mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 01:57:43 +00:00
Code Issues Releases Wiki Activity
apparmor/profiles/apparmor.d
History
bruce-canonical e892093c06 ProFTPD Profile
2025-05-12 14:27:27 +00:00
..
abi
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
abstractions
Merge abstractions/gnome: include abstractions/gtk
2025-05-08 06:15:56 +00:00
apache2.d
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
local
Don't create local/* profile sniplets by default
2023-08-20 11:49:10 +02:00
tunables
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
1password
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
alsamixer
profiles: Give all profiles read access to their attachment path
2025-04-18 12:41:56 +02:00
babeld
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
balena-etcher
profiles: add unconfined balena-etcher profile
2024-05-02 08:56:32 -03:00
bfdd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
bgpd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
bin.ping
profiles: Give all profiles read access to their attachment path
2025-04-18 12:41:56 +02:00
brave
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
buildah
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
busybox
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
cam
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
ch-checkns
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
ch-run
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
chrome
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
chromium
profiles: Add userns stub for Chromium and variants
2024-05-24 00:12:05 -04:00
code
profiles: update visual studio code so that it can be run from gnome
2024-02-24 20:27:13 -08:00
crun
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
devhelp
add more unconfined profiles
2024-02-06 15:10:20 -03:00
Discord
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
eigrpd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
element-desktop
add element-desktop unconfined profile
2024-02-20 12:38:26 +00:00
epiphany
add more unconfined profiles
2024-02-06 15:10:20 -03:00
evolution
add more unconfined profiles
2024-02-06 15:10:20 -03:00
fabricd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
firefox
profiles: adjust unconfined firefox profile to support mozilla.org download
2024-04-03 15:22:57 -07:00
flatpak
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
foliate
profiles: add unconfined foliate profile
2024-04-11 15:43:55 -07:00
fusermount3
profiles: expand set of flags allowed for fusermount3
2025-05-06 11:58:17 -07:00
geary
add unconfined profiles for geary, loupe and firefox dev versions
2024-03-15 17:44:23 -03:00
github-desktop
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
goldendict
profiles: Add more unconfined profiles
2024-03-17 00:16:37 -07:00
iotop-c
profiles: give iotop-c additional accesses
2025-05-07 10:21:58 -07:00
ipa_verify
profiles: replace the unconfined ipa_verify profile with a proper one
2025-04-09 15:39:14 -07:00
isisd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
kchmviewer
profiles: Add more unconfined profiles
2024-03-17 00:16:37 -07:00
keybase
add keybase unconfined profile
2024-02-02 16:53:58 -03:00
lc-compliance
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
ldpd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
libcamerify
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
linux-sandbox
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
loupe
add unconfined profiles for geary, loupe and firefox dev versions
2024-03-15 17:44:23 -03:00
lsb_release
Replace terminfo lines in profiles with the terminfo abstraction
2025-02-19 17:14:28 -08:00
lsblk
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
lxc-attach
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
lxc-create
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
lxc-destroy
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
lxc-execute
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
lxc-stop
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
lxc-unshare
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
lxc-usernsexec
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
mmdebstrap
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
MongoDB_Compass
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
msedge
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
nautilus
profiles: add nautilus unconfined profile
2024-02-29 08:21:25 -03:00
nhrpd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
notepadqq
profiles: Add more unconfined profiles
2024-03-17 00:16:37 -07:00
nvidia_modprobe
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
obsidian
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
opam
add more unconfined profiles
2024-02-06 15:10:20 -03:00
opera
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
ospf6d
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
ospfd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
pageedit
profiles: Add more unconfined profiles
2024-03-17 00:16:37 -07:00
pathd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
pbrd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
php-fpm
php-fpm: widen allowed socket paths
2024-11-05 20:03:11 +01:00
pim6d
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
pimd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
plasmashell
Revert "Merge profiles: fix QtWebEngineProcess multiarch path in plasmashell"
2025-04-21 12:11:21 -07:00
podman
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
polypane
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
privacybrowser
profiles: Add more unconfined profiles
2024-03-17 00:16:37 -07:00
proftpd
ProFTPD Profile
2025-05-12 14:27:27 +00:00
qcam
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
qmapshack
profiles: Add more unconfined profiles
2024-03-17 00:16:37 -07:00
QtWebEngineProcess
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
qutebrowser
profiles: Add more unconfined profiles
2024-03-17 00:16:37 -07:00
remmina
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
ripd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
ripngd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
rootlesskit
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
rpm
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
rssguard
profiles: Add more unconfined profiles
2024-03-17 00:16:37 -07:00
runc
profiles: runc: allow /usr/bin/runc as well as /usr/sbin/runc
2024-08-14 18:32:35 +09:00
rygel
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
samba-bgqd
