felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
3069 commits 5 branches 0 tags 16 MiB
Commit graph

1387 commits

Author SHA1 Message Date
Roman Beslik
f8fc1aa387 systemd user ask-password 2024-12-23 22:49:27 +01:00
Roman Beslik
b35c2a0abf non-owner accesses authorized_keys 2024-12-23 22:41:42 +01:00
Alexandre Pujol
01c1562e7c
feat(profile): firefox: better naming of possible attachment. 2024-12-23 22:19:29 +01:00
Alexandre Pujol
7167de932c
feat(profile): firefox: restric access to /tmp 2024-12-23 22:17:35 +01:00
Besanon
3721d12a5d
more lxqt-files (#613) 
* Create abstraction for lxqt desktop group

first file for the LXQT 2.0 desktop group

* Update lxqt

* xdg-desktop abstraction added

* removing tabs

* Create startlxqt

starter file for LXQT Desktop

* Create startlxqt

* fixing startlxqt

I use sddm as display manager

I cant remove the other file - only use graphical env., sorry

After startlxqt i would add  2 lines to sddm to enable the start of LXQT desktop

* Delete apparmor.d/profiles-s-z/startlxqt

* indented by 2 spaces (like other entries)

* Update sddm

Enable sddm to start an lxqt desktop session

* Create lxqt-session

lxqt-session to be started by startlxqt. Display manager: sddm

* Update lxqt-session

* Update lxqt-session

* removed trailing whitespace

* Update kscreen_backend_launcher to support lxqt desktop

is needed for several complaints:
DENIED  kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open /usr/share/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open /usr/share/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r

* Update lxqt-session

* Create lxqt-panel

* Update lxqt-panel

* Update lxqt-panel

* Update lxqt-panel

* fix conflicting x

* Update lxqt-panel

add child-open

* remove  include <abstractions/app-launcher-user>

you think its too permissive to have app-launcher-user here, right?

* Update lxqt-panel

add needed programs

* Update lxqt-panel

turning back to layout of corresponding xfce file.

* Create lxqt-globalkeysd

* Create lxqt-about

* Create lxqt-leave

* Create lxqt-runner

* Update lxqt-leave

* Update lxqt-runner

* Update lxqt-globalkeysd

* remove video in lxqt-about

* Update lxqt-about

* Update lxqt-runner

* remove abstr. in lxqt-globalkeysd

* remove abstr. in lxqt-runner

* remove abstr. in lxqt-leave

* Create lxqt-config-notificationd

* Create lxqt-config-locale

* Create lxqt-config-printer

* Create lxqt-config-file-associations

* Create lxqt-config-powermanagement

* enable wayland-session for lxqt 2.1

startlxqtwayland for starting the session, support for labwc and kwin_wayland

* Update lxqt-config-printer

* Update lxqt-config-powermanagement

* Update sddm

* Update sddm

* adapt pci-rules

ok, havent seen this profile yet. I will change that in lxqt-powermanagement as well and check the other profiles

* Update lxqt-config-powermanagement

* Update lxqt-config-powermanagement

* Update lxqt-config-powermanagement

* Update lxqt-config-powermanagement
 2024-12-13 18:06:59 +01:00
Alex
64ed654fdf fix(profile): cron communication with dbus. 2024-12-12 22:52:55 +01:00
Alexandre Pujol
c7030f16a6 feat(profile): minor update. 2024-12-12 22:52:55 +01:00
Alexandre Pujol
212b8dcf54
feat(profile): improve some core profiles. 2024-11-29 15:34:10 +00:00
Besanon
7acd9079a2
add more lxqt files (#600) 
* Create abstraction for lxqt desktop group

first file for the LXQT 2.0 desktop group

* Update lxqt

* xdg-desktop abstraction added

* removing tabs

* Create startlxqt

starter file for LXQT Desktop

* Create startlxqt

* fixing startlxqt

I use sddm as display manager

I cant remove the other file - only use graphical env., sorry

After startlxqt i would add  2 lines to sddm to enable the start of LXQT desktop

* Delete apparmor.d/profiles-s-z/startlxqt

* indented by 2 spaces (like other entries)

* Update sddm

Enable sddm to start an lxqt desktop session

* Create lxqt-session

lxqt-session to be started by startlxqt. Display manager: sddm

* Update lxqt-session

* Update lxqt-session

* removed trailing whitespace

* Update kscreen_backend_launcher to support lxqt desktop

is needed for several complaints:
DENIED  kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open /usr/share/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open /usr/share/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r

* Update lxqt-session

* Create lxqt-panel

* Update lxqt-panel

* Update lxqt-panel

* Update lxqt-panel

* fix conflicting x

* Update lxqt-panel

add child-open

* remove  include <abstractions/app-launcher-user>

you think its too permissive to have app-launcher-user here, right?

* Update lxqt-panel

add needed programs

* Update lxqt-panel

turning back to layout of corresponding xfce file.

