Revisions of apparmor

Christian Boltz's avatar Christian Boltz (cboltz) accepted request 975634 from Benjamin Greiner's avatar Benjamin Greiner (bnavigator) (revision 332)
- Add python310-help-mr848.patch so that Tumbleweed can switch
  python3 to Python 3.10
  (https://gitlab.com/apparmor/apparmor/-/merge_requests/848)
buildservice-autocommit accepted request 974768 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 331)
baserev update by copy to link target
buildservice-autocommit accepted request 973180 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 330)
baserev update by copy to link target
Christian Boltz's avatar Christian Boltz (cboltz) accepted request 973915 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 329)
- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils < 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)
Christian Boltz's avatar Christian Boltz (cboltz) accepted request 973084 from Dominique Leuenberger's avatar Dominique Leuenberger (dimstar) (revision 328)
- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).
buildservice-autocommit accepted request 970466 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 327)
baserev update by copy to link target
Christian Boltz's avatar Christian Boltz (cboltz) accepted request 970465 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 326)
- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)
buildservice-autocommit accepted request 970238 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 325)
baserev update by copy to link target
Christian Boltz's avatar Christian Boltz (cboltz) accepted request 970229 from Noel Power's avatar Noel Power (npower) (revision 324)
- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);
  

- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).
buildservice-autocommit accepted request 968253 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 323)
baserev update by copy to link target
Christian Boltz's avatar Christian Boltz (cboltz) accepted request 968252 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 322)
- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)
buildservice-autocommit accepted request 966667 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 321)
baserev update by copy to link target
Christian Boltz's avatar Christian Boltz (cboltz) accepted request 966666 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 320)
- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  -profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)
buildservice-autocommit accepted request 964948 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 319)
baserev update by copy to link target
Christian Boltz's avatar Christian Boltz (cboltz) committed (revision 318)
add patch filenames to .changes
Goldwyn Rodrigues's avatar Goldwyn Rodrigues (goldwynr) accepted request 964827 from Noel Power's avatar Noel Power (npower) (revision 317)
- Add new rule to fix 'DENIED' open on /proc/{pid}/fd for
  samba-bgqd; (bnc#1196850).
- Add new rule to allow reading of openssl.cnf; (bnc#1195463).
Christian Boltz's avatar Christian Boltz (cboltz) accepted request 953283 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 316)
- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch

AppArmor 3.0.4 also includes a fix for the issue with 'mctp' found via
https://build.opensuse.org/request/show/951354
so you might want to pick this SR into Staging:O
Christian Boltz's avatar Christian Boltz (cboltz) accepted request 949319 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 315)
- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)
Christian Boltz's avatar Christian Boltz (cboltz) accepted request 947009 from Samuel Cabrero's avatar Samuel Cabrero (scabrero) (revision 314)
- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb;
  (bsc#1192684).
Christian Boltz's avatar Christian Boltz (cboltz) accepted request 941696 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 313)
patch comment update
Displaying revisions 81 - 100 of 412
openSUSE Build Service is sponsored by