File apparmor-profiles-nordisch.changes of Package apparmor-profiles-nordisch
-------------------------------------------------------------------
Wed Oct 26 02:16:39 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- chromium: crash handler fixes
- evolution: gnome 43 fixes
- keepassxc-proxy: update for newer version
-------------------------------------------------------------------
Fri Sep 9 11:32:20 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- signal-desktop: allow /usr/libexec as well
-------------------------------------------------------------------
Fri Aug 19 21:22:47 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- matrix: fixes from production
-------------------------------------------------------------------
Wed Aug 17 10:26:51 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- abstractions/chromium-common: fix websub
-------------------------------------------------------------------
Sat Jun 11 22:22:00 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- abstractions/electron: new path for the compiled .node files
-------------------------------------------------------------------
Tue Apr 26 19:06:16 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- abstractions/electron: fix signal
-------------------------------------------------------------------
Sat Feb 26 17:50:34 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- abstraction/chromium: fixes for pipewire and nvidia
-------------------------------------------------------------------
Thu Feb 24 23:08:47 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- discourse nginx: fixes from the production host
-------------------------------------------------------------------
Thu Feb 24 18:25:24 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- added /etc/apparmor.d/abstractions/nextcloud to the nextcloud
profile
- matrix: handle more binaries
- tmate: do not load openssh keys
-------------------------------------------------------------------
Mon Feb 21 11:44:41 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- browsers: allow vulkan
-------------------------------------------------------------------
Mon Dec 6 21:41:20 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- fixes for discourse and php apps
-------------------------------------------------------------------
Sun Oct 31 13:06:13 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- chromium: make them work on intel igpus and amd gpus
-------------------------------------------------------------------
Tue Oct 12 11:40:49 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- browsers: cleanups and refactoring
- wine-lutris: small fixes
-------------------------------------------------------------------
Wed Sep 29 18:55:19 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- browsers: handle new crashpad handler name
- wine-lutris: 6.18 fixes
- signal-desktop: initial profile for the package in
network:im:signal
-------------------------------------------------------------------
Mon Sep 20 23:34:31 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- browsers: redesign the browser profile style
- evolution: gnome 41 fixes
- claws-mail: gtk3 fixes
-------------------------------------------------------------------
Fri Aug 20 18:00:38 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- vivaldi-snapshot: fix path to wrapper script
-------------------------------------------------------------------
Thu Aug 19 08:03:09 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- profiles for chromium based apps modernized
-------------------------------------------------------------------
Mon Jul 12 12:49:41 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- claws-mail: fix profile for 3.18
-------------------------------------------------------------------
Thu Jun 17 10:05:36 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- move to packaging-apparmor helper instead of local ruby scripts
so we can share them with other packages
-------------------------------------------------------------------
Sat May 29 16:19:32 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- ejabberd: fix profile for tumbleweed
- tt-rss: it tries to do some weird tmp files /dev/null*.tmp
deny that.
-------------------------------------------------------------------
Sat May 29 13:45:44 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- php-fpm: on TW no longer include /etc/apparmor.d/php-fpm
-------------------------------------------------------------------
Fri May 28 23:44:15 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- discourse: fixes for 2.7
-------------------------------------------------------------------
Fri May 28 21:20:41 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- nextcloud: allow listing the tmp dir and locking for all config
files
- dino: first round of fixes to support video chat
-------------------------------------------------------------------
Thu May 20 09:14:58 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- evolution: webkit network process actually needs network for
oauth2
-------------------------------------------------------------------
Tue Apr 13 17:31:37 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- discourse: allow git config
-------------------------------------------------------------------
Tue Apr 13 17:12:29 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- discourse: allow timeout utility
- chromium: allow creation of config directories
-------------------------------------------------------------------
Fri Apr 2 08:25:57 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- evolution: remove unused include
-------------------------------------------------------------------
Fri Apr 2 08:19:50 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- fix requires:
- make sure all our packages pull our abstractions package to
pull our cryptopolicies fix.
- the apparmor dependency should not be on the main package but
on the abstraction package.
