apparmor.d

felipe/apparmor.d

Fork 0

Commit graph

eb6c7548f5

feat(profiles): general update. Alexandre Pujol 2022-07-15 21:55:59 +01:00
682df516bf Make calico part of cni Jeroen Rijken 2022-07-10 16:09:33 +02:00
02ad72b024 Allow containerd to (u)mount cni devices, and loopback to access them. Jeroen Rijken 2022-07-10 15:10:34 +02:00
6c8e50534b Cleanup profile Jeroen Rijken 2022-07-10 14:53:37 +02:00
2d7ec5ad2c

Update spectre-meltdown-checker (#50) nobodysu 2022-07-15 20:42:15 +00:00
13fd4200f2 Make calico part of cni Jeroen Rijken 2022-07-10 16:09:33 +02:00
5ba82e22cd Allow containerd to (u)mount cni devices, and loopback to access them. Jeroen Rijken 2022-07-10 15:10:34 +02:00
8d96529256 Cleanup profile Jeroen Rijken 2022-07-10 14:53:37 +02:00
63f1a98c37

feat(profiles): add cron-ubuntu-fan. Alexandre Pujol 2022-07-10 14:30:56 +01:00
23642eb0be

feat(profiles): general update. Alexandre Pujol 2022-07-10 14:28:44 +01:00
c0e62f30bb

feat(profiles): add wireguard. Alexandre Pujol 2022-07-10 14:24:30 +01:00
d8449de55e

feat(profiles): add and merge some cni profiles. Alexandre Pujol 2022-07-10 14:24:09 +01:00
4f7cf8d90e

Merge branch 'Jeroen0494-feat/cni' Alexandre Pujol 2022-07-10 13:42:30 +01:00
40d8c68f22

Merge branch 'master' into feat/cni Alex 2022-07-10 13:41:50 +01:00
d10f2c073c Alphabetical sorting, group common options. Jeroen Rijken 2022-07-10 13:01:31 +02:00
59f8b893ff Cleanup profiles according to standards Jeroen Rijken 2022-07-09 20:33:47 +02:00
c9b4423e45 Allow mount-zfs access to pts Jeroen Rijken 2022-07-09 15:24:10 +02:00
da08ef6aa6 Typo Jeroen Rijken 2022-07-09 14:44:53 +02:00
cc5d1a0e07 Initramfs generation updates Jeroen Rijken 2022-07-09 14:43:19 +02:00
99c311e699 Executable updates for zpool Jeroen Rijken 2022-07-07 14:48:32 +02:00
3810c1668e Basic ZFS support Jeroen Rijken 2022-07-05 20:45:01 +02:00
6e1e7dc32b

Apply suggestions from code review Alex 2022-07-10 12:38:11 +00:00
8a13d71edb Update CNI path, set containerd to attach_disconnected, cleanups. Jeroen Rijken 2022-07-10 13:36:44 +02:00
6687a9f32e Alphabetical sorting, group common options. Jeroen Rijken 2022-07-10 13:01:31 +02:00
9fb43325a3 Add headers to new policies Jeroen Rijken 2022-07-10 12:49:33 +02:00
7524bfa343 Syntax fixes Jeroen Rijken 2022-07-10 12:43:52 +02:00
8413f6b9e6 Allow containerd to access SSL certs for pulling container images. Jeroen Rijken 2022-07-10 11:51:15 +02:00
edcd130432 Calico profile cleanup. Jeroen Rijken 2022-07-09 20:53:21 +02:00
2ffa3d1339 Cleanup profiles according to standards part 1/2 Jeroen Rijken 2022-07-09 20:46:59 +02:00
4e6a17bb2c Cleanup profiles according to standards Jeroen Rijken 2022-07-09 20:33:47 +02:00
b4bbf177c4 Allow mount-zfs access to pts Jeroen Rijken 2022-07-09 15:24:10 +02:00
632400dcd7 Typo Jeroen Rijken 2022-07-09 14:44:53 +02:00
8ba58cfd3b Initramfs generation updates Jeroen Rijken 2022-07-09 14:43:19 +02:00
eb8a069002 Executable updates for zpool Jeroen Rijken 2022-07-07 14:48:32 +02:00
1556e62e10 Update build instructions for Ubuntu Jeroen Rijken 2022-07-06 20:50:35 +02:00
3d63f9e21e Add AppArmor support to containerd Jeroen Rijken 2022-07-06 20:50:14 +02:00
9ea910d1a0 Add CNI for containerd Jeroen Rijken 2022-07-06 20:49:52 +02:00
638ba7fb87 Basic ZFS support Jeroen Rijken 2022-07-05 20:45:01 +02:00
4a37cd1149

