Change log for apparmor package in Ubuntu
| 226 → 300 of 397 results | First • Previous • Next • Last |
| Superseded in quantal-release |
apparmor (2.8.0-0ubuntu1) quantal; urgency=low
* New upstream release
- Drop the following patches, now included upstream:
0003-add-aa-easyprof.patch
0005-clean-common-from-vim.patch
0006-use-linux-capability-h.patch
0008-apparmor-lp963756.patch
0009-apparmor-lp959560-part1.patch
0010-apparmor-lp959560-part2.patch
0011-apparmor-lp872446.patch
0012-apparmor-lp978584.patch
0013-apparmor-lp800826.patch
0014-apparmor-lp979095.patch
0015-apparmor-lp963756.patch
0016-apparmor-lp968956.patch
0017-apparmor-lp979135.patch
0018-lp990931.patch
* Rename 0007-ubuntu-manpage-updates.patch to 0003
* debian/patches/0005-lp1019274.patch: add python3 support. Patch based
on work from Dmitrijs Ledkovs. (LP: #1019274)
* debian/patches/0006-cap-epollwakeup.patch: adjust severity.db for
CAP_EPOLLWAKEUP
* debian/patches/0007-setuptools-python3.patch: adjust setuptools-python3 to
adjust scripts to use PYTHON if it is defined
* debian/patches/0008-libapparmor-layout-deb.patch: use --install-layout=deb
when calling setup.py
* enable python3 in the build:
- debian/rules:
+ use python3 as default PYTHON
+ build libapparmor with both python2 and python3
- debian/control:
+ Build-Depends on python3-all-dev and python3
+ adjust apparmor to Depends on ${python3:Depends}
+ adjust apparmor-utils to Depends on ${python3:Depends}
+ add python3-libapparmor package
- add debian/python3-libapparmor.install
- debian/python-libapparmor.install: adjust to use python2 and
dist-packages
* debian/patches/0009-lp1003856.patch: update ubuntu-browsers.d/java for
IcedTea 7 (LP: #1003856)
* debian/patches/0010-lp972367.patch: allow software center to work again
from browsers (LP: #972367)
* debian/patches/0011-lp1013887.patch: let sanitized helper work with
/usr/local. Patch based on work by Reuben Thomas. (LP: #1013887)
* debian/patches/0012-lp964510.patch: allow Google Chrome and
chromium-browser to work under sanitized helper (LP: #964510)
* debian/patches/0013-lp987578.patch: ubuntu-integration does not work
properly with exo-open. Fix thanks to Mark Ramsell (LP: #987578)
* debian/patches/0014-lp933440.patch: update skype example profile to work
with latest skype. Based on work by Ivan Frederiks (LP: #933440)
-- Jamie Strandboge <email address hidden> Thu, 05 Jul 2012 10:53:17 -0500
Available diffs
- diff from 2.7.102-0ubuntu5 to 2.8.0-0ubuntu1 (91.4 KiB)
| Superseded in quantal-release |
apparmor (2.7.102-0ubuntu5) quantal; urgency=low
* debian/debhelper/postrm.apparmor: do not delete local files if main
conffile still exists since it probably means it is owned by a
new/different package. (LP: #986892)
-- Clint Byrum <email address hidden> Mon, 11 Jun 2012 21:40:33 -0700
Available diffs
- diff from 2.7.102-0ubuntu4 to 2.7.102-0ubuntu5 (598 bytes)
apparmor (2.7.102-0ubuntu3.1) precise-security; urgency=low * fix LP: #990931 - Thunderbird is being blocked by apparmor from Firefox; This was a regression from the Thunderbird path changing to a non-versioned path in the Thunderbird 12 packaging - add debian/patches/0015-lp990931.patch - update debian/patches/series -- Micah Gersten <email address hidden> Tue, 05 Jun 2012 02:11:28 -0500
Available diffs
apparmor (2.7.0~beta1+bzr1774-1ubuntu2.1) oneiric-security; urgency=low * fix LP: #989184 - Firefox 12's launcher script is not allowed in abstractions/ubuntu-browsers; This was a regression from the firefox path changing to a non-versioned path in the Firefox 12 packaging - add debian/patches/0016-lp989184.patch - update debian/patches/series * fix LP: #990931 - Thunderbird is being blocked by apparmor from Firefox; This was a regression from the Thunderbird path changing to a non-versioned path in the Thunderbird 12 packaging - add debian/patches/0015-lp990931.patch - update debian/patches/series -- Micah Gersten <email address hidden> Tue, 05 Jun 2012 02:01:04 -0500
Available diffs
apparmor (2.6.1-0ubuntu3.1) natty-security; urgency=low * fix LP: #989184 - Firefox 12's launcher script is not allowed in abstractions/ubuntu-browsers; This was a regression from the firefox path changing to a non-versioned path in the Firefox 12 packaging - add debian/patches/0016-lp989184.patch - update debian/patches/series * fix LP: #990931 - Thunderbird is being blocked by apparmor from Firefox; This was a regression from the Thunderbird path changing to a non-versioned path in the Thunderbird 12 packaging - add debian/patches/0015-lp990931.patch - update debian/patches/series -- Micah Gersten <email address hidden> Tue, 05 Jun 2012 01:54:14 -0500
Available diffs
apparmor (2.5.1-0ubuntu0.10.04.4) lucid-security; urgency=low * fix LP: #989184 - Firefox 12's launcher script is not allowed in abstractions/ubuntu-browsers; This was a regression from the firefox path changing to a non-versioned path in the Firefox 12 packaging - add debian/patches/0016-lp989184.patch - update debian/patches/series * fix LP: #990931 - Thunderbird is being blocked by apparmor from Firefox; This was a regression from the Thunderbird path changing to a non-versioned path in the Thunderbird 12 packaging - add debian/patches/0015-lp990931.patch - update debian/patches/series -- Micah Gersten <email address hidden> Wed, 30 May 2012 14:02:17 -0500
Available diffs
| Superseded in quantal-release |
apparmor (2.7.102-0ubuntu4) quantal; urgency=low * Fix FTBFS (LP: #1000055). Patch thanks to Steve Beattie. - debian/control: Build-Depends on texlive-latex-recommended - debian/rules: add V=1 for 'make' and 'make check' when building the parser * debian/patches/0018-lp990931.patch: adjust path for thunderbird to include non-versioned path - LP: #990931 -- Jamie Strandboge <email address hidden> Fri, 18 May 2012 15:02:02 -0500
Available diffs
apparmor (2.7.102-0ubuntu3) precise; urgency=low
[ Jamie Strandboge ]
* debian/patches/0007-ubuntu-manpage-updates.patch: update apparmor(5)
to describe Ubuntu's two-stage policy load and how to add utilize it
when developing policy (LP: #974089)
[ Serge Hallyn ]
* debian/apparmor.init: do nothing in a container. This can be
removed once stacked profiles are supported and used by lxc.
