Update and re-shuffle the existing parts of the apparmor.md guide
to merge the old guide with the new guide:
 - Update summary with new ref links.
 - Reused a few sections but rephrased and updated references.
 - Removed a few, no longer needed, sections.
 - Fix minor formatting

Signed-off-by: Andreas Elvstam Cantner <andreas.elvstam@se.bosch.com>

Rewrite introduction to reflect the newly updated guide on AppArmor and
profile development. Briefly mention that DAC and capabilities are not
considered in the guide but considered prerequisites.

Signed-off-by: Andreas Elvstam Cantner <andreas.elvstam@se.bosch.com>

Apply 2 suggestion(s) to 1 file(s)

Summary of content:
 - Introduction to mount rules in AppArmor
 - Short explanation of correlation between CAP_SYS_ADMIN and mount
 - 2 examples for profiles that allow mount operations.

Signed-off-by: Andreas Elvstam Cantner <andreas.elvstam@se.bosch.com>

Jasarevic Samir authored 3 years ago and Elvstam Cantner Andreas committed 3 years ago

Signed-off-by: Samir Jasarevic <samir.jasarevic@se.bosch.com>

Signed-off-by: Samir Jasarevic <samir.jasarevic@se.bosch.com>

Jasarevic Samir authored 3 years ago and Elvstam Cantner Andreas committed 3 years ago

MAC-DAC-example.png figure added to the AppArmor guideline.

Signed-of-by:  <samir.jasarevic@se.bosch.com>

Introduction to file access in AppArmor.
An example of MAC and DAC file access permissions is shown.

Signed-off-by:  <samir.jasarevic@se.bosch.com>

Apply 4 suggestion(s) to 1 file(s)

Apply 1 suggestion(s) to 1 file(s)

Apply 1 suggestion(s) to 1 file(s)

Apply 2 suggestion(s) to 1 file(s)

Updated file access based on the review comments.

Signed-off-by:  <samir.jasarevic@se.bosch.com>

Update file access with 4 spaces for code

Signed-off-by:  <samir.jasarevic@se.bosch.com>

Elvstam Cantner Andreas authored 3 years ago and Elvstam Cantner Andreas committed 3 years ago

The current guideline on AppArmor covers basic overview and breifly mentions development
steps needed. This commit extends the AppArmor guideline with more in-depth development
steps and examples for how to developt AppArmor profiles.

Sections included:
Profile Introduction
 - Profile Modes
 - System Logs
Profile Development
 - Manually Write The Profile
 - Tool Aided Profile Development

Signed-off-by: Andreas Elvstam Cantner <andreas.elvstam@se.bosch.com>

Jasarevic Samir authored 3 years ago and Elvstam Cantner Andreas committed 3 years ago

Signed-of-by:  <samir.jasarevic@se.bosch.com>

Signed-off-by: Frédéric Danis <frederic.danis@collabora.com>

Signed-off-by: Ariel D'Alessandro <ariel.dalessandro@collabora.com>

Walter Lozano authored 3 years ago and Emanuele Aina committed 3 years ago

Since when using OSTree folder /home is writable and preserved across
updates clarify this to avoid misunderstandings and to be consistent
with the rest of the document.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Walter Lozano authored 3 years ago and Emanuele Aina committed 3 years ago

In order to clarify that the principles describe in preferences and
persistence also apply to Flatpak add a small reference to it.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Walter Lozano authored 3 years ago and Emanuele Aina committed 3 years ago

Remove a line that was repeated by mistake in system updates and rollback.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Martyn Welch authored 3 years ago and Martyn Welch committed 3 years ago

Apertis now has open registration on it's GitLab instance. Update the
documentation to reflect this.

Correct some spelling mistakes and grammatical issues noticed when reading
documents.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Signed-off-by: Peter Senna Tschudin <peter.senna@collabora.com>

Denis Pynkin authored 3 years ago and Peter Senna Tschudin committed 3 years ago

Added the guide how to create Apertis tests for LAVA.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>

Martyn Welch authored 3 years ago and Martyn Welch committed 3 years ago

We are updating the privacy policy and terms of use as part of opening up
GitLab. Add these to the website and provide a page covering the need for
the change and providing links to the new and old documents.