Clean superfluous openssl abstraction includes
2024-03-12 14:54:01 +01:00
samba-dcerpcd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
samba-rpcd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
samba-rpcd-classic
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
samba-rpcd-spoolss
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
sbin.klogd
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
sbin.syslog-ng
Clean superfluous openssl abstraction includes
2024-03-12 14:54:01 +01:00
sbin.syslogd
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
sbuild
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-abort
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-adduser
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-apt
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-checkpackages
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-clean
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-createchroot
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-destroychroot
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-distupgrade
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-hold
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-shell
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-unhold
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-update
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
sbuild-upgrade
profiles: fix sbuild to work with the unprivileged_unshare profile
2025-02-19 16:05:57 -08:00
scide
profiles: Add more unconfined profiles
2024-03-17 00:16:37 -07:00
signal-desktop
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
slack
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
slirp4netns
profiles: slirp4netns: allow pivot_root
2024-08-14 17:29:13 +09:00
ssh-keyscan
profiles/apparmor.d: remove file access
2025-05-06 08:57:57 +10:00
staticd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
steam
add profiles for applications that create user namespaces
2024-02-02 10:51:06 -03:00
stress-ng
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
surfshark
add profiles for applications that create user namespaces
2024-02-02 10:51:06 -03:00
systemd-coredump
add profiles for applications that create user namespaces
2024-02-02 10:51:06 -03:00
tar
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
thunderbird
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
tinyproxy
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
tnftp
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
transmission
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
trinity
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
tshark
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
tup
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
tuxedo-control-center
profiles: add unconfined profile for tuxedo-control-center
2024-03-18 09:17:51 -03:00
unix-chkpwd
Allow pam_unix to execute unix_chkpwd
2024-03-13 23:13:19 +01:00
unprivileged_userns
unprivileged_userns profile: Allow full file system access
2025-04-11 09:02:49 +02:00
userbindmount
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
usr.bin.hwctl
profiles: add a profile for hwctl
2025-05-02 12:28:22 +02:00
usr.lib.apache2.mpm-prefork.apache2
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
usr.lib.dovecot.anvil
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.auth
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.config
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.deliver
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.dict
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.director
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.doveadm-server
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.dovecot-auth
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.dovecot-lda
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.imap
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.imap-login
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.lmtp
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.log
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.managesieve
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.managesieve-login
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.pop3
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.pop3-login
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.replicator
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.script-login
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.ssl-params
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.lib.dovecot.stats
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.sbin.apache2
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
usr.sbin.avahi-daemon
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
usr.sbin.dnsmasq
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
usr.sbin.dovecot
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
usr.sbin.identd
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
usr.sbin.mdnsd
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
usr.sbin.nmbd
profiles: add fixes for samba from issue #386
2024-04-22 23:46:44 +00:00
usr.sbin.nscd
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
usr.sbin.ntpd
Clean superfluous openssl abstraction includes
2024-03-12 14:54:01 +01:00
usr.sbin.smbd
smbd: allow capability chown
2024-12-09 20:45:42 +01:00
usr.sbin.smbldap-useradd
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
usr.sbin.traceroute
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
usr.sbin.winbindd
policy: update to use 4.0 abi
2023-06-30 23:36:12 -07:00
uwsgi-core
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
vdens
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
virtiofsd
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
vivaldi-bin
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
vpnns
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
vrrpd
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
wg
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
wg-quick
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
wike
profiles: fix wike profile location to apparmor.d
2024-05-02 08:56:32 -03:00
wpa_supplicant
Merge profiles: fix more wpa_supplicant denials
2025-05-08 08:47:05 +00:00
wpcom
profiles: convert local include to match profile name
2023-11-24 18:53:51 -08:00
Xorg
chore: fix vim modelines
2025-05-04 23:01:43 +09:00
zgrep
profiles: Give all profiles read access to their attachment path
2025-04-18 12:41:56 +02:00
znc
profiles: Give all profiles read access to their attachment path
2025-04-18 12:41:56 +02:00