(LP: #978297)
[ Steve Beattie ]
* debian/patches/0008-apparmor-lp963756.patch: Fix permission mapping
for change_profile onexec (LP: #963756)
* debian/patches/0009-apparmor-lp959560-part1.patch,
debian/patches/0010-apparmor-lp959560-part2.patch: Update the parser
to support the 'in' keyword for value lists, and make mount
operations aware of 'in' keyword so they can affect the flags build
list (LP: #959560)
* debian/patches/0011-apparmor-lp872446.patch: fix logprof missing
exec events in complain mode (LP: #872446)
* debian/patches/0012-apparmor-lp978584.patch: allow inet6 access in
dovecot imap-login profile (LP: #978584)
* debian/patches/0013-apparmor-lp800826.patch: fix libapparmor
log parsing library from dropping apparmor network events that
contain ip addresses or ports in them (LP: #800826)
* debian/patches/0014-apparmor-lp979095.patch: document new mount rule
syntax and usage in apparmor.d(5) manpage (LP: #979095)
* debian/patches/0015-apparmor-lp963756.patch: Fix change_onexec
for profiles without attachment specification (LP: #963756,
LP: #978038)
* debian/patches/0016-apparmor-lp968956.patch: Fix protocol error when
loading policy to kernels without compat patches (LP: #968956)
* debian/patches/0017-apparmor-lp979135.patch: Fix change_profile to
grant access to /proc/attr api (LP: #979135)
-- Steve Beattie <email address hidden> Thu, 12 Apr 2012 06:17:42 -0500
Available diffs
| Superseded in precise-release |
apparmor (2.7.102-0ubuntu2) precise; urgency=low
* debian/control: Make dh-apparmor Multi-Arch: foreign, so that it can
satisfy cross-build-dependencies.
-- Colin Watson <email address hidden> Sat, 31 Mar 2012 02:28:05 +0100
Available diffs
- diff from 2.7.102-0ubuntu1 to 2.7.102-0ubuntu2 (547 bytes)
| Superseded in precise-release |
apparmor (2.7.102-0ubuntu1) precise; urgency=low
* New upstream release. Fixes the following issues in support of LXC
AppArmor support for beta-2:
- Fix the return size of aa_getprocattr (LP: #962521)
- Fix mnt_flags passed for remount
- Fix dfa minimization around the nonmatching state
- Factor all the permissions dump code into a single perms method
* debian/apparmor-utils.install:
- AppArmor now installs apparmor.vim. Move it into place
- install aa-exec
* debian/apparmor-utils.manpages: install aa-exec man page
* debian/patches/0003-add-aa-easyprof.patch: refresh for Makefile changes
* debian/patches/0005-clean-common-from-vim.patch: clean up 'common'
symlink
* 0006-use-linux-capability-h.patch: Use linux/capability.h instead of
sys/capability.h
-- Jamie Strandboge <email address hidden> Thu, 22 Mar 2012 15:39:56 -0500
Available diffs
| Superseded in precise-release |
apparmor (2.7.101-0ubuntu1) precise; urgency=low * New upstream release. Fixes: LP: #948147 * debian/lib/apparmor/functions: Update to support the feature directory so that caching will work on kernels that support the feature dir. Patch based on work from John Johansen. LP: #954469 -- Jamie Strandboge <email address hidden> Thu, 15 Mar 2012 15:57:02 -0500
Available diffs
| Superseded in precise-release |
apparmor (2.7.100-0ubuntu1) precise; urgency=low
* New upstream bug fix release which fixes (in addition to other bugs):
- LP: #940362
- LP: #947617
- LP: #949891
* Drop the following patches, included upstream:
- 0004-lp918879.patch
- 0007-lp941506.patch
- 0008-lp941503.patch
- 0009-lp943161.patch
* Drop the following patch, no longer required:
- 0005-disable-minimization.patch
* Rename 0006-lp941808.patch 0004-lp941808.patch
* debian/patches/0001-add-chromium-browser.patch: update for additional
denials with newer chromium-browser. (LP: #937723)
* debian/put-all-profiles-in-complain-mode.sh: deal with existing flags
-- Jamie Strandboge <email address hidden> Fri, 09 Mar 2012 06:56:48 -0600
Available diffs
| Superseded in precise-release |
apparmor (2.7.99-0ubuntu4) precise; urgency=low
* Restore dpkg-maintscript-helper changes from 2.7.0-0ubuntu6, lost in
2.7.99-0ubuntu1.
-- Colin Watson <email address hidden> Mon, 05 Mar 2012 16:11:01 +0000
Available diffs
- diff from 2.7.99-0ubuntu3 to 2.7.99-0ubuntu4 (928 bytes)
| Superseded in precise-release |
apparmor (2.7.99-0ubuntu3) precise; urgency=low
* debian/patches/0009-lp943161.patch: update to not fail when
default-jre-headless is installed (LP: #945019)
-- Jamie Strandboge <email address hidden> Fri, 02 Mar 2012 12:47:03 -0600
Available diffs
- diff from 2.7.99-0ubuntu2 to 2.7.99-0ubuntu3 (903 bytes)
| Superseded in precise-release |
apparmor (2.7.99-0ubuntu2) precise; urgency=low
* debian/control: dh-apparmor should Breaks/Replaces on debhelper
9.20120115ubuntu3, not 9.20120115ubuntu2
* debian/patches/0006-lp941808.patch: allow writes to
/{,var/}run/sendsigs.omit.d/*dnsmasq.pid for network manager integration
(LP: #941808)
* debian/patches/0007-lp941506.patch: allow reads to ~/.drirc in the X
abstraction (LP: #941506)
* debian/patches/0008-lp941503.patch: allow read access to
/usr/share/texmf/fonts in fonts abstraction (LP: #941503)
* debian/patches/0009-lp943161.patch: fix path to java in
ubuntu-browsers.d/java (LP: #943161)
-- Jamie Strandboge <email address hidden> Fri, 02 Mar 2012 07:50:50 -0600
Available diffs
| Superseded in precise-release |
apparmor (2.7.99-0ubuntu1) precise; urgency=low
* New upstream release which also pulls in 2.7.0-1 changes from Debian.
