Commit graph

528 commits

Author SHA1 Message Date
Jose Maldonado aka Yukiteru
0d5655ba76 Noise reduction in exim4 profile
exim4 profile access to /proc/sys/net/ipv6/conf/all/disable_ipv6
in read mode searching information over IPv6 connection in the host.

In the actual profile this access is denied, this change fix this
and reduce noise in log.
2024-05-07 15:55:09 +01:00
Alexandre Pujol
f567c0eff7
fix(profile): do not use aa:exec in flatpak-app to avoid conflicting x. 2024-05-06 20:49:30 +01:00
Alex
f75e5047df
Merge branch 'main' into feat/update 2024-05-06 19:56:11 +01:00
Alexandre Pujol
683bfed4ad
feat(profile): modernise some profiles. 2024-05-04 00:14:07 +01:00
Alexandre Pujol
3f69b9fec4
feat(profile): use the new @{tmp} variable.
It is only used with the owner statement.
2024-05-02 22:12:02 +01:00
Alexandre Pujol
db87c56f37
feat(profile): general update. 2024-05-01 14:22:42 +01:00
Alexandre Pujol
01dd9ebb0c
feat(profile): general update. 2024-05-01 12:25:01 +01:00
Jeroen Rijken
e8eadcc7ec Cleanup
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-04-28 16:25:45 +02:00
Jeroen Rijken
8b3613fa48 Various updates all over
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-04-28 16:08:03 +02:00
Alexandre Pujol
a63201486b
feat(profile): update flatpak profiles stack. 2024-04-28 13:51:57 +01:00
Alexandre Pujol
65d0cfafe4
feat(profile): general update. 2024-04-28 13:50:48 +01:00
Jose Maldonado aka Yukiteru
5c35b1d69c Fix profiles for support Qt5CT and Qt6CT
This fix the next profiles

*Birdtray
*Convertall
*Fritzing
2024-04-27 23:51:48 +01:00
Alexandre Pujol
e4c3f1f076
fix: flatpak-app was too strict for some app.
See #314
2024-04-25 13:26:11 +01:00
Alexandre Pujol
3c6102e919
feat(profile): general update. 2024-04-09 23:48:33 +01:00
Alexandre Pujol
69f90c5a11
feat(profile): use gnome abs in common gnome app. 2024-04-09 23:42:03 +01:00
Alexandre Pujol
9aa9f26507
feat(profile): general update. 2024-04-05 23:55:21 +01:00
Alexandre Pujol
c359c0a2fd
feat(profile): add alsactl. 2024-04-03 21:56:58 +01:00
Alexandre Pujol
095254864f
feat(profile): general update. 2024-04-03 21:04:18 +01:00
Alexandre Pujol
6dd0c36e9a
feat: prefix variables that refer to a profile 2024-04-02 13:41:08 +01:00
Alexandre Pujol
534b10b261
feat(profile): rewrite some electron based profiles using the new electron abs. 2024-03-30 14:54:21 +00:00
Alexandre Pujol
2fc2394bad
feat(abs): rewrite user-read/user-write.
See #307
2024-03-28 16:47:40 +00:00
Alexandre Pujol
197c1bd78a
feat(profile): general update. 2024-03-27 21:53:11 +00:00
Alexandre Pujol
b88b8b8c26
refractor(abs): move common and app abstraction to their own abstractions subfolder.
As the number of abstraction is increasing, it is valuable to separate "base" abstractions to programs specific ones.
2024-03-27 15:11:21 +00:00
Alexandre Pujol
8c516ea788
feat(profile): general update. 2024-03-22 22:13:42 +00:00
Alexandre Pujol
a5f71675ea
feat(profile): general update. 2024-03-22 19:45:13 +00:00
Alexandre Pujol
828f282fc3
feat(profile): cleanup unix_chpwd already present in abs. 2024-03-22 13:11:49 +00:00
Alexandre Pujol
325068b705
feat(profile): all electron based software need userns. 2024-03-22 11:49:00 +00:00
Alexandre Pujol
6c38e90b5e
feat(profile): update dbus directive format. 2024-03-21 23:03:08 +00:00
Alexandre Pujol
7b880a5142
feat(profile): general update. 2024-03-20 00:04:39 +00:00
Alexandre Pujol
bf613f59a5
feat(profile): replace @{md5} by @{hex32}. 2024-03-19 21:26:12 +00:00
Alexandre Pujol
77945674a5
feat(profile): general update. 2024-03-18 14:31:01 +00:00
Alexandre Pujol
bf22e0770f
feat(profile): improve integration with opensuse. 2024-03-17 22:47:36 +00:00
Alexandre Pujol
0c5e71f971
feat(profile): cleanup some rules already included in abs. 2024-03-16 21:40:35 +00:00
Alexandre Pujol
c6717d2bab
feat(profile): use new dbus profile in dbus label. 2024-03-16 13:10:25 +00:00
Alexandre Pujol
cf4e47f10f
feat(profile): general update. 2024-03-15 16:07:53 +00:00
Alexandre Pujol
bdeb62d17d
feat(profile): add some missing dbus own definition. 2024-03-15 15:03:42 +00:00
Alexandre Pujol
467c38724a
feat(profile): clean superfluous openssl abstraction includes
apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
2024-03-12 16:00:44 +00:00
Alexandre Pujol
9c859cec9d
feat(profile): modernize some profiles. 2024-03-12 15:48:43 +00:00
Alexandre Pujol
81b9de3aff
feat(profile): use the new audio-client abs in profiles. 2024-03-12 15:44:40 +00:00
Alexandre Pujol
e4c0f683d2
feat(profile): replace old audio abstraction by the new stack. 2024-03-12 15:39:10 +00:00
Alexandre Pujol
0eeefb5f09
feat(profile): general update. 2024-03-11 22:47:22 +00:00
Alexandre Pujol
68fbd81e17
feat(profile): general update. 2024-03-10 21:21:00 +00:00
Alexandre Pujol
7882ae2153
feat(profile): remove rule moved to the base abstraction. 2024-03-10 20:01:58 +00:00
Alexandre Pujol
beaf1bad16
feat(profile): general update. 2024-03-10 19:35:04 +00:00
Alexandre Pujol
ff849b9f09
feat(profile): general update. 2024-03-05 18:00:36 +00:00
Alexandre Pujol
c66d3bf9f4
feat(profile): general update. 2024-03-05 16:58:16 +00:00
Alexandre Pujol
62f1f7df6e
feat(fsp): allow signal from system-user for some user app. 2024-03-05 00:25:39 +00:00
Alexandre Pujol
7e8f854b16
feat(abs): deny apparmor/.null in the base abstraction. 2024-03-03 11:51:39 +00:00
Jeroen Rijken
ba6172bb8c Review points
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00
Jeroen Rijken
f807d5a190 Deduplicate and revert
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-03-02 16:05:34 +00:00