Regression: session names #634

nobody43 · 2024-12-30T23:52:09Z

Particularly affects Debian.

Most of the rules have come from the integration tests.

Enable it manually in github action.

This allow for better integration for system when dbus is not confined.

Add the udbus variable to be used in `unix bind` rule for dbus.

* Add profile for iftop * iftop: clean up formatting

* Create abstraction for lxqt desktop group first file for the LXQT 2.0 desktop group * Update lxqt * xdg-desktop abstraction added * removing tabs * Create startlxqt starter file for LXQT Desktop * Create startlxqt * fixing startlxqt I use sddm as display manager I cant remove the other file - only use graphical env., sorry After startlxqt i would add 2 lines to sddm to enable the start of LXQT desktop * Delete apparmor.d/profiles-s-z/startlxqt * indented by 2 spaces (like other entries) * Update sddm Enable sddm to start an lxqt desktop session * Create lxqt-session lxqt-session to be started by startlxqt. Display manager: sddm * Update lxqt-session * Update lxqt-session * removed trailing whitespace * Update kscreen_backend_launcher to support lxqt desktop is needed for several complaints: DENIED kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r DENIED kscreen_backend_launcher open /usr/share/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r DENIED kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r DENIED kscreen_backend_launcher open /usr/share/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r * Update lxqt-session * Create lxqt-panel * Update lxqt-panel * Update lxqt-panel * Update lxqt-panel * fix conflicting x * Update lxqt-panel add child-open * remove include <abstractions/app-launcher-user> you think its too permissive to have app-launcher-user here, right? * Update lxqt-panel add needed programs * Update lxqt-panel turning back to layout of corresponding xfce file. * Create lxqt-globalkeysd * Create lxqt-about * Create lxqt-leave * Create lxqt-runner * Update lxqt-leave * Update lxqt-runner * Update lxqt-globalkeysd * remove video in lxqt-about * Update lxqt-about * Update lxqt-runner * remove abstr. in lxqt-globalkeysd * remove abstr. in lxqt-runner * remove abstr. in lxqt-leave

* add profile for swayimg * fix exec

…eedrestart.

* Create abstraction for lxqt desktop group first file for the LXQT 2.0 desktop group * Update lxqt * xdg-desktop abstraction added * removing tabs * Create startlxqt starter file for LXQT Desktop * Create startlxqt * fixing startlxqt I use sddm as display manager I cant remove the other file - only use graphical env., sorry After startlxqt i would add 2 lines to sddm to enable the start of LXQT desktop * Delete apparmor.d/profiles-s-z/startlxqt * indented by 2 spaces (like other entries) * Update sddm Enable sddm to start an lxqt desktop session * Create lxqt-session lxqt-session to be started by startlxqt. Display manager: sddm * Update lxqt-session * Update lxqt-session * removed trailing whitespace * Update kscreen_backend_launcher to support lxqt desktop is needed for several complaints: DENIED kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r DENIED kscreen_backend_launcher open /usr/share/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r DENIED kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r DENIED kscreen_backend_launcher open /usr/share/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r * Update lxqt-session * Create lxqt-panel * Update lxqt-panel * Update lxqt-panel * Update lxqt-panel * fix conflicting x * Update lxqt-panel add child-open * remove include <abstractions/app-launcher-user> you think its too permissive to have app-launcher-user here, right? * Update lxqt-panel add needed programs * Update lxqt-panel turning back to layout of corresponding xfce file. * Create lxqt-globalkeysd * Create lxqt-about * Create lxqt-leave * Create lxqt-runner * Update lxqt-leave * Update lxqt-runner * Update lxqt-globalkeysd * remove video in lxqt-about * Update lxqt-about * Update lxqt-runner * remove abstr. in lxqt-globalkeysd * remove abstr. in lxqt-runner * remove abstr. in lxqt-leave * Create lxqt-config-notificationd * Create lxqt-config-locale * Create lxqt-config-printer * Create lxqt-config-file-associations * Create lxqt-config-powermanagement * enable wayland-session for lxqt 2.1 startlxqtwayland for starting the session, support for labwc and kwin_wayland * Update lxqt-config-printer * Update lxqt-config-powermanagement * Update sddm * Update sddm * adapt pci-rules ok, havent seen this profile yet. I will change that in lxqt-powermanagement as well and check the other profiles * Update lxqt-config-powermanagement * Update lxqt-config-powermanagement * Update lxqt-config-powermanagement * Update lxqt-config-powermanagement

