[ubuntu/questing-proposed] apparmor 4.1.0~beta5-0ubuntu15 (Accepted)

[Ryan Lee]

apparmor (4.1.0~beta5-0ubuntu15) questing; urgency=medium

  * Add patch to allow unprivileged_userns access to root dir
    (https://gitlab.com/apparmor/apparmor/-/issues/505):
    - d/p/u/unprivileged_userns_rootdir.patch
  * Add patch to fix lsblk accesses on IBM System Z systems (LP: #2107402)
    and execution from a confined context (LP: #2107455):
    - d/p/u/lsblk-s390-fixes.patch
  * Add patch to fix execution of various commands from confined contexts
    (https://gitlab.com/apparmor/apparmor/-/merge_requests/1637,
    backport of the profile fixes and logprof test fix):
    - d/p/u/profiles_ensure_access_to_attach_path.patch
  * Add patch to include new QtWebEngineProcess execution path in
    plasmashell profile (LP: #2107723):
    - d/p/u/plasmashell-QtWebEngineProcess-new-path.patch
  * Add patch to allow /cvmfs fusermounts
    (https://gitlab.com/apparmor/apparmor/-/merge_requests/1587):
    - d/p/u/fusermount3_cvmfs.patch
  * Add patch to grant OpenVPN DNS accesses (LP: #2107596, LP: #2109029)
    - d/p/u/openvpn_dnsfix.patch
  * Add patch to expand allowed fusermount3 flags for fuse_overlayfs
    (https://gitlab.com/apparmor/apparmor/-/merge_requests/1673)
    - d/p/u/fusermount3_allow_more_flags.patch
  * Add patch to fix permission denials for iotop-c (LP: #2107727):
    - d/p/u/profiles-give-iotop-c-additional-accesses.patch
  * Add patch to fix parser handling of norelatime mount flag
    (https://gitlab.com/apparmor/apparmor/-/merge_requests/1679):
    - d/p/u/parser-fix-handling-of-norelatime-mount-rule-flag.patch
  * Add patch to fix incorrect mount rule documentation in the apparmor.d
    man page (https://gitlab.com/apparmor/apparmor/-/merge_requests/1674):
    - d/p/u/fix-incorrect-mount-flag-apparmor.d-docs.patch
    - d/p/u/regression-verify-documented-mount-flag-behavior.patch
  * d/p/u/remmina_mr_1348.patch, d/p/u/remmina-dbus-describeall.patch:
    move the remmina profile to profiles/apparmor/profiles/extras to
    disable it by default (LP: #2102033)
  * debian/apparmor.install: remove the remmina profile entry
  * debian/apparmor-profiles.install: add an entry for the remmina profile
  * debian/apparmor.maintscript: remove the remmina profile upon upgrade

Date: Wed, 07 May 2025 11:29:02 -0700
Changed-By: Ryan Lee <ryan.lee at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/apparmor/4.1.0~beta5-0ubuntu15
-------------- next part --------------
Format: 1.8
Date: Wed, 07 May 2025 11:29:02 -0700
Source: apparmor
Built-For-Profiles: noudeb
Architecture: source
Version: 4.1.0~beta5-0ubuntu15
Distribution: questing
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Ryan Lee <ryan.lee at canonical.com>
Launchpad-Bugs-Fixed: 2102033 2107402 2107455 2107596 2107723 2107727 2109029
Changes:
 apparmor (4.1.0~beta5-0ubuntu15) questing; urgency=medium
 .
   * Add patch to allow unprivileged_userns access to root dir
     (https://gitlab.com/apparmor/apparmor/-/issues/505):
     - d/p/u/unprivileged_userns_rootdir.patch
   * Add patch to fix lsblk accesses on IBM System Z systems (LP: #2107402)
     and execution from a confined context (LP: #2107455):
     - d/p/u/lsblk-s390-fixes.patch
   * Add patch to fix execution of various commands from confined contexts
     (https://gitlab.com/apparmor/apparmor/-/merge_requests/1637,
     backport of the profile fixes and logprof test fix):
     - d/p/u/profiles_ensure_access_to_attach_path.patch
   * Add patch to include new QtWebEngineProcess execution path in
     plasmashell profile (LP: #2107723):
     - d/p/u/plasmashell-QtWebEngineProcess-new-path.patch
   * Add patch to allow /cvmfs fusermounts
     (https://gitlab.com/apparmor/apparmor/-/merge_requests/1587):
     - d/p/u/fusermount3_cvmfs.patch
   * Add patch to grant OpenVPN DNS accesses (LP: #2107596, LP: #2109029)
     - d/p/u/openvpn_dnsfix.patch
   * Add patch to expand allowed fusermount3 flags for fuse_overlayfs
     (https://gitlab.com/apparmor/apparmor/-/merge_requests/1673)
     - d/p/u/fusermount3_allow_more_flags.patch
   * Add patch to fix permission denials for iotop-c (LP: #2107727):
     - d/p/u/profiles-give-iotop-c-additional-accesses.patch
   * Add patch to fix parser handling of norelatime mount flag
     (https://gitlab.com/apparmor/apparmor/-/merge_requests/1679):
     - d/p/u/parser-fix-handling-of-norelatime-mount-rule-flag.patch
   * Add patch to fix incorrect mount rule documentation in the apparmor.d
     man page (https://gitlab.com/apparmor/apparmor/-/merge_requests/1674):
     - d/p/u/fix-incorrect-mount-flag-apparmor.d-docs.patch
     - d/p/u/regression-verify-documented-mount-flag-behavior.patch
   * d/p/u/remmina_mr_1348.patch, d/p/u/remmina-dbus-describeall.patch:
     move the remmina profile to profiles/apparmor/profiles/extras to
     disable it by default (LP: #2102033)
   * debian/apparmor.install: remove the remmina profile entry
   * debian/apparmor-profiles.install: add an entry for the remmina profile
   * debian/apparmor.maintscript: remove the remmina profile upon upgrade
Checksums-Sha1:
 56e179a430c1118196199ec4ba84abed5f81e64d 3762 apparmor_4.1.0~beta5-0ubuntu15.dsc
 f213ebcbb352195ae6aeb74cb76393ba6c584ad6 135196 apparmor_4.1.0~beta5-0ubuntu15.debian.tar.xz
 33faf8da915d0e6881cd77448f28ad4126912c16 9569 apparmor_4.1.0~beta5-0ubuntu15_source.buildinfo
Checksums-Sha256:
 e16441d350b8b9d31e645ca21fb86b856503d188949bcbd45002b730c352b07d 3762 apparmor_4.1.0~beta5-0ubuntu15.dsc
 188679b78144c211fe548908357b5f93c76e7c837ee9a650827b66ae1d98b22b 135196 apparmor_4.1.0~beta5-0ubuntu15.debian.tar.xz
 31b64a76c5c57382dde588886f653f2296aea318431819d80c54a474d249df85 9569 apparmor_4.1.0~beta5-0ubuntu15_source.buildinfo
Files:
 c449cb4d0de99789d1e85dcf17bf04ce 3762 admin optional apparmor_4.1.0~beta5-0ubuntu15.dsc
 438f337af44452498585c86d33dba184 135196 admin optional apparmor_4.1.0~beta5-0ubuntu15.debian.tar.xz
 e1d1dc8af6bedf4683c34e2c6ca35fb6 9569 admin optional apparmor_4.1.0~beta5-0ubuntu15_source.buildinfo
Original-Maintainer: Debian AppArmor Team <pkg-apparmor-team at lists.alioth.debian.org>