Revisions of apparmor

Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1165715 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 205)
Use full URLs for source tarball and signature. (forwarded request 1165684 from badshah400)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1154197 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 204)
- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).

- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).

- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1151926 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 203)
- Fix systemd userdb access in unix-chkpwd (forwarded request 1151902 from lnussel)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1147947 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 202)
Prepare for RPM 4.20 (forwarded request 1147750 from dimstar)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1147189 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 201)
- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef & engines openssl paths (boo#1219571) (forwarded request 1145034 from dmdiss)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1144685 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 200)
- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch (forwarded request 1144684 from cboltz)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1142650 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 199)
- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed (forwarded request 1142649 from cboltz)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1124276 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 198)
- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1113527 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 197)
- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596) (forwarded request 1113476 from dmdiss)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1108110 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 196)
Sorry Christian, another boring changelog-only change to track the
samba-4-17.patch fix we're carrying in 15.5 and dropping for 15.6
thanks to the upstream 926 merge. (forwarded request 1108011 from dmdiss)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1107796 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 195)
Add Jira tag to track AppArmor 3.1.6 submission for 15.6 (jsc#PED-5600)

(+ an unrelated spec file comment for a patch)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1100613 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 194)
- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472) (forwarded request 1100592 from dmdiss)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1094655 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 193)
- update to AppArmor 3.1.6
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog (forwarded request 1094654 from cboltz)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1092351 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 192)
- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles. (forwarded request 1092349 from cboltz)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1091163 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 191)
- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12) (forwarded request 1091162 from cboltz)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1090055 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 190)
- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog (forwarded request 1090054 from cboltz)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1085178 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 189)
- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS. (forwarded request 1084717 from fcrozat)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1068312 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 188)
- update to AppArmor 3.1.3
  - add support for more audit.log formats in libapparmor
  - add abstractions/groff (boo#1065388)
  - various additions in abstractions and profiles
  - several bug fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-openssl-1_1.diff
  - dnsmasq-cpu-possible.diff
  - nscd-systemd-userdb.diff (forwarded request 1068311 from cboltz)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1063514 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 187)
- add abstractions-openssl-1_1.diff: allow to read
  /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911) (forwarded request 1063513 from cboltz)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1062692 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 186)
- add nscd-systemd-userdb.diff: allow nscd to read systemd-userdb
  (boo#1207698) (forwarded request 1062036 from cboltz)
Displaying revisions 1 - 20 of 205
openSUSE Build Service is sponsored by