* Create lxqt-globalkeysd

* Create lxqt-about

* Create lxqt-leave

* Create lxqt-runner

* Update lxqt-leave

* Update lxqt-runner

* Update lxqt-globalkeysd

* remove video in lxqt-about

* Update lxqt-about

* Update lxqt-runner

* remove abstr. in lxqt-globalkeysd

* remove abstr. in lxqt-runner

* remove abstr. in lxqt-leave
 2024-11-23 17:44:18 +00:00
Alexandre Pujol
044f80b1db
feat(tunable): unify some XDG and user dirs varibale name. 2024-11-21 20:59:06 +00:00
Alexandre Pujol
cb86f1c076
feat(profile): general update. 2024-11-21 20:37:39 +00:00
Alexandre Pujol
65f2d21558
feat(profile): add profile for tecla. 2024-11-21 20:37:39 +00:00
Alexandre Pujol
36d787fa44
feat(abs): add abstraction/webkit. 2024-11-21 20:37:39 +00:00
Alexandre Pujol
8d4d17fa34
feat(profile): add fc-match & fc-pattern. 2024-11-21 19:26:57 +00:00
Alexandre Pujol
815e9bfda2
feat(profile): general update. 2024-11-19 23:07:41 +00:00
Alexandre Pujol
e149e77538
fix(profile): dhcpcd executes resolvconf 
fix #608
 2024-11-19 21:52:12 +00:00
Alexandre Pujol
206bc3473d
fix: missing @{udbus} in unix bind. 2024-11-19 20:44:34 +00:00
Alexandre Pujol
5bf8d362fa
fix(profile): minor improvment to ensure tests passes. 2024-11-19 19:49:22 +00:00
Alexandre Pujol
4e5f4cb06a
feat: profiles and integration tests improvments. 
Add the udbus variable to be used in `unix bind` rule for dbus.
 2024-11-19 19:04:27 +00:00
Alexandre Pujol
24ea5f0a3a
feat(tunable): add p_dbus_* variables. 
This allow for better integration for system when dbus is not confined.
 2024-11-13 12:23:36 +00:00
Alexandre Pujol
9cb3ea244c
feat(profile): add homectl. 2024-11-12 22:18:41 +00:00
Alexandre Pujol
66455a9251
feat(profile): improve support for some profiles. 
Most of the rules have come from the integration tests.
 2024-11-12 22:18:11 +00:00
Alexandre Pujol
4108d6a987
feat(profile): update some core profiles. 2024-11-12 20:42:31 +00:00
Alexandre Pujol
ebd6d54733
feat(profile): update systemd profiles. 2024-11-12 20:36:18 +00:00
Alexandre Pujol
9a3adc66d0
feat(profile): small profile update. 2024-11-11 22:18:39 +00:00
Alexandre Pujol
3e0583fd8e
feat(profile): various small improvement. 2024-11-10 19:46:33 +00:00
Alexandre Pujol
b0436029f0
fix(profile): ensure cpu policy can be set regardless of the CPU. 
fix #602
 2024-11-10 19:20:00 +00:00
Alexandre Pujol
3c0b83d1b0
feat(profile): improve some systemd profiles. 2024-11-10 19:02:07 +00:00
Alexandre Pujol
7b9d412f02
feat(profile): gnome: allow receiving signal from gdm-session-worker as well as gdm. 2024-11-10 19:00:45 +00:00
Besanon
026fbf7552
Add lxqt-panel (#594) 2024-11-04 10:21:08 +00:00
Roman Beslik
1eb7be5447 /boot/EFI 2 2024-11-04 10:18:06 +00:00
Alexandre Pujol
a9a41ef810
feat(profile): pacman can restart any updated program. 
See #596
 2024-11-01 11:59:30 +01:00
beroal
a37e11f686
Writing locale.conf (#593) 2024-10-28 14:59:54 +00:00
valoq
1dc8714cb2
various improvements (#590) 2024-10-28 14:41:41 +00:00
Besanon
6f586f1f46
Add lxqt-session, enable start in sddm (#580) 2024-10-28 14:39:41 +00:00
EricLin0509
0a8727e837 Fix gnome-boxes couldn't found VM that previously created 2024-10-27 14:20:17 +00:00
odomingao
ce4a178706 Update hyprland 2024-10-27 14:16:56 +00:00
Roman Beslik
d8da3147c9 /boot/EFI 2024-10-27 14:16:01 +00:00
Besanon
db6c94ba5a
Add startlxqt (#574) 2024-10-23 21:34:13 +00:00
Alexandre Pujol
25049292eb
feat(profile): improve integration with Tumbleweed. 
see #576
 2024-10-23 11:39:49 +01:00
Alexandre Pujol
d9208e0648
feat(profile): general update and fixes. 2024-10-22 22:04:04 +01:00
Alexandre Pujol
38b973c596
chore(profile): remove trailing whitespace in profiles. 2024-10-22 20:03:24 +01:00
odomingao
b72552bdf2 Create pypr 2024-10-22 16:03:11 +00:00
Alexandre Pujol
3285de675f
fix(profile): minor fixes. 2024-10-22 11:16:49 +01:00
Alexandre Pujol
cca8e6508f
fix(profile): apply some fix raised by the test suite. 2024-10-22 00:37:50 +01:00
Alexandre Pujol
48738a4cae
fix(profile): crontab temp dir. 
fix #564
 2024-10-21 21:36:49 +01:00
odomingao
7aaa8272bb Update reflector 2024-10-21 20:33:08 +00:00
François Guerraz
d9e8502f74 Photos from contacts in google don't have an extension 2024-10-21 20:21:28 +00:00
Alexandre Pujol
165a5f7b9a
feat: add nvimpager as possible pager. 
Also ensure the child-pager uses pager_path.

fix #568
 2024-10-21 21:19:42 +01:00
Alexandre Pujol
c90d2fea94
feat(profile): update some ctl tools. 2024-10-16 23:50:16 +01:00