[ubuntu/eoan-proposed] apparmor 2.13.3-5ubuntu1 (Accepted)
Jamie Strandboge
jamie at ubuntu.com
Mon Sep 9 21:57:15 UTC 2019
apparmor (2.13.3-5ubuntu1) eoan; urgency=medium
* Merge new upstream release from Debian. Remaining changes:
- Ubuntu-specific patches:
+ ubuntu/add-chromium-browser.patch
+ ubuntu/communitheme-snap-support.patch
+ ubuntu/mimeinfo-snap-support.patch
+ ubuntu/parser-conf-no-expr-simplify.patch
+ ubuntu/profiles-grant-access-to-systemd-resolved.patch
- debian/apparmor.{install,maintscript}: feature pinning is not used in
Ubuntu
- debian/apparmor.preinst: remove cache files on upgrade to 2.13
- debian/apparmor-profiles.install: install Ubuntu chromium-browser
profile and abstraction
- debian/apparmor-profiles.lintian-overrides: update for chromium-browser
profile having read access to dpkg database for lsb-release
- debian/apparmor-profiles.postinst: ubuntu-browsers.d/chromium-browser
abstraction if it doesn't exist
- debian/control: adjust the Vcs-{Browser,Git} control fields to reflect
the branch where the Ubuntu packaging is maintained.
- debian/gbp.conf: use ubuntu/master as the debian-branch
- debian/patches/series: comment out debian-only patches
- debian/tests/control and debian/tests/compile-policy: don't test
thunderbird since the Ubuntu packaging doesn't ship a profile
* Drop the following patches, no longer needed:
- ubuntu/dont-include-site-local-with-dovecot.patch
- lp1820068.patch
- upstream-commit-fix-segfault-in-overlaydirat_for_each.patch
- upstream-commit-add-option-to-dump-policy-cache-with-libapparmor.patch
- upstream-commit-teach-aa_policy_cache_sh-about-the-new-cache.patch
- upstream-commit-fix-segfault-when-loading-policy-cache-files.patch
- upstream-commit-fix-variable-name-overlap-in-merge-macro.patch
* upstream-dont-allow-fontconfig-cache-write.patch: don't allow write of
fontconfig cache files
* upstream-tests-mult-mount-bump-size-of-created-disk.patch: regression
tests/mult_mount: bump size of created disk image
apparmor (2.13.3-5) unstable; urgency=medium
* upstream-mr-419-Xwayland-vs-recent-mutter.patch: new patch (Closes: #935058)
apparmor (2.13.3-4) unstable; urgency=medium
* New patch, cherry-picked and adapted from Ubuntu: don't include local/
snippets in the Dovecot profiles. These inclusions of non-existing files
break aa-genprof (Closes: #928160).
* Merge ubuntu/2.13.2-9ubuntu7, which turns out to be a no-op, because
we essentially revert all changes brought by this merge:
- Drop lp1820068.patch, introduced in 2.13.2-9ubuntu7: it's included
in the 2.13.3 upstream release already.
- Don't enable ubuntu/parser-conf-no-expr-simplify.patch, that Ubuntu just
re-enabled: in Debian we don't disable expression tree simplification,
because we've cherry-picked an upstream patch that improves its
performance sufficiently.
apparmor (2.13.3-3) unstable; urgency=medium
[ Michael Biebl ]
* Move libraries back to /usr/lib
[ intrigeri ]
* Remove Lintian override made obsolete by the move to /usr/lib/apparmor/
* Avoid-blhc-CPPFLAGS-missing-false-positive.patch: new patch.
* Revert "debian/control: Breaks on snapd < 2.38~"
Jamie Strandboge explained in details on #932815 the rationale behind this
Breaks relationship. The user impact seems non-critical and the risk of the
problem happening in practice is very low, so for now let's remove this
Breaks, that prevents apparmor from migrating to testing (we don't have
snapd 2.38+ in Debian yet).
apparmor (2.13.3-2) unstable; urgency=medium
* Install the lsb_release profile.
apparmor (2.13.3-1) unstable; urgency=medium
* Import new 2.13.3 upstream release and accordingly:
- Update dev-pkg-without-shlib-symlink Lintian override: soname
was bumped to 1.6.1.
- Drop patches that were applied upstream.