For the sake of simplicity, I have added the 2.7.0-1 changelog entry after
2.7.0-0ubuntu7 even though chronologically it appeared in Debian between
2.7.0-0ubuntu4 and 2.7.0-0ubuntu5.
- LP: #940422 (FFe)
* Drop the following patches, included upstream:
- 0003-commits-through-r1882.patch
- 0004-lp887992.patch
- 0005-lp884748.patch
- 0006-lp870992.patch
- 0007-lp860856.patch
- 0008-lp852062.patch
- 0009-lp851977.patch
- 0010-lp890894.patch
- 0011-lp817956.patch
- 0012-lp458922.patch
- 0013-lp769148.patch
- 0014-lp904548.patch
- 0015-lp712584.patch
- 0016-lp562831.patch
- 0017-lp662906.patch
- 0018-deny-home-pki-so.patch
- 0019-lp899963.patch
- 0020-lp912754a.patch
- 0021-lp912754b.patch
- 0022-workaround-lp851986.patch
- 0023-syslog-ng-needs-dac-read-search.patch
- 0024-fix-python-and-ruby-autogeneration.patch
- 0025-lp914184.patch
- 0026-lp914190.patch
- 0027-lp914386.patch
- 0028-testsuite-fixes.patch
- 0029-lp917628.patch
- 0030-lp916285.patch
- 0031-lp917639.patch
- 0032-lp917641.patch
- 0033-add-ubuntu-helpers-to-plugins-common.patch
- 0034-lp917859.patch
- 0035-kde-should-use-kde4.patch
- 0036-lp929531.patch
- 0036-fix-manpage-errors.patch
* Rename 0037-add-aa-easyprof.patch 0003-add-aa-easyprof.patch
* debian/apparmor-profiles.postrm: clean out autogenerated files created by
apparmor-profiles.postinst (Closes: 656451)
* debian/patches/0004-lp918879.patch: allow /etc/drirc in the X abstraction
(LP: #918879)
* debian/patches/0005-disable-minimization.patch: do to LP: 940362,
minimization is not working correctly. Disable it for now.
Available diffs
- diff from 2.7.0-0ubuntu7 to 2.7.99-0ubuntu1 (171.8 KiB)
| Superseded in precise-release |
apparmor (2.7.0-0ubuntu7) precise; urgency=low
* debian/patches/0037-add-aa-easyprof.patch: add the aa-easyprof tool
* apparmor-utils.dirs, apparmor-utils.install, apparmor-utils.manpages:
install aa-easyprof and supporting files
* python-libapparmor.install: only install LibAppArmor*
* debian/rules: use dh_python2 with apparmor-utils
* debian/control: apparmor-utils should Depends on ${python:Depends}
-- Jamie Strandboge <email address hidden> Wed, 15 Feb 2012 07:40:38 -0600
Available diffs
- diff from 2.7.0-0ubuntu6 to 2.7.0-0ubuntu7 (14.3 KiB)
| Superseded in precise-release |
apparmor (2.7.0-0ubuntu6) precise; urgency=low
* debian/apparmor.{preinst,postinst,postrm,maintscript}, debian/control:
Use maintscript support in dh_installdeb rather than writing out
dpkg-maintscript-helper commands by hand. We now simply Pre-Depend on a
new enough version of dpkg rather than using 'dpkg-maintscript-helper
supports' guards, leading to more predictable behaviour on upgrades.
-- Colin Watson <email address hidden> Sat, 11 Feb 2012 15:11:01 +0000
Available diffs
| Superseded in precise-release |
apparmor (2.7.0-0ubuntu5) precise; urgency=low
* debian/patches/0036-lp929531.patch: adjust base abstraction to allow read
access to /sys/devices/system/cpu/online (LP: #929531)
-- Jamie Strandboge <email address hidden> Thu, 09 Feb 2012 08:04:13 -0600
Available diffs
- diff from 2.7.0-0ubuntu4 to 2.7.0-0ubuntu5 (953 bytes)
| Superseded in precise-release |
apparmor (2.7.0-0ubuntu4) precise; urgency=low
* debian/patches/0034-lp917859.patch: adjust aspell abstraction for user
customizable dictionaries (LP: #917859)
* debian/patches/0035-kde-should-use-kde4.patch: adjust abstractions to
use kde{,4} instead of kde
* debian/control: update Vcs-Bzr
-- Jamie Strandboge <email address hidden> Wed, 18 Jan 2012 16:27:30 -0600
Available diffs
| Superseded in precise-release |
apparmor (2.7.0-0ubuntu3) precise; urgency=low
* debian/patches/0029-lp917628.patch: Adjust dnsmasq profile for
NetworkManager integration (LP: #917628)
* debian/patches/0030-lp916285.patch: update ubuntu-browsers.d/text-editors
to work with emacs2[2-9] (LP: #916285)
* debian/patches/0031-lp917639.patch: update p11-kit to allow mmap of
libraries in pkcs directories (LP: #917639)
* debian/patches/0032-lp917641.patch: ubuntu-integration abstraction for
multiarch with gst-plugin-scanner (LP: #917641)
* debian/patches/0033-add-ubuntu-helpers-to-plugins-common.patch: include
ubuntu-helpers in the plugins-common abstraction
-- Jamie Strandboge <email address hidden> Tue, 17 Jan 2012 07:18:34 -0600
Available diffs
| Superseded in precise-release |
apparmor (2.7.0-0ubuntu2) precise; urgency=low
* debian/patches/0022-workaround-lp851986.patch: update sanitized_helper
to include inet6
-- Jamie Strandboge <email address hidden> Fri, 13 Jan 2012 11:21:30 +0100
Available diffs
| Superseded in precise-release |
apparmor (2.7.0-0ubuntu1) precise; urgency=low
* New upstream release. Fixes the following:
- LP: #794974
- LP: #815883
- LP: #840973
* Drop the following patches, included upstream:
- af_names-generation.patch
- 0004-adjust-logprof-log-search-order.patch
- 0005-lp826914.patch
- 0006-lp838275.patch
- 0007-fix-introspection-tests.patch
* Rename 0003-add-debian-integration-to-lighttpd.patch to 0002
* debian/patches/0003-commits-through-r1882.patch: several bug,
documentation and performance fixes on our road to AppArmor 2.8
(LP: #840734, LP: #905412)
* debian/patches/0004-lp887992.patch: cups-client abstraction should allow
owner read of @{HOME}/.cups/client.conf and @{HOME}/.cups/lpoptions
(LP: #887992)
* update debian/patches/0001-add-chromium-browser.patch for deeper
directories of /sys/devices/pci (LP: #885833)
* debian/patches/0005-lp884748.patch: allow kate as text editor in the
browsers abstraction (LP: #884748)
* debian/patches/0006-lp870992.patch: abstractions/fonts should allow access
to ~/.fonts.conf.d (LP: #870992)
* debian/patches/0007-lp860856.patch: allow read access to sitecustomize.py
in the python abstraction, which is needed for apport hooks to work in
python applications (LP: #860856)
* debian/patches/0008-lp852062.patch: update binaries for transmission
clients (LP: #852062)
* debian/patches/0009-lp851977.patch: allow ixr access to exo-open for
Xubuntu and friends (LP: #851977)
* debian/patches/0010-lp890894.patch: allow access to Thunar as well as
thunar in ubuntu-integration abstraction (LP: #890894)
* debian/patches/0011-lp817956.patch: update usr.sbin.sshd example profile
(LP: #817956)
* debian/patches/0012-lp458922.patch: update dovecot deliver profile to
access various .conf files for dovecot (LP: #458922)
* debian/patches/0013-lp769148.patch: allow avahi to do dbus introspection
(LP: #769148)
* debian/patches/0014-lp904548.patch: fix typo for multiarch line for gconv
(LP: #904548)
* debian/patches/0015-lp712584.patch: Nvidia users need access to
/dev/nvidia* files for various plugins to work right. Since these are all
focused around multimedia, add the acceses to the multimedia abstraction.
