File packages.yaml of Package smar-apparmor-profiles

Overview Repositories Revisions Requests Users Attributes Meta

File packages.yaml of Package smar-apparmor-profiles (Revision c1d23364be77afbe51aeba3c0d9b69d7)

Currently displaying revision c1d23364be77afbe51aeba3c0d9b69d7 , Show latest

# apparmor folder

- name: "apparmor-parser"
  abstractions:
    - kde
  in_directory:
    "security/apparmor":
      local:
        - "apparmor_parser"
      files:
        - "apparmor_parser"
    "suse":
      local:
        - "lib.apparmor.apparmor.systemd"
      files:
        - "lib.apparmor.apparmor.systemd"

- name: "apparmor-utils"
  abstractions:
    - kde
  requires:
    - "apparmor-parser"
  in_directory:
    "security/apparmor":
      files:
        - "aa-autodep"
        - "aa-logprof"
        - "aa-remove-unknown"
        - "aa-status"
        - "aa-unconfined"

- name: "aucolor"
  in_directory:
    "security/apparmor":
      files:
        - "aucolor"

- name: "audit"
  in_directory:
    "security/apparmor":
      files:
        - "ausearch"
    "system":
      files:
        - "auditd"

# qt folder

- name: "libqt5-linguist"
  in_directory:
    "qt":
      files:
        - "lrelease"
        - "lupdate"

- name: "libqt5-qdbus"
  abstractions:
    - kde
  in_directory:
    "qt":
      files:
        - "qdbus"

- name: "libqt5-qtbase-common-devel"
  in_directory:
    "qt":
      files:
        - "moc"
        - "qmake"
        - "rcc"
        - "uic"

- name: "libqt5-qtwebengine"
  in_directory:
    "qt":
      files:
        - "qt5.QtWebEngineProcess"

- name: "nheko"
  in_directory:
    "qt":
      files:
        - "nheko"

- name: "sddm"
  in_directory:
    "qt":
      files:
        - "sddm"

# security folder

- name: "certbot"
  in_directory:
    "security":
      files:
        - "certbot"

- name: "openconnect"
  files:
    - "security/openconnect"
    - "security/openconnect.vpnc-script"

- name: "wireguard-tools"
  load_profile_by_systemd:
    "wg-quick@": wg-quick
  files:
    - "security/wg-quick"

- name: "wireshark"
  recommends:
    - MozillaFirefox
    - drkonqi
    - kinit
  abstractions:
    - kde
  files:
    - "security/wireshark/usr.bin.dumpcap"
    - "security/wireshark/usr.bin.wireshark"

- name: "gpg2"
  abstractions:
    - sddm
  requires:
    - common
  in_directory:
    "security/gnupg":
      local:
        - "gpg2"
        - "gpg-agent"
        - "scdaemon"
      files:
        - "dirmngr"
        - "gpg2"
        - "gpg-agent"
        - "gpg-connect-agent"
        - "gpgconf"
        - "gpgsm"
        - "scdaemon"

- name: "sssd"
  in_directory:
    "security/authentication":
      included_tunables:
        - "sssd"
      files:
        - "sssd"

# libreoffice folder

- name: "libreoffice"
  requires:
    - kde-cli-tools5
  abstractions:
    - sddm
    - kde
  local:
    - "libreoffice-soffice.bin"
  in_directory:
    "desktop/office/libreoffice":
      files:
        - "libreoffice-share-linker"
        - "libreoffice.program.javaldx"
        - "libreoffice.program.oosplash"
        - "libreoffice.program.soffice"
        - "libreoffice.program.soffice.bin"

# desktop folder

- name: "libqt5-qttools"
  in_directory:
    "desktop/qt":
      files:
        - "qt-designer"

- name: "gmenudbusmenuproxy"
  in_directory:
    "desktop":
      files:
        - "gmenudbusmenuproxy"

