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part40/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part40/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part41/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part41/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part42/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part42/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part43/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part43/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part44/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part44/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part45/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part45/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part46/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part46/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part47/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part47/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part48/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part48/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part49/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part49/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part5/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part5/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part6/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part6/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part7/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part7/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part8/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part8/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part9/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part9/mesa_cache.idx k,

  @{sys}/devices/@{pci}/device r,
  @{sys}/devices/@{pci}/revision r,
  @{sys}/devices/@{pci}/subsystem_device r,
  @{sys}/devices/@{pci}/subsystem_vendor r,
  @{sys}/devices/@{pci}/uevent r,
  @{sys}/devices/@{pci}/vendor r,

  @{PROC}/sys/dev/i915/perf_stream_paranoid r,

  /dev/dri/ r,
  /dev/dri/renderD128 rw,
}
 2024-10-10 14:19:28 +02:00
Alexandre Pujol
5bf8c6ef0f
fix: add vim syntaxt some profiles. 2024-10-09 22:38:22 +01:00
Alexandre Pujol
75f2c0c7b8
tests: ensure vim syntax and abi are set on all profile/abs. 2024-10-09 22:26:11 +01:00
Alexandre Pujol
5585773802
chore(profile): add missing vim:syntax=apparmor in some profiles. 2024-10-09 22:21:52 +01:00
Alexandre Pujol
fc43400c26
feat(abs): add abi reference to all abstractions. 2024-10-09 22:19:01 +01:00
Alexandre Pujol
c923cc7ccf
feat(abs): use nss-systemd in nameservice-strict. 2024-10-09 21:37:26 +01:00
Alexandre Pujol
68127c3859
build: allow to run prebuild outside of this project. 2024-10-09 14:03:54 +01:00
Alexandre Pujol
e17b682e51
feat(profile): minor profile improvments. 2024-10-09 13:56:27 +01:00
Alexandre Pujol
6afcfa85ec
fix(ci): ensure output build directory exist. 2024-10-09 13:31:57 +01:00
Alexandre Pujol
94703681d9
build: build tasks: dev -> hotfix. 2024-10-08 23:44:13 +01:00
Alexandre Pujol
630e785787
feat(tunable): remove @{user_tmp_dirs} as it refers to different kind of temp folder. 2024-10-08 22:59:50 +01:00
Alexandre Pujol
28706b2a78
doc: initial preparation for re-attached path. 2024-10-08 22:53:52 +01:00
Alexandre Pujol
cc47d8d557
doc: minor improvment of dev doc. 2024-10-08 21:24:29 +01:00
Alexandre Pujol
146bda8f45
test(packer): as base image for the cosmic DE. 2024-10-07 21:41:44 +01:00
Alexandre Pujol
4f861158cf
build: unify locally build package output directory. 2024-10-07 14:05:40 +01:00
Alexandre Pujol
31af758639
fix(test): packer hcl & uefi path 2024-10-07 12:16:42 +01:00
Alexandre Pujol
03b777340d
tests(packer): update & cleanup tests images. 2024-10-06 22:01:39 +01:00
beroal
a5cafe26ea
aMule, a file sharing program; not all executables (#546) 
* aMule, a file sharing program; not all executables

* ABI 4; document directories; amule//shell was deleted
 2024-10-06 19:46:12 +00:00
beroal
ce3813133f
the desktop version of the Briar secure messager (#545) 
* the desktop version of the Briar secure messager
 2024-10-06 19:45:17 +00:00
beroal
3324c0dc3b
xeyes (#544) 
* xeyes