(LP: #712584)
* debian/patches/0016-lp562831.patch: allow fireclam plugin to work
(LP: #562831)
* debian/patches/0017-lp662906.patch: allow software-center in the ubuntu
integration browser abstraction (LP: #662906)
* debian/patches/0018-deny-home-pki-so.patch: update private-files
abstraction to deny write and link to ~/.pki/nssdb/*so files (LP: #911847)
* debian/patches/0019-lp899963.patch: add audacity to the
ubuntu-media-players abstraction (LP: #899963)
* debian/patches/0020-lp912754a.patch,0021-lp912754b.patch: add p11-kit
abstraction and add it to the authentication abstraction (LP: #912754)
* debian/patches/0022-workaround-lp851986.patch: instead of using Ux
in the ubuntu and launchpad abstractions, use a helper child profile.
This will help work around the lack of environment filtering
(LP: #851986)
* debian/patches/0023-syslog-ng-needs-dac-read-search.patch: adjust syslog-ng
profile for dac_read_search
* debian/patches/0024-fix-python-and-ruby-autogeneration.patch: fix python
and ruby autogeneration when using aa-autodep and aa-genprof
* debian/patches/0025-lp914184.patch: allow the creation of enchant .config
directory in the enchant abstraction (LP: #914184)
* debian/patches/0026-lp914190.patch: block write access to ~/.kde/env
because KDE automatically sources scripts in that folder on startup
(LP: #914190)
* debian/pathes/0027-lp914386.patch: add xdg-desktop abstraction and
adjust gnome and kde abstractions to use it (LP: #914386)
* debian/patches/0028-testsuite-fixes.patch: testsuite fixes in the kernel
regression tests
-- Jamie Strandboge <email address hidden> Thu, 12 Jan 2012 12:55:17 +0100
Available diffs
| Superseded in precise-release |
apparmor (2.7.0~beta1+bzr1774-1ubuntu3) precise; urgency=low * Rebuild for Perl 5.14. -- Colin Watson <email address hidden> Tue, 15 Nov 2011 22:10:05 +0000
Available diffs
apparmor (2.7.0~beta1+bzr1774-1ubuntu2) oneiric; urgency=low
* 0007-fix-introspection-tests.patch: Add missing introspection regression
test that should have been checked in with the introspection patches.
-- Jamie Strandboge <email address hidden> Tue, 04 Oct 2011 13:13:05 -0500
Available diffs
| Superseded in oneiric-release |
apparmor (2.7.0~beta1+bzr1774-1ubuntu1) oneiric; urgency=low
* 0004-adjust-logprof-log-search-order.patch: Adjust the search order to use
just /var/log/audit/audit.log and /var/log/syslog. (LP: #835838)
* 0005-lp826914.patch: fix missing multiarch in abstraction/X (LP: #826914)
* 0006-lp838275.patch: adjust ubuntu-email abstraction for thunderbird 7
(LP: #838275)
-- Jamie Strandboge <email address hidden> Fri, 02 Sep 2011 12:30:10 -0500
Available diffs
| Superseded in oneiric-release |
apparmor (2.7.0~beta1+bzr1774-1) unstable; urgency=low
* New upstream devel snapshot:
- drop 0002-lp750381.patch, taken upstream.
- drop 0004-lp754889.patch, taken upstream.
- drop 0005-lp761217.patch, taken upstream.
- drop 0100-manpage-typo.patch, taken upstream.
- drop 0101-declarations.patch, solved differently upstream.
- drop 0102-manpage-release-name.patch, taken upstream.
- drop 0103-kfreebsd-compile.patch, taken upstream.
- drop define-path-max.patch, taken upstream.
- drop indep-build.patch, taken upstream.
- debian/libapparmor1.manpages: add new function man pages.
* Merge with Ubuntu:
- drop 0104-python-aa-status.patch, taken upstream.
- drop 0105-lightdm.patch, taken upstream.
- drop 0106-lp810270.patch, taken upstream.
- drop 0107-lp767308.patch, taken upstream.
- drop 0108-gnome-mimeinfo.patch, taken upstream.
- drop 0109-add-profile-repo-info.patch, taken upstream.
* Add af_names-generation.patch to allow arbitrary socket.h file location.
-- Kees Cook <email address hidden> Thu, 11 Aug 2011 17:55:28 +0000
Available diffs
| Superseded in oneiric-release |
apparmor (2.6.1-4ubuntu5) oneiric; urgency=low
* debian/patches/0109-add-profile-repo-info.patch: add a blurb about the
new profiles repository to aa-genprof, along with a link to the wiki
page.