- name: "ibus"
  in_directory:
    "desktop/ime":
      files:
        - "ibus-autostart"
        - "ibus-daemon"
        - "ibus-setup"

- name: "mozc"
  in_directory:
    "desktop/ime":
      files:
        - "mozc.mozc_server"
        - "mozc.mozc_tool"

- name: "Mesa-demo-x"
  files:
    - "desktop/mesa/mesa-demos.xdemos.glxinfo"

- name: "shared-mime-info"
  in_directory:
    "desktop":
      files:
        - "update-mime-database"

# productivity folder

- name: "kiwix-desktop"
  included_tunables:
    - "kiwix"
  in_directory:
    "productivity/readers":
      files:
        - "kiwix-desktop"

- name: "zeal"
  in_directory:
    "productivity/readers":
      files:
        - "zeal"

# gtk folder

# NOTE: This profile can also be used with gtk2-tools, but I have no way to automatically install this package there.
- name: "gtk3-tools"
  in_directory:
    "desktop/gtk":
      files:
        - "gtk-query-immodules"
        - "gtk-update-icon-cache"

# xorg folder

- name: "openrazer-daemon"
  abstractions:
    - systemd
  files:
    - "desktop/xorg/openrazer-daemon"

- name: "setxkbmap"
  abstractions:
    - sddm
  files:
    - "desktop/xorg/setxkbmap"

- name: "xdg-desktop-portal"
  load_profile_by_systemd:
    user:
      xdg-document-portal: lib.xdg-document-portal
  files:
    - "desktop/xorg/xdg/lib.xdg-desktop-portal"
    - "desktop/xorg/xdg/lib.xdg-desktop-portal-gtk"
    - "desktop/xorg/xdg/lib.xdg-document-portal"

- name: "xdg-desktop-portal-kde"
  abstractions:
    - kde
  files:
    - "desktop/xorg/xdg/libexec.xdg-desktop-portal-kde"

- name: "xdg-user-dirs"
  abstractions:
    - sddm
  files:
    - "desktop/xorg/xdg/xdg-user-dirs-update"

- name: "xdg-utils"
  requires:
    - kde-cli-tools5
  abstractions:
    - sddm
  local:
    - "usr.bin.xdg-open"
  files:
    - "desktop/xorg/xdg/xdg-mime"
    - "desktop/xorg/xdg/xdg-open"
    - "desktop/xorg/xdg/xdg-settings"

- name: "xdm"
  requires:
    - openssh # For ssh-agent
    - gpg2 # For gpg-agent
  abstractions:
    - sddm
  recommends:
    - ibus
    - systemd
  in_directory:
    "desktop/xorg":
      files:
        - "etc.X11.xdm.sys.xsession"
        - "etc.X11.xdm.Xsession"
        - "etc.X11.xdm.Xsetup"

- name: "xfs"
  in_directory:
    "desktop/xorg":
      files:
        - "xfs"

- name: "xinit"
  requires:
    - plasma5-workspace # for startkde
  files:
    - "desktop/xorg/etc.X11.xinit.xinitrc"

- name: "xorg-x11-server"
  in_directory:
    "desktop/xorg":
      local:
        - "Xorg"
      files:
        - "Xorg"

- name: "xorg-x11-server-wayland"
  in_directory:
    "desktop/xorg":
      files:
        - "Xwayland"

- name: "xrdb"
  in_directory:
    "desktop/xorg":
      files:
        - "xrdb"

- name: "xsetroot"
  in_directory:
    "desktop/xorg":
      files:
        - "xsetroot"

- name: "xsettingsd"
  files:
    - "desktop/xorg/xsettingsd"

# keepass folder

- name: "keepassxc"
  local:
    - "usr.bin.keepassxc"
  files:
    - "security/keepass/keepassxc"
    - "security/keepass/keepassxc-proxy"

