apparmor-easyprof-ubuntu-snappy (1.3.6) vivid; urgency=medium

  * ubuntu-snappy/default (LP: #1400320): add access to app-specific temporary
    temp dir (/tmp/snapps/@{APP_PKGNAME}/@{APP_VERSION})

 -- Jamie Strandboge <jamie@ubuntu.com>  Thu, 15 Jan 2015 15:49:14 -0600

apparmor-easyprof-ubuntu-snappy (1.3.5) vivid; urgency=medium

  * debian/tests/installed*:
    - update vendor for ubuntu-snappy
    - add 'unconfined' as a template
    - add 'docker-1.3_client' as a policy group

 -- Jamie Strandboge <jamie@ubuntu.com>  Wed, 17 Dec 2014 17:20:13 -0600

apparmor-easyprof-ubuntu-snappy (1.3.4) vivid; urgency=medium

  * ubuntu-snappy/docker-1.3_client: update for ever changing paths
  * ubuntu-snappy/networking: add read for @{PROC}/sys/net/core/somaxconn
  * ubuntu-snappy/default (LP: #1400306):
    - add uptime and uname
    - add dash
    - add read access to /etc/inputrc, but not @{HOME}/.inputrc
    - also allow python2 and perl5*
    - use @{HOMEDIRS}/*/ instead of @{HOMEDIRS}/
    - allow @{PROC}/sys/kernel/hostname
    - allow @{PROC}/sys/kernel/osrelease

 -- Jamie Strandboge <jamie@ubuntu.com>  Thu, 04 Dec 2014 15:00:29 -0600

apparmor-easyprof-ubuntu-snappy (1.3.3) vivid; urgency=medium

  * ubuntu-snappy/docker-1.3_client: update for lack of composed namespace
    for docker install path
  * ubuntu-snappy/default:
    - move /var/apps back to /var/lib/apps
    - allow read-only access to all versions in
      @{HOMEDIRS}/apps/@{APP_PKGNAME}/
    - allow write access to @{HOMEDIRS}/apps/@{APP_PKGNAME}/@{APP_VERSION}
    - allow a bunch of standard scripting utilities from /bin and /usr/bin

 -- Jamie Strandboge <jamie@ubuntu.com>  Wed, 03 Dec 2014 12:36:03 -0600

apparmor-easyprof-ubuntu-snappy (1.3.2) vivid; urgency=medium

  * just ship ubuntu-snappy/default instead of ubuntu-snappy/default symlink
    pointing to ubuntu-snappy/service (ie, don't ship ubuntu-snappy/service)
  * rename ubuntu-snappy/docker-client as ubuntu-snappy/docker-1.3_client

 -- Jamie Strandboge <jamie@ubuntu.com>  Tue, 02 Dec 2014 17:39:54 -0600

apparmor-easyprof-ubuntu-snappy (1.3.1) vivid; urgency=medium

  * ubuntu-snappy/service:
    - allow perl
    - allow bash (but explicitly not the bash abstraction)
    - move from /var/lib/apps to /var/apps
    - allow read-only access to all versions in /var/apps/@{APP_PKGNAME}
    - allow write access to only /var/apps/@{APP_PKGNAME}/@{APP_VERSION}
    - allow owner access to @{HOMEDIRS}/apps/@{APP_PKGNAME}/**
    - allow openssl abstraction
  * ubuntu-snappy/networking
    - allow ssl_certs abstraction
  * add ubuntu-snappy/docker-client to this package temporarily until
    frameworks are able to extend policy themselves

 -- Jamie Strandboge <jamie@ubuntu.com>  Mon, 01 Dec 2014 15:08:18 -0600

apparmor-easyprof-ubuntu-snappy (1.3) vivid; urgency=medium

  * Initial release

 -- Jamie Strandboge <jamie@ubuntu.com>  Mon, 24 Nov 2014 16:36:47 -0600