-- Marc Deslauriers <email address hidden> Mon, 18 Jul 2011 10:49:13 -0400
Available diffs
| Superseded in oneiric-release |
apparmor (2.6.1-4ubuntu4) oneiric; urgency=low * debian/patches/0106-lp810270.patch: updated to use upstream commits -- Jamie Strandboge <email address hidden> Fri, 15 Jul 2011 14:08:38 -0500
Available diffs
- diff from 2.6.1-4ubuntu3 to 2.6.1-4ubuntu4 (730 bytes)
| Superseded in oneiric-release |
apparmor (2.6.1-4ubuntu3) oneiric; urgency=low
* debian/patches/0106-lp810270.patch: adjustments for /var/run -> /run,
/var/lock -> /run/lock and /dev/shm -> /run/shm transition (LP: #810270)
* debian/patches/0107-lp767308.patch: allow read access to
/usr/local/share/ca-certificates (LP: #767308)
* debian/patches/0001-add-chromium-browser.patch: updates for newer chromium
(LP: #776648)
* debian/patches/0108-gnome-mimeinfo.patch: allow read access to
/usr/share/gnome/applications/mimeinfo.cache in the gnome abstraction
-- Jamie Strandboge <email address hidden> Thu, 14 Jul 2011 09:39:49 -0500
Available diffs
| Superseded in oneiric-release |
apparmor (2.6.1-4ubuntu2) oneiric; urgency=low
* debian/patches/0105-lightdm.patch: allow owner read access to
/var/run/lightdm/authority/[0-9]*
-- Jamie Strandboge <email address hidden> Wed, 22 Jun 2011 16:29:11 -0500
Available diffs
- diff from 2.6.1-4ubuntu1 to 2.6.1-4ubuntu2 (941 bytes)
| Superseded in oneiric-release |
apparmor (2.6.1-4ubuntu1) oneiric; urgency=low
* Get rid of Perl in main AppArmor package so we can remove perl-modules
from the installation cd:
- debian/patches/0104-python-aa-status.patch: switch aa-status to
Python
- debian/apparmor.*, debian/apparmor-utils.*: move aa-status, symlink
and manpages to main apparmor package.
- debian/control: add appropriate Breaks/Replaces/Depends because of
the file move, add ${python:Depends} to apparmor Depends, add
apparmor-utils to apparmor Suggests.
- debian/rules: add apparmor package to dh_python2.
* debian/lib/apparmor/functions: fix hat separator (LP: #788616)
- Based on upstream revision 1733
-- Marc Deslauriers <email address hidden> Wed, 01 Jun 2011 11:03:20 -0400
Available diffs
- diff from 2.6.1-4 to 2.6.1-4ubuntu1 (5.5 KiB)
apparmor (2.6.1-4) unstable; urgency=low
* debian/po: add new translations:
- zh_CN.po: Simplified Chinese, thanks to Aron Xu (Closes: 624853).
- da.po: Danish, thanks to Joe Dalton (Closes: 625252).
- sv.po: Swedish, thanks to Martin Bagge (Closes: 625264).
- cs.po: Czech, thanks to Michal Šimůnek (Closes: 625465).
- de.po: German, thanks to Chris Leick (Closes: 625931).
- nl.po: Dutch, thanks to Jeroen Schot (Closes: 626269).
- ja.po: Japanese, thanks to Hideki Yamane (Closes: 626803).
- it.po: Italian, thanks to Dario Santamaria (Closes: 626836).
- fr.po: French, thanks to Julien Patriarca (Closes: 626903).
- es.po: Spanish, thanks to Francisco Javier Cuadrado (Closes: 627031).
* debian/patches/define-path-max.patch: fix Hurd FTBFS.
* debian/patches/indep-build.patch: allow split indep/arch builds.
* debian/{control,rules,non-linux}: add fake parser for non-Linux
builds so that apparmor-utils is installable (Closes: 625977).
-- Ubuntu Archive Auto-Sync <email address hidden> Sat, 28 May 2011 08:18:35 +0000
Available diffs
- diff from 2.6.1-3 to 2.6.1-4 (6.5 KiB)
apparmor (2.6.1-3) unstable; urgency=low
* debian/control: add sneaky missing Build-Dep on liblocale-gettext-perl
(fixes FTBFS on some extremely minimal chroots, Closes: 624566).
* debian/patches/0101-declarations.patch: add missing declarations needed
for sensitive compilers (fixes FTBFS on mips/mipsel).
* debian/patches/0102-manpage-release-name.patch: update manpage release
names to match others.
* debian/patches/0103-kfreebsd-compile.patch, debian/{control,rules}:
attempt to build as much as possible (no parser) on non-Linux systems.
* debian/po/ru.po: add translation, thanks to Yuri Kozlov (Closes: 624741).
Available diffs
- diff from 2.6.1-0ubuntu3 to 2.6.1-3 (10.1 KiB)
apparmor (2.6.1-0ubuntu3) natty; urgency=low
* debian/patches/0003-add-debian-integration-to-lighttpd.patch: updates for
lighttpd example profile to work in Debian/Ubuntu (LP: #582814)
* debian/patches/0004-lp754889.patch: add several image viewers to
ubuntu-browsers.d/multimedia abstraction (LP: #754889)
* debian/patches/0005-lp761217.patch: abstractions/private-files updates for
zsh and several other shells (LP: #761217)
* debian/patches/0001-add-chromium-browser.patch: fixes for multiarch and
crash reporter (LP: #764786)
-- Jamie Strandboge <email address hidden> Mon, 18 Apr 2011 09:23:50 -0500
Available diffs
| Superseded in natty-release |
apparmor (2.6.1-0ubuntu2) natty; urgency=low
* debian/patches/0002-lp750381.path: adjust ubuntu-media-players abstraction
to allow reading of configs required by gnash and owner writing of
@{HOME}/.gnash (LP: #750381)
-- Jamie Strandboge <email address hidden> Thu, 07 Apr 2011 10:09:24 -0500
Available diffs
- diff from 2.6.1-0ubuntu1 to 2.6.1-0ubuntu2 (865 bytes)
| Superseded in natty-release |
apparmor (2.6.1-0ubuntu1) natty; urgency=low
* New upstream release.