feat(profiles): add software-properties-gtk & ubuntu-advantage. Alexandre Pujol 2022-07-03 20:29:45 +01:00
d04bb8f5b2

feat(profiles): add systemd-resolve. Alexandre Pujol 2022-07-03 20:28:26 +01:00
f6de2fbe7a

feat(profiles): general update. Alexandre Pujol 2022-07-03 20:27:48 +01:00
9b84ded0c2

doc: improve current doc. Alexandre Pujol 2022-07-03 18:55:21 +01:00
1d45e8ec2e

feat(profiles): add do-release-upgrade. Alexandre Pujol 2022-06-26 23:07:00 +01:00
72a042e6ef

feat(profiles): add notify-reboot-required. Alexandre Pujol 2022-06-26 23:06:42 +01:00
6c89ee8630

feat(profiles): add gnome-characters-backgroudservice. Alexandre Pujol 2022-06-26 23:05:53 +01:00
8969786104

feat(profiles): add plymouthd. Alexandre Pujol 2022-06-26 23:05:24 +01:00
08beefe867

feat(profiles): general update. Alexandre Pujol 2022-06-26 23:05:09 +01:00
e087349662

feat(profiles): define more xdg variables. Alexandre Pujol 2022-06-26 17:32:12 +01:00
b3a28da5e5

fix(profiles): do not confine udevd by default as it may break the boot. Alexandre Pujol 2022-06-26 16:41:41 +01:00
e69182e1df

feat(profiles): general update. Alexandre Pujol 2022-06-26 16:40:48 +01:00
c04363c1b6

feat(profiles): reorganise a few profiles. Alexandre Pujol 2022-06-25 00:18:26 +01:00
fcbe764ccf

feat(profiles): general update. Alexandre Pujol 2022-06-25 00:16:05 +01:00
e942c057bd

feat(profiles): move netstat Alexandre Pujol 2022-06-25 00:08:51 +01:00
bfe41958d2

Update spectre-meltdown-checker nobodysu 2022-06-22 19:14:43 +00:00
20fd8376bd

feat(profiles): Rewrite and largelly restrict the libvirtd profile. Alexandre Pujol 2022-06-18 22:49:32 +01:00
56afb90084

fix(profiles): fix some abstraction definitions. Alexandre Pujol 2022-06-18 21:56:09 +01:00
393e339b48

feat(profiles): apply rule from #51. Alexandre Pujol 2022-06-14 22:54:26 +01:00
d93879d9df

chore: move some cron profiles. Alexandre Pujol 2022-06-14 20:14:32 +01:00
55c0827c2a

chore: better profile ignore definition. Alexandre Pujol 2022-06-14 19:40:25 +01:00
32e36b0c4a

build: compatibility for debian. Alexandre Pujol 2022-06-14 19:39:04 +01:00
aea0b5d1d9

build: update flags definitions. Alexandre Pujol 2022-06-14 19:38:09 +01:00
08bb1b44a6

style(profiles): small rules improvment. Alexandre Pujol 2022-06-14 19:25:45 +01:00
454456a844

style(profiles): better header for the abstractions. Alexandre Pujol 2022-06-14 19:17:41 +01:00
10de7941b0

feat(profiles): add fprintd. Alexandre Pujol 2022-06-14 19:12:38 +01:00
9ccda2a0a5

feat(profiles): initial version of mount.zfs Alexandre Pujol 2022-06-14 19:11:46 +01:00
a792c4cb4e

feat(profiles): add some missing ubuntu profiles. Alexandre Pujol 2022-06-14 19:09:50 +01:00
fb61f8ebff

feat(profiles): add language-validate. Alexandre Pujol 2022-06-14 19:07:35 +01:00
9d81f5e88f

feat(profiles): reorganise the cron & run-parts profiles. Alexandre Pujol 2022-06-14 19:06:34 +01:00
cc78beddda