-------------------------------------------------------------------
Fri Apr 2 08:12:43 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- move cryptopolicies handling into a drop in for the base
abstraction
-------------------------------------------------------------------
Fri Apr 2 07:57:05 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- evolution: allow cryptopolicies and update for gnome40
allow ntlm_auth (via subprofile for bash)
- dino: allow cryptopolicies
- chromium common: abstractions allow cryptopolicies
-------------------------------------------------------------------
Fri Feb 5 13:42:03 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- ejabberdctl: fixes for 21.01
- multiple chromium based app fixes
-------------------------------------------------------------------
Fri Dec 4 12:57:23 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- php-fpm/nextcloud: fix sending emails
-------------------------------------------------------------------
Sat Nov 21 05:52:57 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- evolution: update permissions for update
-------------------------------------------------------------------
Tue Nov 17 17:04:09 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- all: extend abi cleanup script to all fix @{run}
- php-fpm: allow my socket path
-------------------------------------------------------------------
Tue Nov 17 14:57:35 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- teams: fixes from rudi
-------------------------------------------------------------------
Mon Nov 16 19:30:33 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- php-fpm: merge with upstream
-------------------------------------------------------------------
Mon Nov 16 18:49:47 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- teams: deny writing autostart file
-------------------------------------------------------------------
Mon Nov 16 18:46:55 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- teams: mostly working on TW.
-------------------------------------------------------------------
Mon Nov 16 18:21:52 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- teams: fix config dir
-------------------------------------------------------------------
Mon Nov 16 17:04:48 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- vivaldi*: fix typo in local include
- add basic teams profile
-------------------------------------------------------------------
Mon Oct 26 23:18:33 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- all: move to the non comment include syntax
-------------------------------------------------------------------
Mon Oct 26 22:41:39 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- prepare apparmor 3.0.0 support:
- each profile loads the 3.0 ABI
- we patch out the ABI statement for older apparmor versions to
stay without warnings on those
-------------------------------------------------------------------
Sat Oct 24 22:29:40 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- evolution: finally a working version for gnome 3.38
-------------------------------------------------------------------
Sat Oct 24 19:39:27 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- vscode: update for newer version
- evolution: more work for evolution from gnome 3.38
-------------------------------------------------------------------
Sat Oct 24 01:49:39 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- fixes for audit log entries
-------------------------------------------------------------------
Sat Oct 24 00:29:53 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- use short profile names for everything and parse the local
includes from the files and package them only as ghosts
-------------------------------------------------------------------
Fri Oct 23 18:29:11 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- evolution: more fixes
-------------------------------------------------------------------
Fri Oct 23 18:07:03 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- evolution: libexec fixes and refactoring
-------------------------------------------------------------------
Mon Oct 5 20:50:10 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- nginx: also allow dac_read_search
-------------------------------------------------------------------
Mon Oct 5 20:42:25 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- ejabberd: add pgrep as needed binary
-------------------------------------------------------------------
Mon Oct 5 20:38:24 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- add tmate-ssh-server profile
-------------------------------------------------------------------
Wed Sep 23 16:03:25 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- php-fpm/roundcube: tmp dir is listed by the code
-------------------------------------------------------------------
Mon Aug 31 18:46:34 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- php-fpm/roundcube: follow up to the config changes in the package
-------------------------------------------------------------------
Sun Aug 30 20:49:06 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- php-fpm: use correct syntax for change_profile
-------------------------------------------------------------------
Sun Aug 30 19:29:03 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- 2 more paths need to be writable for tt-rss
-------------------------------------------------------------------
Sun Aug 30 19:19:39 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- move tt-rss and roundcubemail profiles here
-------------------------------------------------------------------
Sun Aug 30 18:19:40 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- add the include directories to have owners for subpackages
- cleanup pixelfed
-------------------------------------------------------------------
Sun Aug 30 17:48:27 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- allow admin and package include dirs
-------------------------------------------------------------------
Sun Aug 30 17:20:38 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- include optional directory in the apparmor profile so
plugins for the php app can provide apparmor snippets to load
into the pool profile
-------------------------------------------------------------------
