[ubuntu/groovy-proposed] apparmor 3.0.0~beta1-0ubuntu4 (Accepted)
Alex Murray
alex.murray at canonical.com
Fri Sep 18 15:17:13 UTC 2020
apparmor (3.0.0~beta1-0ubuntu4) groovy; urgency=medium
[ Jamie Strandboge ]
* no change rebuild for FFe approval (LP: #1895060)
apparmor (3.0.0~beta1-0ubuntu3) groovy; urgency=medium
[ John Johansen ]
* d/p/fix-parser-to-emit-proc-attr-access-for-all-situations.patch:
fix-automatic-adding-of-rule-for-change-hat-iface.patch fixed the
parser to emit rules needed for change_hat in the hat profiles but
broke the rule being emitted for the parent profile, this fixes it for
both so that it is emitted for any profile that is a hat or that
contains a hat.
* d/p/fix-change-profile-stack-abstraction.patch: fix the change_profile
abstraction so that it allows access to the apparmor attribute paths
under LSM stacking.
apparmor (3.0.0~beta1-0ubuntu2) groovy; urgency=medium
[ John Johansen ]
* d/p/fix-automatic-adding-of-rule-for-change-hat-iface.patch: fix
parser not adding a rule to profiles if they are a hat or contain hats
granting write access to the kernel interfaces.
apparmor (3.0.0~beta1-0ubuntu1) groovy; urgency=medium
[ John Johansen ]
* New upstream release (LP: #1895060, LP: #1887577, LP: #1880841)
* Drop all patches backported from upstream: applied in 3.0
* d/p/policy-provide-example-and-base-abi-to-pin-pre-3.0-p.patch: provide
example and base abi to pin pre 3.0 policy
* d/p/ubuntu/enable-pinning-of-pre-AppArmor-3.x-poli.patch: enable pinning
of pre AppArmor 3.x policy
* drop d/p/debian/dont-include-site-local-with-dovecot.patch: no longer
needed with upstream 'include if exists'
[ Steve Beattie ]
* d/p/parser-fix_cap_match.patch: fix cap match to work correctly, important
now that groovy has a 5.8 kernel.
* d/apparmor-profiles.install:
+ adjust for renamed postfix profiles
+ add usr.bin.dumpcap and usr.bin.mlmmj-receive to extra-profiles
+ remove usr.sbin.nmbd and usr.sbin.smbd from extra-profiles (already in
apparmor-profiles)
* d/apparmor.install: include abi/ directory and tunables/etc.
* d/apparmor.manpages: add apparmor_xattrs.7 manpage
* d/control:
+ apparmor-utils: no more shipped perl tools, drop perl dependency
+ apparmor-notify: aa-notify was converted to python3 from perl; adjust
-notify dependencies to compensate
* d/p/fix-tests-regression-apparmor-prologue-inc-settest.patch:
fix sed expression in settest()
[ Emilia Torino ]
* Removing Ubuntu specific chromium-browser profile. This is safe to do
since groovy's chromium-browser deb installs the snap. If apparmor3
is backported to 18.04 or earlier, the profile will need to be taken
into consideration
- d/profiles/chromium-browser: remove chromium-browser profile
- d/apparmor-profiles.postinst: remove postinst script as it only
contains chromium-browser related functionallity.
- d/apparmor-profiles.postrm: remove postrm script as it only
contains chromium-browser related functionallity.