# ssh folder + pam folder

- name: "openssh"
  requires:
    - gpg2 # ssh-agent invokes gpg-agent with Px.
  suggests:
    - xinit # ssh-agent also seems to invoke /etc/X11/xinit/xinitrc, when launching Xorg.
  abstractions:
    - sddm
  extra_directories:
    - "pam"
    - "pam/abstractions"
  extra_files:
    ssh:
      - "pam/mappings"
      - "pam/abstractions/confined_user"
      - "pam/abstractions/unconfined_user"
      - "pam/abstractions/default_user"
      - "pam/abstractions/user_base"
  in_directory:
    "security/ssh":
      tunables:
        - "ssh"
      files:
        - "ssh"
        - "ssh-agent"
        - "ssh.sftp-server"
        - "sshd"
      local:
        - "sshd"

- name: "mosh"
  files:
    - "security/ssh/mosh-client"

# git folder

- name: "git-core"
  requires:
    - gettext-runtime
  abstractions:
    - less
  included_abstractions:
    - "git"
  included_tunables:
    - "git"
  local:
    - "git"
  in_directory:
    "programming/git":
      files:
        - "git"
        - "git-credential-store"
        - "git-mergetool"
        - "git-remote-http"

- name: "git-svn"
  in_directory:
    "programming/git":
      files:
        - "git-svn"

# kerberos folder

- name: "krb5-client"
  files:
    - "security/kerberos/kadmin"
    - "security/kerberos/kinit"

# suse folder

- name: "aaa_base"
  requires:
    - systemd
  files:
    - "suse/usr.sbin.service"

- name: "desktop-file-utils"
  files:
    - "desktop/update-desktop-database"
    - "suse/suse-update-mime-defaults"

- name: "fonts-config"
  recommends:
    - xfs
  in_directory:
    "suse/zypper":
      files:
        - "fonts-config"

- name: "libzypp-plugin-appdata"
  requires:
    - appstream-glib
  files:
    - "suse/zypper/plugins.appdata.InstallAppdata"
    - "suse/zypper/libzypp.AsHelper"

- name: "permissions"
  in_directory:
    "suse":
      files:
        - "chkstat"

- name: "permissions-zypp-plugin"
  in_directory:
    "suse/zypper":
      files:
        - "plugins.commit.permissions.py"

- name: "snapper"
  in_directory:
    "suse":
      files:
        - "snapper"
        - "snapperd"

- name: "snapper-zypp-plugin"
  files:
    - "suse/zypper/plugins.commit.snapper.py"
    - "suse/zypper/plugins.commit.snapper-zypp-plugin"

- name: "supportutils"
  in_directory:
    "suse":
      files:
        - "supportconfig"

- name: "suse-module-tools"
  requires:
    - dracut # for mkinitrd
  in_directory:
    "suse/kernel":
      files:
        - "module-init-tools.regenerate-initrd-posttrans"
        - "module-init-tools.kernel-scriptlets.cert-script"
        - "module-init-tools.kernel-scriptlets.inkmp-script"
        - "module-init-tools.kernel-scriptlets.kmp-script"
        - "module-init-tools.kernel-scriptlets.rpm-script"
        - "module-init-tools.weak-modules2"

- name: "update-alternatives"
  files:
    - "suse/update-alternatives"

- name: "yast2"
  requires:
    - aaa_base
    - yast2-control-center
    - yast2-ruby-bindings
  in_directory:
    "suse":
      files:
        - "yast2"
    "suse/yast":
      files:
        - "yast.online_update"

- name: "yast2-control-center"
  files:
    - "suse/yast.y2controlcenter"

- name: "yast2-ruby-bindings"
  abstractions:
    - ruby
  requires:
    - systemd
    - desktop-file-utils
    - btrfsprogs
    # This could depend on yast2, but it would cause unnecessary circular dependency.
    - libzypp-plugin-appdata
    - snapper-zypp-plugin
  files:
    - "suse/yast.y2start"

