2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 13:58:22 +00:00

Clean superfluous openssl abstraction includes

With abstractions/openssl now being included from abstraction/base
(via the indirection of abstractions/crypto) anything already
including abstraction/base can stop including abstractions/openssl
directly.
This commit is contained in:
Christian Ehrhardt
2024-03-12 14:54:01 +01:00
parent 3d1dedfa7e
commit aa69d9adc9
24 changed files with 0 additions and 25 deletions

View File

@@ -50,7 +50,6 @@
include <abstractions/kde-icon-cache-write> include <abstractions/kde-icon-cache-write>
include <abstractions/kde> include <abstractions/kde>
include <abstractions/nameservice> # for IceProcessMessages () from libICE.so (called by libQtCore.so) include <abstractions/nameservice> # for IceProcessMessages () from libICE.so (called by libQtCore.so)
include <abstractions/openssl>
include <abstractions/qt5> include <abstractions/qt5>
include <abstractions/recent-documents-write> include <abstractions/recent-documents-write>
include <abstractions/X> include <abstractions/X>

View File

@@ -11,8 +11,6 @@ profile php-fpm /usr/sbin/php-fpm* flags=(attach_disconnected) {
include <abstractions/nameservice> include <abstractions/nameservice>
# common php files and support files that php needs # common php files and support files that php needs
include <abstractions/php> include <abstractions/php>
# read openssl configuration
include <abstractions/openssl>
# read the system certificates # read the system certificates
include <abstractions/ssl_certs> include <abstractions/ssl_certs>

View File

@@ -6,7 +6,6 @@ profile samba-bgqd /usr/lib*/samba/{,samba/}samba-bgqd {
include <abstractions/base> include <abstractions/base>
include <abstractions/cups-client> include <abstractions/cups-client>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/openssl>
include <abstractions/samba> include <abstractions/samba>
signal receive set=term peer=smbd, signal receive set=term peer=smbd,

View File

@@ -22,7 +22,6 @@ profile syslog-ng /{usr/,}{bin,sbin}/syslog-ng {
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/mysql> include <abstractions/mysql>
include <abstractions/openssl>
include <abstractions/python> include <abstractions/python>
include <abstractions/hosts_access> include <abstractions/hosts_access>

View File

@@ -19,7 +19,6 @@ profile dovecot-auth /usr/lib*/dovecot/auth {
include <abstractions/base> include <abstractions/base>
include <abstractions/mysql> include <abstractions/mysql>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/openssl>
include <abstractions/wutmp> include <abstractions/wutmp>
include <abstractions/dovecot-common> include <abstractions/dovecot-common>

View File

@@ -17,7 +17,6 @@ profile dovecot-dict /usr/lib*/dovecot/dict {
include <abstractions/base> include <abstractions/base>
include <abstractions/mysql> include <abstractions/mysql>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/openssl>
include <abstractions/dovecot-common> include <abstractions/dovecot-common>
capability setuid, capability setuid,

View File

@@ -17,7 +17,6 @@ include <tunables/global>
profile dovecot-imap-login /usr/lib*/dovecot/imap-login { profile dovecot-imap-login /usr/lib*/dovecot/imap-login {
include <abstractions/base> include <abstractions/base>
include <abstractions/dovecot-common> include <abstractions/dovecot-common>
include <abstractions/openssl>
capability setuid, capability setuid,
capability sys_chroot, capability sys_chroot,

View File

@@ -18,7 +18,6 @@ profile dovecot-lmtp /usr/lib*/dovecot/lmtp {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/dovecot-common> include <abstractions/dovecot-common>
include <abstractions/openssl>
include <abstractions/ssl_certs> include <abstractions/ssl_certs>
include <abstractions/ssl_keys> include <abstractions/ssl_keys>

View File

@@ -19,7 +19,6 @@ include <tunables/global>
profile dovecot-managesieve-login /usr/lib*/dovecot/managesieve-login { profile dovecot-managesieve-login /usr/lib*/dovecot/managesieve-login {
include <abstractions/base> include <abstractions/base>
include <abstractions/dovecot-common> include <abstractions/dovecot-common>
include <abstractions/openssl>
capability setuid, capability setuid,
capability sys_chroot, capability sys_chroot,

View File

@@ -17,7 +17,6 @@ include <tunables/global>
profile dovecot-pop3-login /usr/lib*/dovecot/pop3-login { profile dovecot-pop3-login /usr/lib*/dovecot/pop3-login {
include <abstractions/base> include <abstractions/base>
include <abstractions/dovecot-common> include <abstractions/dovecot-common>
include <abstractions/openssl>
capability setuid, capability setuid,
capability sys_chroot, capability sys_chroot,