* Changed the profile attachment to the variable

* ABI 4
 2024-10-06 19:44:31 +00:00
Alexandre Pujol
6b0b498244
feat(profile): small profiles update. 2024-10-06 20:43:18 +01:00
Alexandre Pujol
01a1af6c1b
feat(systemd): ensure dbus service are started after apparmor. 2024-10-06 20:19:09 +01:00
Alexandre Pujol
29a1642598
feat(aa-log): unify the isOwner function across features. 2024-10-06 20:17:19 +01:00
Alexandre Pujol
856c425dd5
chore(build): minor cosmetic. 2024-10-06 20:15:13 +01:00
Alexandre Pujol
effd4ef267
ci: move check job stage. 2024-10-06 17:51:30 +01:00
Alexandre Pujol
52b3a1dfd4
fix(ci): github workflows. 2024-10-06 17:44:46 +01:00
Alexandre Pujol
0e96b3b66f
build: cleanup flag manifest. 2024-10-06 17:44:23 +01:00
Alexandre Pujol
1e28428574
ci: run on ubuntu 24.04 & enable make check. 2024-10-06 16:19:11 +01:00
Alexandre Pujol
afb1831fc3
chore(profile): remove jdownloader 
Note: this profile was for a locally installed program.
 2024-10-06 15:58:53 +01:00
Alexandre Pujol
7ccaab8234
chore(profile): add abi and local include when missing. 2024-10-06 15:57:47 +01:00
Alexandre Pujol
105a9b4def
feat(profile): cleanup and remove open subprofile when it is useless. 2024-10-06 15:46:07 +01:00
Alexandre Pujol
36f620dab1
tests: add 'make check' for common issues in Apparmor profiles. 2024-10-06 15:39:21 +01:00
Alexandre Pujol
7757038a4f
build: update path helpers 2024-10-05 23:03:41 +01:00
Alexandre Pujol
4b5f7f2b52
chore: document build the enabled task. 2024-10-04 16:14:40 +01:00
Alexandre Pujol
18a71512a9
feat(tunable): add u32 & u64. 
- Reorganize the file
- @{u32} == @{uid}
 2024-10-04 14:42:11 +01:00
Alexandre Pujol
7b73adceeb
feat(abs): common/gnome: remove open_path from the abs, add bus accessibility. 2024-10-04 14:31:54 +01:00
Alexandre Pujol
2ef038e8d9
feat(profile): minor abi specific changes. 2024-10-03 13:28:40 +01:00
Alexandre Pujol
9b57546312
chore(fsp): add note of current profile stage. 2024-10-03 13:09:20 +01:00
Alexandre Pujol
cc5416f57a
build: cleanup flags manifest & enforce a few profiles. 2024-10-03 11:58:25 +01:00
Alexandre Pujol
de21ff07a6
build: move upstream overwrite to its own build tasks. 
It allow us to controll when we want to do it and either or not it should be enabled.
 2024-10-03 11:55:33 +01:00
Alexandre Pujol
896254c2ec
feat(profile): rewrite all xdg script profiles. 2024-10-03 11:47:58 +01:00
Alexandre Pujol
35b305f043
fix(build): fix path in make dev. 2024-10-02 21:25:01 +01:00
Alexandre Pujol
14a5d8deae
fix(aa-log): ensure we also split quote in log value 
fix #229
 2024-10-02 21:06:45 +01:00
Alexandre Pujol
3f98e86e24
fix(aa-log): too much cleaning in pci path. 
see #505
 2024-10-02 20:48:36 +01:00
Alexandre Pujol
7ba556b15c
build: add make dev name=<profile-name>. 2024-10-02 19:49:21 +01:00
Alexandre Pujol
c5505dee8b
fix(build): abi 4 to abi 3 conversion. 2024-10-02 19:24:12 +01:00
Alexandre Pujol
8ddaa136ba
fix(test): update unit test result to abi 4. 2024-10-02 16:50:54 +01:00
Alexandre Pujol
344ccf3003
build: set default ABI to abi4. 2024-10-02 16:44:15 +01:00
Alexandre Pujol
59ac54e2fc
build: reorganise build: abi4, fallback, prebuild cli 
- ABI4 by default, fallback to abi 3.
- aa-prebuild cli that can be used by other project shipping profiles.
- --file option to cli to only build one dev profile.
- add abi version filter to only & exclude directives.
 2024-10-02 16:22:46 +01:00
Alexandre Pujol
d6b7bef89e
feat(profile): enable abi 4 rules by default. 2024-10-02 14:19:26 +01:00