- name: "zypper"
  abstractions:
    - systemd
  requires:
    - btrfsmaintenance
    - libzypp-plugin-appdata
    - rpm
    - snapper-zypp-plugin
  recommends:
    - dracut
    # TODO: libreoffice recommend should be a suggestion instead.
    - libreoffice
  files:
    - "suse/zypper/zypper"

- name: "libzypp"
  in_directory:
    "suse/zypper":
      files:
        - "zypp-NameReqPrv"

# media folder

- name: "ffmpeg"
  files:
    - "media/ffmpeg"
    - "media/ffprobe"

- name: "mpv"
  in_directory:
    "media":
      files:
        - "mpv"
      local:
        - "mpv"

- name: "youtube-dl"
  files:
    - "media/youtube-dl"

- name: "yt-dlp"
  files:
    - "media/yt-dlp"

- name: "vlc-noX"
  in_directory:
    "media":
      files:
        - "vlc.vlc-cache-gen"

# No folder

- name: "chromium"
  files:
    - "browsers/chromium"

- name: "MozillaFirefox"
  abstractions:
    - sddm
  suggests:
    - kmozillahelper
    - plasma-browser-integration
  local:
    - "usr.bin.firefox"
  files:
    - "browsers/firefox"
    - "browsers/firefox.sh"

# hardware folder

- name: "cups"
  files:
    - "hardware/cupsd"

- name: "fwupd"
  files:
    - "hardware/fwupd"

- name: "kbd"
  in_directory:
    "hardware/keyboard":
      files:
        - "dumpkeys"
        - "loadkeys"

- name: "kmod"
  files:
    - "hardware/kmod"

- name: "ModemManager"
  files:
    - "hardware/ModemManager"

- name: "suse-prime-bbswitch"
  in_directory:
    "hardware/video":
      files:
        - "prime-select"

- name: "udev"
  in_directory:
    "hardware/udev":
      files:
        - "udevadm"
      extra_files:
        - "lib/udevadm"
      extra_directories:
        - "lib/udevadm.d/"

- name: "x11-video-nvidiaG05"
  in_directory:
    "hardware/video":
      files:
        - "nvidia-sleep.sh"
        - "systemd.system-sleep.nvidia"

# server folder

- name: "apt-cacher-ng"
  files:
    - "server/apt-cacher-ng"

- name: "memcached"
  files:
    - "server/memcached"

- name: "mysql-client"
  provides:
    - "mariadb-client"
  in_directory:
    "server/mysql":
      files:
        - "mysqladmin"

- name: "mysql-server"
  provides:
    - "mariadb-server"
  in_directory:
    "server/mysql":
      files:
        - "mysqld"
      extra_files:
        - "lib/mariadb-install-db"

- name: "nginx"
  in_directory:
    "server":
      files:
        - "nginx"
      extra_directories:
        - "lib/logrotate.d"
      extra_files:
        - "lib/logrotate.d/nginx"

- name: "oidentd"
  files:
    - "server/oidentd"

- name: "redis"
  files:
    - "server/redis-server"

- name: "rspamd"
  in_directory:
    "server/mail/rspamd":
      files:
        # rspamd package has actual rspamd profile.
        - "learn-ham.rspamd.script"
        - "learn-spam.rspamd.script"
        - "rspamc"

- name: "samba"
  files:
    - "server/samba/nmbd"
    - "server/samba/smbd"

- name: "spamassassin"
  files:
    - "server/spamassassin.spamc"
    - "server/spamassassin.spamd"

- name: "sphinx"
  files:
    - "server/searchd"

- name: "squid"
  files:
    - "server/web/squid"

# packaging folder

# Can’t be enabled until “no new privs” override support is available:
# https://bugs.launchpad.net/apparmor/+bug/1908448/comments/2
#- name: "flatpak"
#  files:
#    - "packaging/flatpak/flatpak"
#    - "packaging/flatpak/flatpak.nheko"

- name: "dpkg"
  in_directory:
    "packaging/deb":
      files:
        - "dpkg-architecture"