feat(profiles): disks add support for zfs. Alexandre Pujol 2022-06-14 19:03:46 +01:00
8487f5475a

feat(profiles): update ubuntu advantage profiles. Alexandre Pujol 2022-06-13 22:18:17 +01:00
20303f53e3

feat(profiles): add the XDG_SCREENSHOTS_DIR variable. Alexandre Pujol 2022-06-13 22:16:25 +01:00
2c6843f5fe

feat(profiles): add audit related profiles. Alexandre Pujol 2022-06-13 22:15:13 +01:00
939363a9a7

feat(profiles): add mdevctl. Alexandre Pujol 2022-06-13 22:14:29 +01:00
391131aad1

feat(profiles): update pkexec. Alexandre Pujol 2022-06-13 22:14:11 +01:00
f71c0e41f8

feat(profiles): minor improvments. Alexandre Pujol 2022-06-13 22:13:17 +01:00
7c2e92ba03

feat(profiles): add nologin. Alexandre Pujol 2022-06-13 22:09:23 +01:00
10148786d2

feat(profiles): add some freedesktop related profiles. Alexandre Pujol 2022-06-13 22:08:33 +01:00
039b7ab2cb

feat(profiles): update polkit-mate-authentication-agent. Alexandre Pujol 2022-06-13 22:05:03 +01:00
d998b1dd6e

feat(profiles): improve ubuntu compatibility. Alexandre Pujol 2022-06-13 22:04:12 +01:00
0cbcbb29a4

feat(profiles): improve/update apt related profiles. Alexandre Pujol 2022-06-13 21:42:25 +01:00
7b0ef88358

feat(profiles): add some missing dbus rules. Alexandre Pujol 2022-06-13 21:41:48 +01:00
6898bac12f

feat(profiles): add some missing dbus, MOUNTS and dconf rules. Alexandre Pujol 2022-06-13 21:38:14 +01:00
50a18aac08

feat(profiles): add some core dbus rules. Alexandre Pujol 2022-06-12 23:50:58 +01:00
24056c8cd1

feat(profiles): ensure bin, sbin compatibility for (u)mount. Alexandre Pujol 2022-06-12 22:56:27 +01:00
779853dc7f

feat(profiles): new definition for MOUNTs, add MOUNTDIRS. Alexandre Pujol 2022-06-12 22:51:37 +01:00
9493e783ce

feat(profiles): rethink the su & sudo profiles. Alexandre Pujol 2022-06-12 22:19:13 +01:00
0896343bbc

feat(profiles): rethink the app launchers. Alexandre Pujol 2022-06-12 22:17:38 +01:00
a5c9a58c3c

feat(profiles): complete the dbus-session abstactions and related rules. Alexandre Pujol 2022-06-12 22:15:21 +01:00
8f53366cd8

feat(profiles): allow gnome-shell to send signal to all profiles. Alexandre Pujol 2022-06-12 12:04:24 +01:00
80b337bdf4

revert(profiles): remove tor related profiles. Alexandre Pujol 2022-06-12 12:02:16 +01:00
f53550525e

feat(profiles): add the X-strict abstraction. Alexandre Pujol 2022-06-09 22:45:14 +01:00
5d45b8e7a7

feat(profiles): add the dconf-write abstraction. Alexandre Pujol 2022-06-09 21:55:55 +01:00
583d7a15f0

feat(profiles): add dbus rules for some common profiles. Alexandre Pujol 2022-06-05 23:06:14 +01:00
e949654614

feat(profiles): dbus abstactions and related rules. Alexandre Pujol 2022-06-05 22:57:29 +01:00
63e5980d8d

feat(profiles): general update. Alexandre Pujol 2022-06-05 22:47:37 +01:00
671dcca38d

feat(aa-log): allow profile selection for dbus rules. Alexandre Pujol 2022-06-05 14:54:26 +01:00
f6b6e99cde

feat(profiles): initial dbus rules for systemd profiles. Alexandre Pujol 2022-06-05 14:53:10 +01:00
a333a77cb5 polishing nobodysu 2022-06-05 15:36:10 +03:00
7a18cfed40

fix(aa-log): ensure the good profile is shown. Alexandre Pujol 2022-06-04 21:53:24 +01:00
4d9a5d6c4d

Update spectre-meltdown-checker nobodysu 2022-06-04 12:29:21 +00:00