View File

@@ -16,7 +16,6 @@ include <tunables/ntpd>
profile ntpd /usr/{bin,sbin}/{,open}ntpd flags=(attach_disconnected) { profile ntpd /usr/{bin,sbin}/{,open}ntpd flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/openssl>
include <abstractions/ssl_certs> include <abstractions/ssl_certs>
include <abstractions/xad> include <abstractions/xad>

View File

@@ -8,7 +8,6 @@ profile smbd /usr/{bin,sbin}/smbd {
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/cups-client> include <abstractions/cups-client>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/openssl>
include <abstractions/samba> include <abstractions/samba>
include <abstractions/user-tmp> include <abstractions/user-tmp>
include <abstractions/wutmp> include <abstractions/wutmp>

View File

@@ -17,7 +17,6 @@ include <tunables/global>
profile postfix-proxymap /usr/lib/postfix/{bin/,sbin/,}proxymap { profile postfix-proxymap /usr/lib/postfix/{bin/,sbin/,}proxymap {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/openssl>
include <abstractions/postfix-common> include <abstractions/postfix-common>
/etc/my.cnf r, /etc/my.cnf r,

View File

@@ -18,7 +18,6 @@ profile postfix-smtp /usr/lib/postfix/{bin/,sbin/,}smtp {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/postfix-common> include <abstractions/postfix-common>
include <abstractions/openssl>
capability dac_override, capability dac_override,
capability dac_read_search, capability dac_read_search,

View File

@@ -18,7 +18,6 @@ profile postfix-smtpd /usr/lib/postfix/{bin/,sbin/,}smtpd {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/postfix-common> include <abstractions/postfix-common>
include <abstractions/openssl>
include <abstractions/ssl_certs> include <abstractions/ssl_certs>
include <abstractions/ssl_keys> include <abstractions/ssl_keys>

View File

@@ -17,7 +17,6 @@ include <tunables/global>
profile postfix-tlsmgr /usr/lib/postfix/{bin/,sbin/,}tlsmgr { profile postfix-tlsmgr /usr/lib/postfix/{bin/,sbin/,}tlsmgr {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/openssl>
include <abstractions/postfix-common> include <abstractions/postfix-common>
/usr/lib/postfix/{bin/,sbin/,}tlsmgr mrix, /usr/lib/postfix/{bin/,sbin/,}tlsmgr mrix,

View File

@@ -26,7 +26,6 @@ include <tunables/global>
profile dhclient /{usr/,}sbin/dhclient { profile dhclient /{usr/,}sbin/dhclient {
include <abstractions/base> include <abstractions/base>
include <abstractions/bash> include <abstractions/bash>
include <abstractions/openssl>
include <abstractions/nameservice> include <abstractions/nameservice>
capability net_raw, capability net_raw,

View File

@@ -17,7 +17,6 @@ include <tunables/global>
include <abstractions/base> include <abstractions/base>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/openssl>
capability setgid, capability setgid,
capability setuid, capability setuid,

View File

@@ -13,7 +13,6 @@ include <tunables/global>
profile clamd /usr/sbin/clamd { profile clamd /usr/sbin/clamd {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/openssl>
capability setgid, capability setgid,
capability setuid, capability setuid,

View File

@@ -13,7 +13,6 @@ include <tunables/global>
profile haproxy /usr/sbin/haproxy { profile haproxy /usr/sbin/haproxy {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/openssl>
capability net_admin, capability net_admin,
capability net_bind_service, capability net_bind_service,
capability setgid, capability setgid,

View File

@@ -20,7 +20,6 @@ include <tunables/global>
include <abstractions/kerberosclient> include <abstractions/kerberosclient>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/perl> include <abstractions/perl>
include <abstractions/openssl>
capability kill, capability kill,
capability net_bind_service, capability net_bind_service,

View File

@@ -17,7 +17,6 @@ include <tunables/global>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/authentication> include <abstractions/authentication>
include <abstractions/user-mail> include <abstractions/user-mail>
include <abstractions/openssl>
/dev/urandom r, /dev/urandom r,
/tmp/* rwl, /tmp/* rwl,

View File

@@ -17,7 +17,6 @@ include <tunables/global>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/authentication> include <abstractions/authentication>
include <abstractions/user-mail> include <abstractions/user-mail>
include <abstractions/openssl>
/dev/urandom r , /dev/urandom r ,
/tmp/.* rwl , /tmp/.* rwl ,

View File

@@ -17,7 +17,6 @@ include <tunables/global>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/authentication> include <abstractions/authentication>
include <abstractions/user-mail> include <abstractions/user-mail>
include <abstractions/openssl>
/dev/urandom r , /dev/urandom r ,
/tmp/.* rwl , /tmp/.* rwl ,