- name: "polkit"
  in_directory:
    "packaging/polkit":
      files:
        - "polkit-agent-helper-1"

- name: "nodejs"
  in_directory:
    "packaging/node":
      files:
        - "node"

- name: "yarn"
  in_directory:
    "packaging/node":
      files:
        - "yarn"

# obs folder

- name: "build"
  in_directory:
    "packaging/obs":
      files:
        - "obs-build.build"
        - "obs-build.queryconfig"
        - "obs-build.runservices"
        - "obs-build.vc"
      extra_files:
        - "lib/obs_build_common"

- name: "obs-server"
  in_directory:
    "packaging/obs":
      files:
        - "obs.bs_repserver"
        - "obs.bs_service"
        - "obs.bs_srcserver"
        - "obs.cleanup_scm_cache"
    "system/cron":
      extra_files:
        - "cronie.d/obs.cleanup_scm_cache"

- name: "obs-service-format_spec_file"
  in_directory:
    "packaging/obs":
      files:
        - "obs.service.format_spec_file"

- name: "obs-service-recompress"
  files:
    - "packaging/obs/obs.service.recompress"

- name: "obs-service-set_version"
  files:
    - "packaging/obs/obs.service.set_version"

- name: "obs-service-source_validator"
  in_directory:
    "packaging/obs":
      files:
        - "obs.service.source_validator"

- name: "obs-service-tar_scm"
  recommends:
    - git-core
  files:
    - "packaging/obs/obs.service.tar_scm"

- name: "obs-utils"
  requires:
    - osc
  in_directory:
    "packaging/obs":
      files:
        - "obs_project_update"

- name: "obs-worker"
  load_profile_by_systemd:
    obsworker: obsworker
  namespaces:
    - "bs_worker"
  in_directory:
    "packaging/obs":
      files:
        - "obsworker"
      extra_files:
        - "extra/bs_worker"

- name: "osc"
  requires:
    - build
  abstractions:
    - less
  suggests:
    - git-core
  in_directory:
    "packaging/obs":
      local:
        - "osc-wrapper"
      files:
        - "osc-wrapper"

- name: "rpm"
  included_abstractions:
    - "read-only-rpm"
  namespaces:
    - "rpm-scriptlets"
    - "rpm-scriptlets.d"
  in_directory:
    "packaging/rpm":
      files:
        - "rpm"

# gnome folder

- name: "gconf2"
  in_directory:
    "desktop/gnome":
      files:
        - "gconf.gconfd-2"
    "system/glib":
      files:
        - "gsettings-data-convert"

- name: "gcr-prompter"
  files:
    - "desktop/gnome/usr.lib.gcr-prompter"

- name: "gnome-online-accounts"
  in_directory:
    "desktop/gnome":
      files:
        - "goa-daemon"

- name: "gvfs"
  files:
    - "desktop/gnome/usr.lib.gvfs.gvfsd"
    - "desktop/gnome/usr.lib.gvfs.gvfsd-metadata"

# audio folder

- name: "pipewire"
  load_profile_by_systemd:
    user:
      "pipewire-media-session": "pipewire-media-session"
  in_directory:
    "hardware/audio":
      files:
        - "pipewire"
        - "pipewire-media-session"

- name: "pulseaudio"
  load_profile_by_systemd:
    user:
      pulseaudio: pulseaudio
  in_directory:
    "hardware/audio":
      files:
        - "pulseaudio"
        - "pulse.gconf-helper"

- name: "pulseaudio-module-x11"
  in_directory:
    "hardware/audio":
      files:
        - "start-pulseaudio-x11"

- name: "pulseaudio-utils"
  in_directory:
    "hardware/audio":
      files:
        - "pacmd"
        - "pactl"

# kate: indent-width 2

Places

File packages.yaml of Package smar-apparmor-profiles (Revision c1d23364be77afbe51aeba3c0d9b69d7)

Places