- d/apparmor-profiles.install: remove ubuntu-specific
chromium-browser abstraction and profile
- d/apparmor-profiles.lintian-overrides: remove chromium-browser
profile lintian overrides
- d/p/ubuntu/add-chromium-browser.patch: remove patch which added
chrome-browser
[ Alex Murray ]
* d/p/policy-provide-example-and-base-abi-to-pin-pre-3.0-p.patch: refresh
this patch with the official upstream version
* d/p/ubuntu/enable-pinning-of-pre-AppArmor-3.x-poli.patch: refresh this
patch to match the above
* d/p/parser-add-abi-warning-flags.patch: enable parser warnings
to be silenced or to be treated as errors
[ Jamie Strandboge ]
* d/p/adjust-for-ibus-1.5.22.patch: update ibus abstract path for ibus
1.5.22. This can be dropped with AppArmor 3.0 final.
* d/p/parser-add-abi-warning-flags.patch: refresh to avoid lintian warnings
* d/p/ubuntu/lp1891338.patch: adjust ubuntu-integration to use
abstractions/exo-open (LP: #1891338)
* d/p/ubuntu/lp1889699.patch: adjust to support brave in ubuntu
abstractions. Patch thanks to François Marier (LP: #1889699)
* d/p/ubuntu/lp1881357.patch: adjust for new ICEauthority path in /run
(LP: #1881357)
Date: Fri, 18 Sep 2020 15:09:58 +0000
Changed-By: Alex Murray <alex.murray at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Jamie Strandboge <jamie at ubuntu.com>
https://launchpad.net/ubuntu/+source/apparmor/3.0.0~beta1-0ubuntu4
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 18 Sep 2020 15:09:58 +0000
Source: apparmor
Architecture: source
Version: 3.0.0~beta1-0ubuntu4
Distribution: groovy
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Alex Murray <alex.murray at canonical.com>
Launchpad-Bugs-Fixed: 1880841 1881357 1887577 1889699 1891338 1895060
Changes:
apparmor (3.0.0~beta1-0ubuntu4) groovy; urgency=medium
.
[ Jamie Strandboge ]
* no change rebuild for FFe approval (LP: #1895060)
.
apparmor (3.0.0~beta1-0ubuntu3) groovy; urgency=medium
.
[ John Johansen ]
* d/p/fix-parser-to-emit-proc-attr-access-for-all-situations.patch:
fix-automatic-adding-of-rule-for-change-hat-iface.patch fixed the
parser to emit rules needed for change_hat in the hat profiles but
broke the rule being emitted for the parent profile, this fixes it for
both so that it is emitted for any profile that is a hat or that
contains a hat.
* d/p/fix-change-profile-stack-abstraction.patch: fix the change_profile
abstraction so that it allows access to the apparmor attribute paths
under LSM stacking.
.
apparmor (3.0.0~beta1-0ubuntu2) groovy; urgency=medium
.
[ John Johansen ]
* d/p/fix-automatic-adding-of-rule-for-change-hat-iface.patch: fix
parser not adding a rule to profiles if they are a hat or contain hats
granting write access to the kernel interfaces.
.
apparmor (3.0.0~beta1-0ubuntu1) groovy; urgency=medium
.
[ John Johansen ]
* New upstream release (LP: #1895060, LP: #1887577, LP: #1880841)
* Drop all patches backported from upstream: applied in 3.0
* d/p/policy-provide-example-and-base-abi-to-pin-pre-3.0-p.patch: provide
example and base abi to pin pre 3.0 policy
* d/p/ubuntu/enable-pinning-of-pre-AppArmor-3.x-poli.patch: enable pinning
of pre AppArmor 3.x policy
* drop d/p/debian/dont-include-site-local-with-dovecot.patch: no longer
needed with upstream 'include if exists'
.
[ Steve Beattie ]
* d/p/parser-fix_cap_match.patch: fix cap match to work correctly, important
now that groovy has a 5.8 kernel.
* d/apparmor-profiles.install:
+ adjust for renamed postfix profiles
+ add usr.bin.dumpcap and usr.bin.mlmmj-receive to extra-profiles
+ remove usr.sbin.nmbd and usr.sbin.smbd from extra-profiles (already in
apparmor-profiles)
* d/apparmor.install: include abi/ directory and tunables/etc.