* Merge ubuntu/2.13.2-9ubuntu6, dropping the Ubuntu delta (Closes: #926015):
- lp1824812.patch: set SFS_MOUNTPOINT in is_container_with_internal_policy()
since it is sometimes called independently of is_apparmor_loaded()
(LP: #1824812)
- debian/apparmor.postrm: remove parser-created subdirs
- debian/tests/control: try Ubuntu kernel but mark skip-not-installable
- regression testsuite fixes:
upstream-commit-add-option-to-dump-policy-cache-with-libapparmor.patch,
upstream-commit-teach-aa_policy_cache_sh-about-the-new-cache.patch,
upstream-commit-fix-variable-name-overlap-in-merge-macro.patch
- debian/debhelper/postrm-apparmor: also remove cache files
- debian/control: Breaks on snapd < 2.38~ (the cache forest breaks snap
remove)
* Declare compatibility with Debian Policy 4.4.0.
* Bump debhelper compatibility level to 12. Accordingly:
- dh_installinit: replace --no-restart-on-upgrade with its new
--no-stop-on-upgrade name
- Add override_dh_installsystemd that mimics our override_dh_installinit
* tests/compile-policy: check syntax of kopano profiles (implements
#923313 except kopano-search, until giraffe-team/kopanocore!4 is merged
and uploaded)
Date: Mon, 09 Sep 2019 19:13:22 +0000
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/apparmor/2.13.3-5ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 09 Sep 2019 19:13:22 +0000
Source: apparmor
Architecture: source
Version: 2.13.3-5ubuntu1
Distribution: eoan
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Closes: 926015 928160 935058
Launchpad-Bugs-Fixed: 1824812
Changes:
apparmor (2.13.3-5ubuntu1) eoan; urgency=medium
.
* Merge new upstream release from Debian. Remaining changes:
- Ubuntu-specific patches:
+ ubuntu/add-chromium-browser.patch
+ ubuntu/communitheme-snap-support.patch
+ ubuntu/mimeinfo-snap-support.patch
+ ubuntu/parser-conf-no-expr-simplify.patch
+ ubuntu/profiles-grant-access-to-systemd-resolved.patch
- debian/apparmor.{install,maintscript}: feature pinning is not used in
Ubuntu
- debian/apparmor.preinst: remove cache files on upgrade to 2.13
- debian/apparmor-profiles.install: install Ubuntu chromium-browser
profile and abstraction
- debian/apparmor-profiles.lintian-overrides: update for chromium-browser
profile having read access to dpkg database for lsb-release
- debian/apparmor-profiles.postinst: ubuntu-browsers.d/chromium-browser
abstraction if it doesn't exist
- debian/control: adjust the Vcs-{Browser,Git} control fields to reflect
the branch where the Ubuntu packaging is maintained.
- debian/gbp.conf: use ubuntu/master as the debian-branch
- debian/patches/series: comment out debian-only patches
- debian/tests/control and debian/tests/compile-policy: don't test
thunderbird since the Ubuntu packaging doesn't ship a profile
* Drop the following patches, no longer needed:
- ubuntu/dont-include-site-local-with-dovecot.patch
- lp1820068.patch
- upstream-commit-fix-segfault-in-overlaydirat_for_each.patch
- upstream-commit-add-option-to-dump-policy-cache-with-libapparmor.patch
- upstream-commit-teach-aa_policy_cache_sh-about-the-new-cache.patch
- upstream-commit-fix-segfault-when-loading-policy-cache-files.patch
- upstream-commit-fix-variable-name-overlap-in-merge-macro.patch
* upstream-dont-allow-fontconfig-cache-write.patch: don't allow write of
fontconfig cache files
* upstream-tests-mult-mount-bump-size-of-created-disk.patch: regression
tests/mult_mount: bump size of created disk image
.
apparmor (2.13.3-5) unstable; urgency=medium
.
* upstream-mr-419-Xwayland-vs-recent-mutter.patch: new patch (Closes: #935058)
.
apparmor (2.13.3-4) unstable; urgency=medium
.
* New patch, cherry-picked and adapted from Ubuntu: don't include local/
snippets in the Dovecot profiles. These inclusions of non-existing files
break aa-genprof (Closes: #928160).
* Merge ubuntu/2.13.2-9ubuntu7, which turns out to be a no-op, because
we essentially revert all changes brought by this merge:
- Drop lp1820068.patch, introduced in 2.13.2-9ubuntu7: it's included
in the 2.13.3 upstream release already.
- Don't enable ubuntu/parser-conf-no-expr-simplify.patch, that Ubuntu just
re-enabled: in Debian we don't disable expression tree simplification,
because we've cherry-picked an upstream patch that improves its
performance sufficiently.
.
apparmor (2.13.3-3) unstable; urgency=medium
.
[ Michael Biebl ]
* Move libraries back to /usr/lib
.
