* 08-phpsysinfo-policy-updates.patch: update for new phpsysinfo on Ubuntu
14.10
* 09-apache2-policy-instructions.patch: update for recent Debian/Ubuntu
packaging
* debian/control: update Breaks for apparmor-easyprof-ubuntu, libvirt-bin,
and lightdm. Add Breaks on rsyslog.
* Updated to r2652 snapshot of 2.8.96 (LP: #1362199, LP: #1341152)
[ Steve Beattie ]
* removed upstreamed patches:
- dnsmasq-libvirtd-signal-ptrace.patch
- update-base-abstraction-for-signals-and-ptrace.patch
- update-nameservice-abstraction-for-extrausers.patch
- debian/apparmor-profiles.install: dropped program-chunks/postfix-common,
moved to abstractions/ and covered by apparmor.install
- refreshed libapparmor-layout-deb.patch patch
* Add in Tyler Hicks' regression test improvements:
- 01-tests-unix_socket_lists.patch,
- 02-tests-accept_unix_rules_in_mkprofile.patch,
- 03-tests-unix_sockets_v7_pathnames.patch,
- 04-tests-migrate_from_poll_to_sockio_timeout.patch,
- 05-tests-add_abstract_socket_tests.patch,
* 07-parser-fix_local_perms.patch: do not output local permissions
for rules that have peer_conditionals
[ Jamie Strandboge ]
* add-chromium-browser.patch: update for unix socket mediation
* drop-peer_addr-with-local-addr-in-base.patch: don't use peer=(addr=none)
with getattr, getopt, setopt and shutdown
[ Tyler Hicks ]
* debian/lib/apparmor/functions, debian/apparmor.init,
debian/apparmor.upstart: Ensure system policy cache cannot become stale
after image based upgrades that update the system profiles (LP: #1350673)
* parser-include-usr-share-apparmor.patch, debian/apparmor.install: Adjust
the default parser.conf file, to add /usr/share/apparmor as an additional
search path when resolving include directives in profiles, and install the
file in /etc/apparmor. Ubuntu places hardware specific access rules in
/usr/share/apparmor/hardware. This change allows these files to be
included without using an absolute path (e.g.,
'#include <hardware/graphics.d>').
-- Jamie Strandboge <email address hidden> Mon, 08 Sep 2014 16:13:10 -0500
This bug was fixed in the package apparmor - 2.8.96~ 2652-0ubuntu3
--------------- 2652-0ubuntu3) utopic; urgency=medium
apparmor (2.8.96~
* 08-phpsysinfo- policy- updates. patch: update for new phpsysinfo on Ubuntu policy- instructions. patch: update for recent Debian/Ubuntu easyprof- ubuntu, libvirt-bin,
14.10
* 09-apache2-
packaging
* debian/control: update Breaks for apparmor-
and lightdm. Add Breaks on rsyslog.
apparmor (2.8.96~ 2652-0ubuntu2) utopic; urgency=medium
* 07-parser- fix_local_ perms.patch: do not output local permissions for rules
that have peer_conditionals. Patch from John Johansen
apparmor (2.8.96~ 2652-0ubuntu1) utopic; urgency=medium
* Updated to r2652 snapshot of 2.8.96 (LP: #1362199, LP: #1341152)
[ Steve Beattie ] libvirtd- signal- ptrace. patch base-abstractio n-for-signals- and-ptrace. patch nameservice- abstraction- for-extrausers. patch apparmor- profiles. install: dropped program- chunks/ postfix- common, layout- deb.patch patch unix_socket_ lists.patch, accept_ unix_rules_ in_mkprofile. patch, unix_sockets_ v7_pathnames. patch, migrate_ from_poll_ to_sockio_ timeout. patch, add_abstract_ socket_ tests.patch, fix_local_ perms.patch: do not output local permissions
* removed upstreamed patches:
- dnsmasq-
- update-
- update-
- debian/
moved to abstractions/ and covered by apparmor.install
- refreshed libapparmor-
* Add in Tyler Hicks' regression test improvements:
- 01-tests-
- 02-tests-
- 03-tests-
- 04-tests-
- 05-tests-
* 07-parser-
for rules that have peer_conditionals
[ Jamie Strandboge ] browser. patch: update for unix socket mediation addr-with- local-addr- in-base. patch: don't use peer=(addr=none)
* add-chromium-
* drop-peer_
with getattr, getopt, setopt and shutdown
[ Tyler Hicks ] lib/apparmor/ functions, debian/ apparmor. init, apparmor. upstart: Ensure system policy cache cannot become stale include- usr-share- apparmor. patch, debian/ apparmor. install: Adjust share/apparmor/ hardware. This change allows these files to be graphics. d>').
* debian/
debian/
after image based upgrades that update the system profiles (LP: #1350673)
* parser-
the default parser.conf file, to add /usr/share/apparmor as an additional
search path when resolving include directives in profiles, and install the
file in /etc/apparmor. Ubuntu places hardware specific access rules in
/usr/
included without using an absolute path (e.g.,
'#include <hardware/
-- Jamie Strandboge <email address hidden> Mon, 08 Sep 2014 16:13:10 -0500