fix #628

fix #632

nobody43 added 6 commits November 18, 2024 23:14

Create profile_check.py

f1118cd

Update profile_check.py

46c5381

polishing

59d7980

Update profile_check.py

c9b1dde

Update profile_check.py

93085ec

fix exec_path bug, ignore skipable files

f75fa9a

nobody43 marked this pull request as draft December 30, 2024 23:52

roddhjav added 23 commits December 31, 2024 00:07

feat(profile): small profile update.

784fe5f

tests(integration): add more tests.

c6064a7

fix(test): minor fixes.

d40b112

feat(profile): update systemd profiles.

d85416e

feat(abs): cover more commonly attached path.

06dd90b

feat(profile): update some core profiles.

771673c

feat(profile): fractal uses bwrap for loading image.

245e26f

tests: add more integration tests for core tools.

9aca449

tests(ci): install integration tests requirements.

562fcc8

feat(profile): improve support for some profiles.

b30d077

Most of the rules have come from the integration tests.

feat(profile): add homectl.

469677e

fix(profile): linting issue.

93ade22

build(debian): disable make check by default on pkg build.

9ddfc9e

Enable it manually in github action.

feat(profile): small profile improvments.

72f75b9

feat(tunable): add p_dbus_* variables.

349ca76

This allow for better integration for system when dbus is not confined.

ci(github): set local tunable for github actions.

b36a980

fix(profile): ensure useradd can fully populate the skelleton.

c536794

fix(profile): minor fixes.

1467c2c

feat: profiles and integration tests improvments.

87f6c11

Add the udbus variable to be used in `unix bind` rule for dbus.

ci(github): restart some services to ensure they are confined.

a6225df

fix(profile): minor improvment to ensure tests passes.

57aa1b7

ci(github): split the final step in two.

d48ef02

fix: missing @{udbus} in unix bind.

7c96657

roddhjav and others added 28 commits December 31, 2024 00:07

fix(tunable): udbus can be any hex up to 16.

17fe134

fix(integration): disable needrestart test due to upstream issue.

64b8cf4

feat(abs): add abstraction/webkit.

1ad6091

feat(profile): add profile for tecla.

2f70940

feat(profile): general update.

9e791de

feat(tunable): unify some XDG and user dirs varibale name.

c7955ca

Add profile for iftop (#604)

0b1c265

* Add profile for iftop * iftop: clean up formatting

add profile for swayimg (#612)

4ba9706

* add profile for swayimg * fix exec

Fix typo

c936bd5

feat(profile): improve some core profiles.

415efb4

feat(profile): needrestart improve mqueue rule.

5fffc95

fix: apparmor parser inside snap.

85236a5

feat: improve dbus integration for chsh, better handling of generic n…

929bcaa

…eedrestart.

feat(profile): minor update.

8944954

fix(profile): snap integration with dbus.

72733d3

fix(profile): cron communication with dbus.

13cf860

fix(profile): snapd

d243a4a

Add wttrbar

0f5f631

feat(profile): firefox: restric access to /tmp

ea507d6

feat(profile): firefox: better naming of possible attachment.

ef13380

non-owner accesses authorized_keys

dda98be

fix(profile): sensors: simplify hwmon access.

a7e570a

fix #628

systemd user ask-password

24938f6

fix(profile): pacman-hook-systemd: add systemd-tty-ask-password-agent.

915d7e8

fix #632

feat(profile): various improvements and update.

ab5eaaa

regression: session names

d0b5e2e

nobody43 force-pushed the session_names branch from 5e546c3 to d0b5e2e Compare December 31, 2024 00:09

nobody43 closed this by deleting the head repository Dec 31, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Regression: session names #634

Regression: session names #634

nobody43 commented Dec 30, 2024

Regression: session names #634

Regression: session names #634

Conversation

nobody43 commented Dec 30, 2024