Revisions of apparmor
Stephan Kulow (coolo)
accepted
request 331543
from
Christian Boltz (cboltz)
(revision 90)
- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)
Dominique Leuenberger (dimstar_suse)
accepted
request 320064
from
Christian Boltz (cboltz)
(revision 89)
- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)
Dominique Leuenberger (dimstar_suse)
accepted
request 318425
from
Christian Boltz (cboltz)
(revision 88)
- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170) (forwarded request 318424 from cboltz)
Stephan Kulow (coolo)
accepted
request 317972
from
Christian Boltz (cboltz)
(revision 87)
- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff (forwarded request 317971 from cboltz)
Dominique Leuenberger (dimstar_suse)
accepted
request 312168
from
Christian Boltz (cboltz)
(revision 86)
- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792) (forwarded request 312166 from cboltz)
Stephan Kulow (coolo)
accepted
request 303872
from
Christian Boltz (cboltz)
(revision 85)
- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404 (forwarded request 303871 from cboltz)
Dominique Leuenberger (dimstar_suse)
accepted
request 297856
from
Christian Boltz (cboltz)
(revision 84)
- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201) - only install apparmor.service for openSUSE > 13.2 - Add a native systemd unit which *at the moment* only wraps/masks the early boot script.
Dominique Leuenberger (dimstar_suse)
accepted
request 287995
from
Christian Boltz (cboltz)
(revision 83)
- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5 (forwarded request 287520 from rguenther)
Dominique Leuenberger (dimstar_suse)
accepted
request 287054
from
Christian Boltz (cboltz)
(revision 82)
- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) (forwarded request 287051 from cboltz)
Stephan Kulow (coolo)
accepted
request 285867
from
Christian Boltz (cboltz)
(revision 81)
- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577) (forwarded request 285866 from cboltz)
Stephan Kulow (coolo)
accepted
request 282163
from
Christian Boltz (cboltz)
(revision 80)
- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key Also add a missing bnc number in the Jan 1 2015 changelog entry.
Dominique Leuenberger (dimstar_suse)
accepted
request 266970
from
Christian Boltz (cboltz)
(revision 79)
- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch (forwarded request 266969 from cboltz)
Dominique Leuenberger (dimstar_suse)
accepted
request 266151
from
Christian Boltz (cboltz)
(revision 78)
- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001 (forwarded request 266140 from cbosdonnat)
Dominique Leuenberger (dimstar_suse)
accepted
request 262771
from
Factory Maintainer (factory-maintainer)
(revision 77)
Automatic submission by obs-autosubmit
Dominique Leuenberger (dimstar_suse)
accepted
request 260448
from
Christian Boltz (cboltz)
(revision 76)
fix bashism in post script (forwarded request 260415 from Ledest)
Stephan Kulow (coolo)
accepted
request 257521
from
Christian Boltz (cboltz)
(revision 75)
- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diff - add apparmor-abstractions-no-multiline.diff: change all multiline rules into one line. Needed for yast2-apparmor (bnc#900013) (forwarded request 257520 from cboltz)
Stephan Kulow (coolo)
accepted
request 254375
from
Christian Boltz (cboltz)
(revision 74)
- add apparmor-profiles-ntpd-pid-location.diff to cover new ntpd pid location (bnc#899746) (forwarded request 254373 from cboltz)
Stephan Kulow (coolo)
accepted
request 254060
from
Christian Boltz (cboltz)
(revision 73)
- update to AppArmor 2.8.97 (aka 2.9 beta3 aka r2721) - several bugfixes in python and C tools - rename "__unused" to "unused" in apparmor_parser to fix compilation on openSUSE <= 13.1 x86_64 (bnc#895495) - usr.lib.dovecot.auth profile: allow access to auth-token-secret.dat - various small profile improvements - update and add several testcases - drop upstreamed patch apparmor-profiles-dnsmasq-iface-mtu.patch - re-number remaining patches - split apparmor-profiles package into -profiles and -abstractions Please also forward this SR to 13.2
Stephan Kulow (coolo)
accepted
request 247918
from
Christian Boltz (cboltz)
(revision 72)
- update to AppArmor 2.8.96 (aka 2.9 beta2 aka r2652) - add unix abstract sockets, ptrace, and signal policy generation - several bugfixes in the python tools and elsewhere - move program-chunks/postfix-common to abstractions/ - drop upstreamed patches: - apparmor-profiles-clustered-samba.diff - perl-apparmor-fix-bare-network-keyword-handling.diff - perl-apparmor-handle-bare-capability-keyword.diff - perl-apparmor-properly-handle-bare-file-keyword.diff - re-enable installation of perl modules - move python modules to python3-apparmor package - create symlinks without aa- prefix only for tools existing in 2.8.x, but not for new tools added in 2.9 - make utils filelist explicit to ensure we have the right set of files without aa- prefix in sbindir - switch easyprof python module location to python3 - drop unused defines APPARMOR_DOC_DIR and JNI_SO - refresh patches: - apparmor-utils-string-split (file moved) - apparmor-profiles-dnsmasq-iface-mtu.patch - apparmor-2.5.1-edirectory-profile (prepared Thu Mar 20 23:35:03 UTC 2014 in home project) - update to AppArmor 2.8.95 (aka 2.9 beta1) - complete rewrite of the aa-* tools in python - new tools: aa-cleanprof, aa-mergeprof - extra profiles moved to /usr/share/apparmor/extra-profiles/ (bnc#713647) - and much more, but there's no upstream changelog yet - drop upstreamed patches and files: - usr.sbin.winbindd - usr.lib.dovecot.*, tunables-dovecot, apparmor-profiles-dovecot-bnc851984.diff - apparmor-init.py-gsoc.diff - apparmor-2.8.2-nm-dnsmasq-config.patch - add %bcond_with perl and disable the perl subpackage temporarily (the perl modules will be back in beta2) - drop the apparmorapplet-gnome, apparmor-dbus and profile-editor subpackages (they were disabled since a long time, and upstream no longer ships their code) and the apparmor-profile-editor.desktop and apparmor-profile-editor.png files - drop apparmor-utils-subdomain-compat patch (was only included for <= 12.1) - remove libimmunix Provides/Obsoletes (libimmunix was a compat wrapper and got finally dropped) - refresh apparmor-samba-include-permissions-for-shares.diff and apparmor-2.5.1-edirectory-profile (forwarded request 247917 from cboltz)
Adrian Schröter (adrianSuSE)
committed
(revision 71)
Split 13.2 from Factory
Displaying revisions 121 - 140 of 210