- Fixes breakage of mod_apparmor apache2 module (LP: #737074)
- Fixes profile matching when an attachement doesn't contain a
regex (LP: #731155)
- Fixes parser acceptance of missing network protocols (LP: #732837)
- Patches taken upstream and dropped:
+ debian/patches/0002-lp727478.patch
+ debian/patches/0003-test-lp727478.patch
+ debian/patches/0004-lp736870.patch
* debian/apparmor.install, debian/apparmor.dirs: add new multiarch
tunable file and directory
* debian/python-libapparmor.install: loosen directory specification
for resiliancy against different python versions
-- Steve Beattie <email address hidden> Thu, 24 Mar 2011 01:55:12 -0700
Available diffs
- diff from 2.6.0-0ubuntu4 to 2.6.1-0ubuntu1 (11.3 KiB)
| Superseded in natty-release |
apparmor (2.6.0-0ubuntu4) natty; urgency=low * Update debian/patches/0004-lp736870.patch (LP: #736870): - armel triplet doesn't match '*-linux-gnu' - /lib/tls for libc6-xen needs handling - gnome, kde, kerberosclient, and authentication abstractions also need updating for multiarch. -- Steve Langasek <email address hidden> Tue, 22 Mar 2011 15:18:54 -0700
Available diffs
| Superseded in natty-release |
apparmor (2.6.0-0ubuntu3) natty; urgency=low
* debian/patches/0004-lp736870.patch: add multiarch support to abstractions
(LP: #736870)
-- Jamie Strandboge <email address hidden> Thu, 17 Mar 2011 09:17:01 -0500
Available diffs
- diff from 2.6.0-0ubuntu2 to 2.6.0-0ubuntu3 (1017 bytes)
| Superseded in natty-release |
apparmor (2.6.0-0ubuntu2) natty; urgency=low
* debian/patches/0002-lp727478.patch: Override AF_MAX for kernels that don't
support proper masking. Patch thanks to John Johansen (LP: #727478)
* debian/patches/0003-test-lp727478.patch: add tcp.sh test as partial
networking test
-- Jamie Strandboge <email address hidden> Thu, 03 Mar 2011 16:40:08 -0600
Available diffs
| Superseded in natty-release |
apparmor (2.6.0-0ubuntu1) natty; urgency=low [ Steve Beattie ] * New upstream 2.6.0 release (LP: #724193) - Patches taken upstream and dropped: + 0001-ubuntu-buildd.patch + 0003-add-libvirt-support-to-dnsmasq.patch + 0004-lp698194.patch + 0005-aa-disable.patch - debian/rules: remove library path settings for mod_apparmor and pam_apprmor builds; upstream handles this properly now. - debian/apparmor-utils.install: handle upstream SubDomain.pm => AppArmor.pm renaming * debian/lib/apparmor/functions: handle profile names with embedded spaces (LP: #655523) * debian/rules, debian/control, debian/python-libapparmor: build a python-libapparmor package. [ Jamie Strandboge ] * debian/copyright: update and reformat according to DEP-5 * debian/lib/apparmor/functions: don't unload dynamically generated libvirt profiles on reload, restart, and force-reload (LP: #702774) * debian/control: use Section: python for python-libapparmor -- Steve Beattie <email address hidden> Thu, 24 Feb 2011 01:41:58 -0800
Available diffs
| Superseded in natty-release |
apparmor (2.6~devel+bzr1617-0ubuntu2) natty; urgency=low * debian/patches/0005-aa-disable.patch: add aa-disable * debian/apparmor-utils.install: install aa-disable * debian/apparmor-utils.manpages: install aa-disable man page -- Jamie Strandboge <email address hidden> Mon, 07 Feb 2011 11:23:50 -0600
Available diffs
apparmor (2.5.1-0ubuntu0.10.04.3) lucid-proposed; urgency=low
* debian/patches/0014-lp698194.patch: explicitly deny access to autostart
directories, chromium, some popular email clients and kwallet
- LP: #698194
-- Jamie Strandboge <email address hidden> Sun, 16 Jan 2011 10:09:03 -0600
Available diffs
apparmor (2.5.1-0ubuntu0.10.10.4) maverick-proposed; urgency=low
* debian/patches/0012-lp698194.patch: explicitly deny access to autostart
directories, chromium, some popular email clients and kwallet
- LP: #698194
-- Jamie Strandboge <email address hidden> Sun, 16 Jan 2011 09:57:11 -0600
Available diffs
| Superseded in natty-release |
apparmor (2.6~devel+bzr1617-0ubuntu1) natty; urgency=low
* Merge with upstream bzr revision 1617. Closes the following bugs:
- LP: #692406: temporarily disable the defunct repository until an
alternative can be used
- LP: #649497: add ibus abstraction
- LP: #652562: allow 'rw' to /var/log/samba/cores/
- LP: #658135: allow access to /usr/lib32 and /usr/lib64 for dri modules
* 0002-add-chromium-browser.patch: add /dev/shm/.org.chromium.*
(LP: #692866)
* rename debian/patches/0010-ubuntu-buildd.patch to 0001-ubuntu-buildd.patch
and adjust debian/patches/series
* debian/patches/0003-add-libvirt-support-to-dnsmasq.patch (LP: #697239):
- allow read and write access to libvirt pid files for dnsmasq
- allow net_admin capability for DHCP server
- allow net_raw and network inet raw for ICMP pings when used as a DHCP
server
* debian/patches/0004-lp698194 (LP: #698194):
- abstractions/private-files: don't allow wl to autostart directories
- abstractions/private-files-strict: don't allow access to chromium,
kwallet and popular mail clients
-- Jamie Strandboge <email address hidden> Fri, 07 Jan 2011 12:44:26 -0600
Available diffs
apparmor (2.3.1+1403-0ubuntu27.4) karmic-security; urgency=low
* Fix for apparmor_parser not generating correct policy when mixing exec
transitions with and without unconfined fallback transitions.
- parser/immunix.h, parser/libapparmor_re/regexp.y: adjust dfa match flag
table size and fix index calculation for pux and cux.
- parser/tst/Makefile, parser/tst/gen-xtrans.pl,
parser/tst/simple_tests/generated_x/readme: add comprehensive test cases
- LP: #693082
* debian/control: Build-Depends on libpam0g-dev
-- Jamie Strandboge <email address hidden> Wed, 05 Jan 2011 12:25:20 -0600
Available diffs
apparmor (2.5.1-0ubuntu0.10.10.3) maverick-security; urgency=low
* Fix for apparmor_parser not generating correct policy when mixing exec
transitions with and without unconfined fallback transitions.