* d/apparmor.manpages: add apparmor_xattrs.7 manpage
* d/control:
+ apparmor-utils: no more shipped perl tools, drop perl dependency
+ apparmor-notify: aa-notify was converted to python3 from perl; adjust
-notify dependencies to compensate
* d/p/fix-tests-regression-apparmor-prologue-inc-settest.patch:
fix sed expression in settest()
.
[ Emilia Torino ]
* Removing Ubuntu specific chromium-browser profile. This is safe to do
since groovy's chromium-browser deb installs the snap. If apparmor3
is backported to 18.04 or earlier, the profile will need to be taken
into consideration
- d/profiles/chromium-browser: remove chromium-browser profile
- d/apparmor-profiles.postinst: remove postinst script as it only
contains chromium-browser related functionallity.
- d/apparmor-profiles.postrm: remove postrm script as it only
contains chromium-browser related functionallity.
- d/apparmor-profiles.install: remove ubuntu-specific
chromium-browser abstraction and profile
- d/apparmor-profiles.lintian-overrides: remove chromium-browser
profile lintian overrides
- d/p/ubuntu/add-chromium-browser.patch: remove patch which added
chrome-browser
.
[ Alex Murray ]
* d/p/policy-provide-example-and-base-abi-to-pin-pre-3.0-p.patch: refresh
this patch with the official upstream version
* d/p/ubuntu/enable-pinning-of-pre-AppArmor-3.x-poli.patch: refresh this
patch to match the above
* d/p/parser-add-abi-warning-flags.patch: enable parser warnings
to be silenced or to be treated as errors
.
[ Jamie Strandboge ]
* d/p/adjust-for-ibus-1.5.22.patch: update ibus abstract path for ibus
1.5.22. This can be dropped with AppArmor 3.0 final.
* d/p/parser-add-abi-warning-flags.patch: refresh to avoid lintian warnings
* d/p/ubuntu/lp1891338.patch: adjust ubuntu-integration to use
abstractions/exo-open (LP: #1891338)
* d/p/ubuntu/lp1889699.patch: adjust to support brave in ubuntu
abstractions. Patch thanks to François Marier (LP: #1889699)
* d/p/ubuntu/lp1881357.patch: adjust for new ICEauthority path in /run
(LP: #1881357)
Checksums-Sha1:
1285c71ddf369074f4bd493a05596f9ed68dfea5 3346 apparmor_3.0.0~beta1-0ubuntu4.dsc
43be99ee08dc857f26d3cbe4dc5f4f69ee33e205 99748 apparmor_3.0.0~beta1-0ubuntu4.debian.tar.xz
ec0d7d3b3640fdf665040d337cf38d36e85f86c0 8146 apparmor_3.0.0~beta1-0ubuntu4_source.buildinfo
Checksums-Sha256:
5893a140b10688db0b0db1ce85f330cd71f6407893148dd4ea7a621bf6f49326 3346 apparmor_3.0.0~beta1-0ubuntu4.dsc
2728a0295907ae531151d8dda36bd94bceae682252bed6364d3135d04e0d9ebe 99748 apparmor_3.0.0~beta1-0ubuntu4.debian.tar.xz
2b4216624a146498ca6500ffe810729770d9c289ad590196039e7604af18ee53 8146 apparmor_3.0.0~beta1-0ubuntu4_source.buildinfo
Files:
d5a9985f4f4c4f292e1acad90ff17c12 3346 admin optional apparmor_3.0.0~beta1-0ubuntu4.dsc
bfb25128234b9bd3077ab979e1abde1b 99748 admin optional apparmor_3.0.0~beta1-0ubuntu4.debian.tar.xz
9e05cfcf65829f34a1f8911d571bc164 8146 admin optional apparmor_3.0.0~beta1-0ubuntu4_source.buildinfo
Original-Maintainer: Debian AppArmor Team <pkg-apparmor-team at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----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=7LJr
-----END PGP SIGNATURE-----
More information about the Groovy-changes
mailing list