apparmor-profiles:master

Last commit made on 2019-06-14
Get this branch:
git clone -b master https://git.launchpad.net/apparmor-profiles

Branch merges

Branch information

Name:
master
Repository:
lp:apparmor-profiles

Recent commits

c72edb0... by John Johansen <email address hidden> on 2019-06-14

Merge branch 'drg-mods-3' into 'master'

Remove lsb_release sub-profile in favor of new discrete profile

See merge request apparmor/apparmor-profiles!26

8a0b605... by John Johansen <email address hidden> on 2019-06-14

Merge branch 'totem-help' into 'master'

Totem: allow opening help from the application.

See merge request apparmor/apparmor-profiles!34

adb656c... by John Johansen <email address hidden> on 2019-06-13

Merge branch 'drg-mods-1' into 'master'

Did some testing with Chromium on Debian stable and unstable; the sandbox needed access to a few more basic libraries. With this change, the profile should be fully usable on Debian.

Also updated to use `@{pid}` and `@{tid}` properly. Sure would be nice if we had something like `@{pci}` to match `/sys/devices/pci*` entries. This profile currently uses

```
  /sys/devices/pci[0-9]*/
```

but the patched Ubuntu profile uses

```
  /sys/devices/pci[0-9a-f]*/
```

which better addresses the fact that the PCI numbers are hex, but feels like a half-solution at best.
Couple minor updates to the Chromium profile before cutting out lsb_release

PR: https://gitlab.com/apparmor/apparmor-profiles/merge_requests/23
Signed-off-by: John Johansen <email address hidden>

de14f85... by Steve Beattie on 2019-04-22

Ubuntu 19.10 (eoan) is open for development

Signed-off-by: Steve Beattie <email address hidden>

b2fabd3... by intrigeri on 2019-03-30

Totem: allow opening help from the application.

This change effectively allows Totem to run any executable that
gio-launch-desktop will happily launch, under the Totem profile.

As discussed for Evince on
https://salsa.debian.org/gnome-team/evince/merge_requests/1,
that's the best we can do at the moment.

Bug-Debian: https://bugs.debian.org/924703

1b55a06... by Daniel Richard G. on 2018-08-06

usr.bin.chromium-browser: use @{pid}/@{tid} instead of [0-9]*

2178d96... by Vincas Dargis on 2019-01-28

Merge branch 'thunderbird-revert-var' into 'master'

Thunderbird: Do not use variable in profile name

See merge request apparmor/apparmor-profiles!31

ad7be8b... by intrigeri on 2019-01-27

Merge branch 'totem-3.30' into 'master'

Update for Totem 3.30

See merge request apparmor/apparmor-profiles!33

242c6a8... by Vincas Dargis on 2019-01-27

Merge branch 'drop-obsolete-launchpad-integration' into 'master'

Empathy, Pidgin: stop including obsolete launchpad-integration abstraction.

See merge request apparmor/apparmor-profiles!29

7ace41b... by Vincas Dargis on 2018-11-12

Thunderbird: Do not use variable in profile name

Commit f5a5587e9262dc327cfb3f0036615cfd01a3bee8 introduced variable to
avoid duplication (and a bug) of the thunderbird executable path.

Use of variables in profile fileglob is not recommended practice, as it
might produce errors with AppArmor tools.

Revert variable usage in profile name until AppArmor tools have better
support for them.