- debian/patches/0011-lp693082.patch: adjust dfa match flag table size
and fix index calculation for pux and cux.
- LP: #693082
-- Jamie Strandboge <email address hidden> Wed, 05 Jan 2011 12:23:53 -0600
Available diffs
apparmor (2.5.1-0ubuntu0.10.04.2) lucid-security; urgency=low
* Fix for apparmor_parser not generating correct policy when mixing exec
transitions with and without unconfined fallback transitions.
- debian/patches/0013-lp693082.patch: adjust dfa match flag table size
and fix index calculation for pux and cux.
- LP: #693082
-- Jamie Strandboge <email address hidden> Wed, 05 Jan 2011 12:15:29 -0600
Available diffs
| Superseded in natty-release |
apparmor (2.6~devel+bzr1601-0ubuntu1) natty; urgency=low
* Merge with upstream bzr revision 1601 to gain parser speed
improvements and man page fixes. Closes the following bugs:
- LP: #349049: document audit, deny and owner rule qualifiers
- LP: #466228: ubuntu-browsers.d/multimedia: allow flash printing
- LP: #644983: add ubuntu-browsers.d/ubuntu-integration-xul
- LP: #692216: use aa_change_hat() instead of change_hat()
- LP: #692217: add aa_change_profile.pod manpage
* debian/control: explicitly depend on gettext module.
* ship apparmor vim syntax file (LP: #646800):
- debian/vim-apparmor.yaml: vim addon definition file.
- debian/apparmor-utils.install: add apparmor.vim and vim-apparmor.yaml.
* debian/libapparmor1.manpages: ship aa_change_profile manpage.
-- Kees Cook <email address hidden> Mon, 20 Dec 2010 14:37:38 -0800
Available diffs
apparmor (2.1+1075-0ubuntu9.3) hardy-proposed; urgency=low
* abstractions/base: backport the rule that allows /proc/*/maps
so that libc6 catch_segfault() can read them and because
other glibc *printf protections read the maps file too.
(LP: #668479)
-- Ken Stailey <email address hidden> Tue, 29 Oct 2010 14:14:14 -0400
Available diffs
| Superseded in natty-release |
apparmor (2.6~devel+bzr1527-0ubuntu1) natty; urgency=low
* Merge with upstream bzr revision 1527, drop patches taken upstream:
- debian/patches/0001-fix-release.patch
- debian/patches/0003-local-includes.patch
- debian/patches/0004-ubuntu-abstractions-updates.patch
- debian/patches/0005-lp648900.patch
- debian/patches/0006-testsuite-fixes.patch
- debian/patches/0007-honor-cflags.patch
- debian/patches/0008-lp652674.patch
- debian/patches/0009-sensible-browser-pix.patch
* Rework packaging for more sanity.
- debian/control:
- bump debhelper build depend to Ubuntu-specific v8.
- switch apparmor-profiles to arch all as it ships only text.
- update Homepage to new domain.
- expand long descriptions to keep lintian happy.
- debian/compat: bump to 8.
- README.Debian: removed, hopelessly out of date.
- debian/copyright:
- updated for changes to upstream source layout.
- fixed lintian warnings.
- debian/rules:
- ditch mv/install in favor of *.install,*.dir files.
- replace "dh_clean -k" with "dh_prep"
- use dh_clean's debian/clean file instead of manual rm.
- scan for all profiles to run through dh_apparmor.
- debian/*.{install,dirs,manpages,docs}:
- explicitly list all files needed for packaging
- debian/apparmor.{preinst,postinst,postrm}:
- add dpkg-maintscript-helper calls to clean up old script locations.
- drop old conffile cleanups, since they predate Lucid.
- debian/apparmor.init:
- move functions to /lib/apparmor.
- start on $remote_fs due to using /usr tools during init.
- use LC_COLLATE=C for proper sorting.
- debian/libapparmor1.symbols: created initial symbols file.
- debian/apparmor-docs.doc-base: include doc-base details for techdoc.
- debian/notify/90apparmor-notify: use new command name.
- lib/apparmor/functions: use LC_COLLATE=C for proper sorting.
-- Kees Cook <email address hidden> Thu, 04 Nov 2010 18:06:34 -0700
Available diffs
apparmor (2.5.1-0ubuntu0.10.04.1) lucid-proposed; urgency=low
* Backport 2.5.1-0ubuntu0.10.10.1 from maverick for userspace tools to work
with newer kernels (LP: #660077)
NOTE: user-tmp now uses 'owner' match, so non-default profiles will have
to be adjusted when 2 separately confined applications that both use the
user-tmp abstraction depend on being able to cooperatively share files
with each other in /tmp or /var/tmp.