Add a banner to the home page highlighting this change. We will need to
give 30 days notice before fully affecting the change as it's stated we
will do that in the existing privacy policy.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Martyn Welch authored 3 years ago and Emanuele Aina committed 3 years ago

The release flow and product lines document has been moved from designs to
policies, however we have some links to this document in places that are
really not possible to change. Add an alias to forward from the old address.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Martyn Welch authored 3 years ago and Martyn Welch committed 3 years ago

We have added a status page to the project. This should be added to the
navigation bar to make it more visible. Rather than adding more entries
that will make the bar cluttered, remove the link to the community page
as this only points to the mailing list at the moment and highlighting
that doesn't seem to be resulting in people signing up.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Martyn Welch authored 3 years ago and Martyn Welch committed 3 years ago

The status page has now been implemented for Apertis, mark the document as
such.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Martyn Welch authored 3 years ago and Martyn Welch committed 3 years ago

Now we have an implemented a status page, add details about this to the
infrastructure monitoring document.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Ariel D'Alessandro authored 3 years ago and Martyn Welch committed 3 years ago

Debian upstream version tag should start with debian/ instead of
apertis/. Fix this.

Signed-off-by: Ariel D'Alessandro <ariel.dalessandro@collabora.com>

Version 4.0 of the CC BY-SA license was written in a way that didn't
require to be ported to different legal jurisidictions, thus it is
correctly known as the "Creative Commons Attribution-ShareAlike 4.0
International License" not the "Creative Commons
Attribution-ShareAlike 4.0 Unported License".

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

As stated on the "Applying Licensing" page:

https://www.apertis.org/policies/license-applying/



    Apertis code, including build scripts, helpers and recipes, is
    primarily licensed under the Mozilla Public License Version 2.0.
    Images (such as icons) and documentation in Apertis are licensed
    under the Creative Commons Attribution-ShareAlike 4.0 International
    (CC BY-SA 4.0) license.

The website is (pretty much) entirely documentation, so should be licensed
as CC BY-SA 4.0, however the repository has mistakenly been given an MIT
license. Correct this by adding the correct license text.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Arnaud Ferraris authored 3 years ago and Emanuele Aina committed 3 years ago

Using multiple occurrences of the `--sign-verify` option can be used to
configure a remote while a new signature key is being rolled out. Add a
paragraph explaining that use case.

Signed-off-by: Arnaud Ferraris <arnaud.ferraris@collabora.com>

Arnaud Ferraris authored 3 years ago and Emanuele Aina committed 3 years ago

This commit includes suggestions from reviewers and fixes the following
issues:
* use `ref` macros for internal links
* fix minor grammar and spelling issues
* add a warning regarding the preliminary state of Ed25519 support

Signed-off-by: Arnaud Ferraris <arnaud.ferraris@collabora.com>

Arnaud Ferraris authored 3 years ago and Emanuele Aina committed 3 years ago

This commit adds a user guide explaining how to create flatpaks signed
with the Ed25519 algorithm, and how to verify such flatpaks.

Signed-off-by: Arnaud Ferraris <arnaud.ferraris@collabora.com>

Based on the decisions that were made and implemented, update the
documentation to reflect the current TLS stack state.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

- Minor spelling corrections
- Remove "docs" service as it's not longer available

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Signed-off-by: Andreas Elvstam Cantner <andreas.elvstam@se.bosch.com>

We are not keeping the roadmap page up to date, it is currently about a
year behind where it should be with the latest information covering Q3 of
2020. If we are not going to keep it up-to-date, lets get rid of it rather
than present clearly out-of-date information on the website.

The links from all release notes that point to the page are also removed
by this commit, but the text is retained to minimise change to these
historic documents. The text and link has been removed completely from
release schedules.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Elvstam Cantner Andreas authored 4 years ago and Martyn Welch committed 3 years ago

Signed-off-by: Andreas Elvstam Cantner <andreas.elvstam@se.bosch.com>

Walter Lozano authored 3 years ago and Emanuele Aina committed 3 years ago

o avoid misunderstandings use an uniform format to describe licensing
information.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Andrej Shadura authored 3 years ago and Emanuele Aina committed 3 years ago

* Fix typos
* Respell bmake/libbsd to full forms
* Reinstate trailing spaces for proper line breaks

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

To allow a deep the evaluation of the licensing of coreutils replacement,
add the list of dependencies and their licenses.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>