[ intrigeri ]
* Remove Lintian override made obsolete by the move to /usr/lib/apparmor/
* Avoid-blhc-CPPFLAGS-missing-false-positive.patch: new patch.
* Revert "debian/control: Breaks on snapd < 2.38~"
Jamie Strandboge explained in details on #932815 the rationale behind this
Breaks relationship. The user impact seems non-critical and the risk of the
problem happening in practice is very low, so for now let's remove this
Breaks, that prevents apparmor from migrating to testing (we don't have
snapd 2.38+ in Debian yet).
.
apparmor (2.13.3-2) unstable; urgency=medium
.
* Install the lsb_release profile.
.
apparmor (2.13.3-1) unstable; urgency=medium
.
* Import new 2.13.3 upstream release and accordingly:
- Update dev-pkg-without-shlib-symlink Lintian override: soname
was bumped to 1.6.1.
- Drop patches that were applied upstream.
* Merge ubuntu/2.13.2-9ubuntu6, dropping the Ubuntu delta (Closes: #926015):
- lp1824812.patch: set SFS_MOUNTPOINT in is_container_with_internal_policy()
since it is sometimes called independently of is_apparmor_loaded()
(LP: #1824812)
- debian/apparmor.postrm: remove parser-created subdirs
- debian/tests/control: try Ubuntu kernel but mark skip-not-installable
- regression testsuite fixes:
upstream-commit-add-option-to-dump-policy-cache-with-libapparmor.patch,
upstream-commit-teach-aa_policy_cache_sh-about-the-new-cache.patch,
upstream-commit-fix-variable-name-overlap-in-merge-macro.patch
- debian/debhelper/postrm-apparmor: also remove cache files
- debian/control: Breaks on snapd < 2.38~ (the cache forest breaks snap
remove)
* Declare compatibility with Debian Policy 4.4.0.
* Bump debhelper compatibility level to 12. Accordingly:
- dh_installinit: replace --no-restart-on-upgrade with its new
--no-stop-on-upgrade name
- Add override_dh_installsystemd that mimics our override_dh_installinit
* tests/compile-policy: check syntax of kopano profiles (implements
#923313 except kopano-search, until giraffe-team/kopanocore!4 is merged
and uploaded)
Checksums-Sha1:
f7b7d9967c6caa30253378301bc796e6731db0e7 3553 apparmor_2.13.3-5ubuntu1.dsc
55c5a3a42a5cbc531138481ef137124199e09fe2 7384974 apparmor_2.13.3.orig.tar.gz
837d4a78c048f2cc73f24f7b56b0836fd72963c1 870 apparmor_2.13.3.orig.tar.gz.asc
a143242cce75a6180fa4a1003029b34326ef9b32 103524 apparmor_2.13.3-5ubuntu1.debian.tar.xz
61d4c079fb15e75a715627d001bfcac9ee645206 8080 apparmor_2.13.3-5ubuntu1_source.buildinfo
Checksums-Sha256:
efd3e276b1d7109358454deba8f9a7c66ba6aba80a5170bfee0ec375739da0aa 3553 apparmor_2.13.3-5ubuntu1.dsc
267053234c68cdb122c5294d7c276b6e2f5fa7e75c6c2d23e3ce69f95d9a7639 7384974 apparmor_2.13.3.orig.tar.gz
5f280617cca0c5f83ac113166eafcb3ca58be75fdbc4444141282724fb8ad7d7 870 apparmor_2.13.3.orig.tar.gz.asc
92d1005314f4a2b603c7091de76b923fabffdf2734a58100d004ff5a32d9af8f 103524 apparmor_2.13.3-5ubuntu1.debian.tar.xz
f70e2337f4566ed65f87f0d842676b46f58ab53b52efb03a6870eee31d43354b 8080 apparmor_2.13.3-5ubuntu1_source.buildinfo
Files:
363828e48e34bc041d6d6f39ad625489 3553 admin optional apparmor_2.13.3-5ubuntu1.dsc
81468fb2b7ba7966910f617371073391 7384974 admin optional apparmor_2.13.3.orig.tar.gz
b92d7252b36f35e111f763062d5aaf14 870 admin optional apparmor_2.13.3.orig.tar.gz.asc
71e79b150113ac51f600d9feb914ba59 103524 admin optional apparmor_2.13.3-5ubuntu1.debian.tar.xz
90ea1c6dd40ee71254b55c280d34c53b 8080 admin optional apparmor_2.13.3-5ubuntu1_source.buildinfo
Original-Maintainer: Debian AppArmor Team <pkg-apparmor-team at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----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=BiFL
-----END PGP SIGNATURE-----
More information about the Eoan-changes
mailing list