Revisions of apparmor
Ana Guerrero (anag+factory)
accepted
request 1165715
from
Christian Boltz (cboltz)
(revision 205)
Use full URLs for source tarball and signature. (forwarded request 1165684 from badshah400)
Dominique Leuenberger (dimstar_suse)
accepted
request 1154197
from
Christian Boltz (cboltz)
(revision 204)
- Remove workaround for boo#853019 in %postun parser - apparmor.service contains a more safe workaround. This also fixes boo#1220708 (missing daemon-reload). - Add smbd-unix_chkpwd.diff to allow smbd to execute unix_chkpwd and fix other pam related denies; (boo#1220032). - Only run utils and profiles make check if kernel LSM is enabled (bsc#1220084)
Ana Guerrero (anag+factory)
accepted
request 1151926
from
Christian Boltz (cboltz)
(revision 203)
- Fix systemd userdb access in unix-chkpwd (forwarded request 1151902 from lnussel)
Ana Guerrero (anag+factory)
accepted
request 1147947
from
Christian Boltz (cboltz)
(revision 202)
Prepare for RPM 4.20 (forwarded request 1147750 from dimstar)
Ana Guerrero (anag+factory)
accepted
request 1147189
from
Christian Boltz (cboltz)
(revision 201)
- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to allow version specific engdef & engines openssl paths (boo#1219571) (forwarded request 1145034 from dmdiss)
Ana Guerrero (anag+factory)
accepted
request 1144685
from
Christian Boltz (cboltz)
(revision 200)
- Update to AppArmor 3.1.7 - aa-logprof: don't skip exec events in hats - fix aa-cleanprof to work with named profiles - add permissions in various abstractions - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7 for the full list of changes - drop upstreamed apparmor-systemd-sessions.patch (forwarded request 1144684 from cboltz)
Ana Guerrero (anag+factory)
accepted
request 1142650
from
Christian Boltz (cboltz)
(revision 199)
- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute unix_chkpwd, and add a profile for unix_chkpwd. This is needed for PAM 1.6 (boo#1219139) - Refresh apparmor.keyring - the key was renewed (forwarded request 1142649 from cboltz)
Ana Guerrero (anag+factory)
accepted
request 1124276
from
Christian Boltz (cboltz)
(revision 198)
- Add apparmor-systemd-sessions.patch to allow read access to /run/systemd/sessions/ (bsc#1216878)
Ana Guerrero (anag+factory)
accepted
request 1113527
from
Christian Boltz (cboltz)
(revision 197)
- Fix pam_apparmor %post and %postun scripts to handle pam-config errors (bsc#1215596) (forwarded request 1113476 from dmdiss)
Ana Guerrero (anag+factory)
accepted
request 1108110
from
Christian Boltz (cboltz)
(revision 196)
Sorry Christian, another boring changelog-only change to track the samba-4-17.patch fix we're carrying in 15.5 and dropping for 15.6 thanks to the upstream 926 merge. (forwarded request 1108011 from dmdiss)
Ana Guerrero (anag+factory)
accepted
request 1107796
from
Christian Boltz (cboltz)
(revision 195)
Add Jira tag to track AppArmor 3.1.6 submission for 15.6 (jsc#PED-5600) (+ an unrelated spec file comment for a patch)
Ana Guerrero (anag+factory)
accepted
request 1100613
from
Christian Boltz (cboltz)
(revision 194)
- Add pam_apparmor README, referenced from online cha-apparmor-pam.html documentation (bsc#1213472) (forwarded request 1100592 from dmdiss)
Dominique Leuenberger (dimstar_suse)
accepted
request 1094655
from
Christian Boltz (cboltz)
(revision 193)
- update to AppArmor 3.1.6 - fix regression in mount rules (boo#1211989) - some additions to the base and authentification abstractions - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6 for the full upstream changelog (forwarded request 1094654 from cboltz)
Dominique Leuenberger (dimstar_suse)
accepted
request 1092351
from
Christian Boltz (cboltz)
(revision 192)
- update to AppArmor 3.1.5 - fix handling of mount rules in apparmor_parser - minor additions to abstractions/base and snap_browsers - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5 for the full upstream changelog - remove upstreamed aa-status-fix-json-mr1046.patch - split off apparmor-enable-precompiled-cache.diff from apparmor-enable-profile-cache.diff so that the precompiled cache path doesn't get added in parser.conf for Tumbleweed builds. This prevents a warning about the non-existing directory when loading profiles. (forwarded request 1092349 from cboltz)
Dominique Leuenberger (dimstar_suse)
accepted
request 1091163
from
Christian Boltz (cboltz)
(revision 191)
- fix aa-status --json output (aa-status-fix-json-mr1046.patch, boo#1211980#c12) (forwarded request 1091162 from cboltz)
Dominique Leuenberger (dimstar_suse)
accepted
request 1090055
from
Christian Boltz (cboltz)
(revision 190)
- update to AppArmor 3.1.4 - parser: fix mount rules encoding (CVE-2016-1585) - aa-logprof: fix error when choosing named exec with plain profile names - aa-status: fix json output - several fixes for profiles and abstractions - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4 for the full upstream changelog (forwarded request 1090054 from cboltz)
Dominique Leuenberger (dimstar_suse)
accepted
request 1085178
from
Christian Boltz (cboltz)
(revision 189)
- Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS. (forwarded request 1084717 from fcrozat)
Dominique Leuenberger (dimstar_suse)
accepted
request 1068312
from
Christian Boltz (cboltz)
(revision 188)
- update to AppArmor 3.1.3 - add support for more audit.log formats in libapparmor - add abstractions/groff (boo#1065388) - various additions in abstractions and profiles - several bug fixes in parser and utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.3 for the detailed upstream changelog - drop upstreamed patches: - abstractions-openssl-1_1.diff - dnsmasq-cpu-possible.diff - nscd-systemd-userdb.diff (forwarded request 1068311 from cboltz)
Dominique Leuenberger (dimstar_suse)
accepted
request 1063514
from
Christian Boltz (cboltz)
(revision 187)
- add abstractions-openssl-1_1.diff: allow to read /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911) (forwarded request 1063513 from cboltz)
Dominique Leuenberger (dimstar_suse)
accepted
request 1062692
from
Christian Boltz (cboltz)
(revision 186)
- add nscd-systemd-userdb.diff: allow nscd to read systemd-userdb (boo#1207698) (forwarded request 1062036 from cboltz)
Displaying revisions 1 - 20 of 205