Sat Aug 29 15:26:54 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- php-fpm: handle pid file
-------------------------------------------------------------------
Fri Aug 28 21:38:14 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- irssi: remove duplicated rules in the irssi profile
- put php-fpm into enforce mode as it should have been
-------------------------------------------------------------------
Thu Aug 13 12:39:48 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- fix php-fpm socket path now that our distro package ships with a
tmpfiles.d file
-------------------------------------------------------------------
Sat May 23 23:44:08 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- update vivaldi profile
- add forked-daapd profile
-------------------------------------------------------------------
Thu May 7 23:48:04 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- fix widevine in vivaldi-snapshot
-------------------------------------------------------------------
Wed Apr 22 20:07:02 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- fix binary path in vscodium
-------------------------------------------------------------------
Mon Apr 20 19:01:46 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- initial vscodium profile
-------------------------------------------------------------------
Mon Apr 20 18:44:16 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- more kde fixes
-------------------------------------------------------------------
Mon Apr 20 14:18:42 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- more 15.1 fixes
-------------------------------------------------------------------
Mon Apr 20 14:03:17 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- support /bin/bash
-------------------------------------------------------------------
Mon Apr 20 10:00:15 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- add profile for visual studio code
- add more code15 plasma fixes
-------------------------------------------------------------------
Sun Apr 19 18:56:09 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- fix typo in vivaldi profile
-------------------------------------------------------------------
Sun Apr 19 18:29:11 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- 1 more refactor for chromium browsers
-------------------------------------------------------------------
Sun Apr 19 18:12:36 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- refactor all the chromium based profiles
-------------------------------------------------------------------
Tue Apr 14 16:27:17 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- drop profile that is moved to the tt-rss package
-------------------------------------------------------------------
Tue Apr 14 16:04:30 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- name resolution fixes
-------------------------------------------------------------------
Tue Apr 14 13:34:56 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- add chromium profile
-------------------------------------------------------------------
Tue Apr 14 10:46:09 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- fix nacl_helper in the chrome profile
-------------------------------------------------------------------
Tue Apr 14 01:00:43 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- add pgbouncer
-------------------------------------------------------------------
Mon Apr 13 23:26:18 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- fixes from tengu
-------------------------------------------------------------------
Mon Apr 13 21:22:28 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- add missing local includes
-------------------------------------------------------------------
Mon Apr 13 20:27:50 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- add some desktop profiles
- name profiles
-------------------------------------------------------------------
Mon Jan 27 15:02:37 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- properly use imagemagick abstraction
-------------------------------------------------------------------
Mon Jan 27 14:43:42 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- more fixes merged back from production systems
-------------------------------------------------------------------
Wed Sep 11 23:21:22 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- matrix log directory handling
-------------------------------------------------------------------
Wed Sep 11 01:18:12 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- forgot override file matrix-synapse
-------------------------------------------------------------------
Wed Sep 11 00:58:45 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- add fix for gitlab and matrix base profile
-------------------------------------------------------------------
Tue Jun 18 15:23:07 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- allow nextcloud to read the session dir
-------------------------------------------------------------------
Thu May 23 18:57:26 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- also enforce apparmor for gitlab-ce-puma
-------------------------------------------------------------------
Thu May 23 17:30:30 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- allow puma for gitlab and fix code duplication in the rails-app
abstraction
-------------------------------------------------------------------
Thu May 16 17:57:01 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- pnquant support for discourse
-------------------------------------------------------------------
Mon May 13 16:27:27 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- fix permissions for gitlab's audit log
-------------------------------------------------------------------
Sat May 4 21:44:28 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- import fix from pixls for discourse
-------------------------------------------------------------------
Mon Apr 29 15:54:31 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- dont ship nextcloud-cron yet
-------------------------------------------------------------------
Fri Apr 26 18:49:47 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- split out nginx
-------------------------------------------------------------------
Fri Apr 26 17:16:09 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- initial package
