[ubuntu/resolute-proposed] apparmor 5.0.0~beta1-0ubuntu7 (Accepted)

[Ryan Lee]

apparmor (5.0.0~beta1-0ubuntu7) resolute; urgency=medium

  * Add patches to fix skb and v9 network iface mediation (LP: #2147551):
    - d/p/u/0006-parser-name-ns_domain-and-network_v9-classes.patch
    - d/p/u/0007-Set-parser-network.h-ip_conds-ptrs-to-null-in-its-fr.patch
    - d/p/u/0008-parser-move-to-encode-an-alternation-of-a-null-trans.patch
    - d/p/u/0009-parser-disable-ability-to-specify-interface-on-peer-.patch
    - d/p/u/0010-parser-fix-iface-perms-to-work-when-v9-and-v9_skb-ar.patch
    - d/p/u/0011-utils-add-support-for-iface-an-label-in-network-rule.patch
    - d/p/u/0012-parser-fix-label-match-for-default-label-values.patch
    - d/p/u/0013-parser-fix-FTBFS-due-to-missing-merge-edit.patch
    - d/p/u/0014-tests-check-if-skb-mediation-is-enabled.patch
  * Add patch to fix snap browser invocation from Evince and papers
    (LP: #2127874):
    - d/p/u/snap-browser-add-missing-perms-when-opening-from-link.patch
  * Add patch to pull the Rygel profile (LP: #2137088):
    - d/p/u/profiles-pull-rygel-profile.patch
  * Add patch to pull the openvpn profile (LP: #2146874):
    - d/p/u/profiles-pull-openvpn-profile.patch
  * d/apparmor.install,d/apparmor-profiles.install,d/apparmor.maintscript:
    account for the new location of the rygel and openvpn profile
  * Add patch to fix lsusb hwdb access (LP: #2148047):
    - d/p/u/lsusb-allow-reading-etc-udev-hwdb-bin.patch
  * Add patch for unix socket access in sanitized_helper (LP: #2148177):
    - d/p/u/profiles-grant-unix-domain-socket-access-to-sanitize.patch
  * Add patch to fix compressed cache mtime issues (LP: #2147986):
    - d/p/u/0001-parser-fix-rewriting-of-cache-after-zstd-recompressi.patch
    - d/p/u/0002-parser-refactor-compressed-policy-cache.patch
    - d/p/u/0003-parser-handle-compressed-cache-on-kernels-without-de.patch
    - d/p/u/0004-regression-fix-the-e2e-test-for-compressed-caches.patch
  * apparmor.postinst: remove separately generated compressed cache
    (LP: #2147986)

Date: Wed, 08 Apr 2026 10:26:51 -0700
Changed-By: Ryan Lee <ryan.lee at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Sebastien Bacher <sebastien.bacher at canonical.com>
https://launchpad.net/ubuntu/+source/apparmor/5.0.0~beta1-0ubuntu7
-------------- next part --------------
Format: 1.8
Date: Wed, 08 Apr 2026 10:26:51 -0700
Source: apparmor
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 5.0.0~beta1-0ubuntu7
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Ryan Lee <ryan.lee at canonical.com>
Launchpad-Bugs-Fixed: 2127874 2137088 2146874 2147551 2147986 2148047 2148177
Changes:
 apparmor (5.0.0~beta1-0ubuntu7) resolute; urgency=medium
 .
   * Add patches to fix skb and v9 network iface mediation (LP: #2147551):
     - d/p/u/0006-parser-name-ns_domain-and-network_v9-classes.patch
     - d/p/u/0007-Set-parser-network.h-ip_conds-ptrs-to-null-in-its-fr.patch
     - d/p/u/0008-parser-move-to-encode-an-alternation-of-a-null-trans.patch
     - d/p/u/0009-parser-disable-ability-to-specify-interface-on-peer-.patch
     - d/p/u/0010-parser-fix-iface-perms-to-work-when-v9-and-v9_skb-ar.patch
     - d/p/u/0011-utils-add-support-for-iface-an-label-in-network-rule.patch
     - d/p/u/0012-parser-fix-label-match-for-default-label-values.patch
     - d/p/u/0013-parser-fix-FTBFS-due-to-missing-merge-edit.patch
     - d/p/u/0014-tests-check-if-skb-mediation-is-enabled.patch
   * Add patch to fix snap browser invocation from Evince and papers
     (LP: #2127874):
     - d/p/u/snap-browser-add-missing-perms-when-opening-from-link.patch
   * Add patch to pull the Rygel profile (LP: #2137088):
     - d/p/u/profiles-pull-rygel-profile.patch
   * Add patch to pull the openvpn profile (LP: #2146874):
     - d/p/u/profiles-pull-openvpn-profile.patch
   * d/apparmor.install,d/apparmor-profiles.install,d/apparmor.maintscript:
     account for the new location of the rygel and openvpn profile
   * Add patch to fix lsusb hwdb access (LP: #2148047):
     - d/p/u/lsusb-allow-reading-etc-udev-hwdb-bin.patch
   * Add patch for unix socket access in sanitized_helper (LP: #2148177):
     - d/p/u/profiles-grant-unix-domain-socket-access-to-sanitize.patch
   * Add patch to fix compressed cache mtime issues (LP: #2147986):
     - d/p/u/0001-parser-fix-rewriting-of-cache-after-zstd-recompressi.patch
     - d/p/u/0002-parser-refactor-compressed-policy-cache.patch
     - d/p/u/0003-parser-handle-compressed-cache-on-kernels-without-de.patch
     - d/p/u/0004-regression-fix-the-e2e-test-for-compressed-caches.patch
   * apparmor.postinst: remove separately generated compressed cache
     (LP: #2147986)
Checksums-Sha1:
 bd51ede4a182b19e5e9be66a442649a54647f97c 3535 apparmor_5.0.0~beta1-0ubuntu7.dsc
 1803e50c1b484f9525f8196e3e97b1a4abc0ae34 148096 apparmor_5.0.0~beta1-0ubuntu7.debian.tar.xz
 8113b40deef9def3025df700a3dc3d20a126ea74 11525 apparmor_5.0.0~beta1-0ubuntu7_source.buildinfo
Checksums-Sha256:
 6eb03d4901c29489d12bea5d039ba92e09b20428b1801c8b4a97c2ec5f8951df 3535 apparmor_5.0.0~beta1-0ubuntu7.dsc
 461e713f2c1b8f3237189bc84d764d914512b8307e71b5558f2cd3917d52405b 148096 apparmor_5.0.0~beta1-0ubuntu7.debian.tar.xz
 84914e89be9736bfe54a7bc7d224bc9fbe75ca507d15d3b04c5c38a8d5be9418 11525 apparmor_5.0.0~beta1-0ubuntu7_source.buildinfo
Files:
 4635ecb8525c477505a6be94127bb7b7 3535 admin optional apparmor_5.0.0~beta1-0ubuntu7.dsc
 df7bc24c5bb5b5a20171da3be532a2e4 148096 admin optional apparmor_5.0.0~beta1-0ubuntu7.debian.tar.xz
 5fe5d0af8810e8a95afee0bec45652e4 11525 admin optional apparmor_5.0.0~beta1-0ubuntu7_source.buildinfo
Original-Maintainer: Debian AppArmor Team <pkg-apparmor-team at lists.alioth.debian.org>
Vcs-Git: https://git.launchpad.net/~seb128/ubuntu/+source/apparmor
Vcs-Git-Commit: 0738cb132fce39d9807634b16993250d8530f4f4
Vcs-Git-Ref: refs/heads/bugfixes_from_5_0_0_b1_0u6