* remove the following patches (features not appropriate for SRU):
- 0002-add-chromium-browser.patch
- 0003-local-includes.patch
- 0004-ubuntu-abstractions-updates.patch
* debian/rules (this makes it the same as what was shipped in 10.04 LTS
release):
- don't ship aa-update-browser and its man page (requires
0004-ubuntu-abstractions-updates.patch)
- don't ship apparmor.d/local/ (requires 0003-local-includes.patch)
- don't use dh_apparmor (not in Ubuntu 10.04 LTS)
- don't ship chromium profile
* remove debian/profiles/chromium-browser
* remove debian/aa-update-browser*
* debian/apparmor-profiles.postinst: revert to that in lucid release
(requires dh_apparmor and 0002-add-chromium-browser.patch)
* remove debian/apparmor-profiles.postrm: doesn't make sense without
0002-add-chromium-browser.patch
* debian/control:
- revert Build-Depends on debhelper (>= 5)
- revert Standards-Version to 3.8.4
- revert Vcs-Bzr
- use Conflicts/Replaces version that was in Ubuntu 10.04 LTS
* debian/patches/0011-lucid-compat-dbus.patch: move /var/lib/dbus/machine-id
back into dbus, since profiles on 10.04 LTS expect it there
* debian/patches/0012-lucid-compat-kde.patch: add kde4-config to kde
abstraction, since the firefox profile on Ubuntu 10.04 LTS expects it to
be there
Available diffs
- diff from 2.5-0ubuntu3 to 2.5.1-0ubuntu0.10.04.1 (960.6 KiB)
apparmor (2.5.1-0ubuntu0.10.10.2) maverick-proposed; urgency=low * New upstream release (LP: #660077) - The following patches were refreshed: + 0001-fix-release.patch + 0003-local-includes.patch + 0004-ubuntu-abstractions-updates.patch + 0008-lp648900.patch: renamed as 0005-lp648900.patch - The following patches were dropped (included upstream): + 0005-lp601583.patch + 0006-network-interface-enumeration.patch + 0007-gnome-updates.patch * debian/patches/0006-testsuite-fixes.patch: testsuite fixes from head of 2.5 branch. These are needed for QRT and SRU testing (LP: #652211) * debian/patches/0007-honor-cflags.patch: have the parser makefile honor CFLAGS environment variable. Brings back missing symbols for the retracer * debian/patches/0008-lp652674.patch: fix warnings for messages without denied or requested masks (LP: #652674) * debian/apparmor.init: fix path to aa-status (LP: #654841) * debian/apport/source_apparmor.py: apport hook should use root_command_hook() for running apparmor_status (LP: #655529) * debian/apport/source_apparmor.py: use ProcKernelCmdline and don't clobber cmdline details (LP: #657091) * debian/{rules,control}: move apache2 abstractions into the base package so we can put apache2 profiles into the -profiles package without aa-logprof bailing out. Patch by Marc Deslauriers. (LP: #539441) * debian/patches/0009-sensible-browser-pix.patch: use Pix with sensible-browser * debian/patches/0010-ubuntu-buildd.patch: skip parser caching test if the AppArmor securityfs introspection directory is not mounted, as is the case on Ubuntu buildds. -- Jamie Strandboge <email address hidden> Tue, 02 Nov 2010 12:04:06 -0500
Available diffs
| Superseded in natty-release |
apparmor (2.5.1-0ubuntu4) natty; urgency=low
* debian/patches/0004-ubuntu-abstractions-updates.patch: updated to add
/usr/bin/emacs-snapshot-gtk PUxr
* debian/patches/0009-sensible-browser-pix.patch: use Pix for
sensible-browser
* debian/patches/0010-ubuntu-buildd.patch: skip parser caching test if
the AppArmor securityfs introspection directory is not mounted, as
is the case on Ubuntu buildds.
-- Jamie Strandboge <email address hidden> Tue, 02 Nov 2010 12:17:21 -0500
Available diffs
| Superseded in natty-release |
apparmor (2.5.1-0ubuntu3) natty; urgency=low * debian/control: use the correct version for Conflicts/Replaces -- Jamie Strandboge <email address hidden> Tue, 19 Oct 2010 19:53:26 -0500
Available diffs
- diff from 2.5.1-0ubuntu2 to 2.5.1-0ubuntu3 (565 bytes)
| Superseded in maverick-proposed |
apparmor (2.5.1-0ubuntu0.10.10.1) maverick-proposed; urgency=low * New upstream release (LP: #660077) - The following patches were refreshed: + 0001-fix-release.patch + 0003-local-includes.patch + 0008-lp648900.patch: renamed as 0005-lp648900.patch - The following patches were dropped (included upstream): + 0005-lp601583.patch + 0006-network-interface-enumeration.patch + 0007-gnome-updates.patch * debian/patches/0006-testsuite-fixes.patch: testsuite fixes from head of 2.5 branch. These are needed for QRT and SRU testing (LP: #652211) * debian/patches/0007-honor-cflags.patch: have the parser makefile honor CFLAGS environment variable. Brings back missing symbols for the retracer * debian/patches/0008-lp652674.patch: fix warnings for messages without denied or requested masks (LP: #652674) * debian/apparmor.init: fix path to aa-status (LP: #654841) * debian/apport/source_apparmor.py: apport hook should use root_command_hook() for running apparmor_status (LP: #655529) * debian/apport/source_apparmor.py: use ProcKernelCmdline and don't clobber cmdline details (LP: #657091) * debian/{rules,control}: move apache2 abstractions into the base package so we can put apache2 profiles into the -profiles package without aa-logprof bailing out. Patch by Marc Deslauriers. (LP: #539441) -- Jamie Strandboge <email address hidden> Tue, 19 Oct 2010 15:36:21 -0500
Available diffs
| Superseded in natty-release |
apparmor (2.5.1-0ubuntu2) natty; urgency=low
* debian/{rules,control}: move apache2 abstractions into the base package
so we can put apache2 profiles into the -profiles package without
aa-logprof bailing out. Patch by Marc Deslauriers.
(LP: #539441)
-- Jamie Strandboge <email address hidden> Tue, 19 Oct 2010 15:44:43 -0500
Available diffs
- diff from 2.5.1-0ubuntu1 to 2.5.1-0ubuntu2 (845 bytes)
| Superseded in natty-release |
apparmor (2.5.1-0ubuntu1) natty; urgency=low * New upstream release (LP: #660077) - The following patches were refreshed: + 0001-fix-release.patch + 0003-local-includes.patch + 0008-lp648900.patch: renamed as 0005-lp648900.patch - The following patches were dropped (included upstream): + 0005-lp601583.patch + 0006-network-interface-enumeration.patch + 0007-gnome-updates.patch * debian/patches/0006-testsuite-fixes.patch: testsuite fixes from head of 2.5 branch. These are needed for QRT and SRU testing (LP: #652211) * debian/patches/0007-honor-cflags.patch: have the parser makefile honor CFLAGS environment variable. Brings back missing symbols for the retracer * debian/patches/0008-lp652674.patch: fix warnings for messages without denied or requested masks (LP: #652674) * debian/apparmor.init: fix path to aa-status (LP: #654841) * debian/apport/source_apparmor.py: apport hook should use root_command_hook() for running apparmor_status (LP: #655529) * debian/apport/source_apparmor.py: use ProcKernelCmdline and don't clobber cmdline details (LP: #657091) -- Jamie Strandboge <email address hidden> Fri, 15 Oct 2010 12:23:00 -0500
Available diffs
- diff from 2.5.1~rc1-0ubuntu2 to 2.5.1-0ubuntu1 (934.9 KiB)
apparmor (2.5.1~rc1-0ubuntu2) maverick; urgency=low
* abstractions/ubuntu-email: adjustment for ever-changing thunderbird path
(LP: #648900)
-- Jamie Strandboge <email address hidden> Mon, 27 Sep 2010 09:00:06 -0500
Available diffs
| Superseded in maverick-release |
apparmor (2.5.1~rc1-0ubuntu1) maverick; urgency=low
[ Jamie Strandboge ]
* New upstream RC release (revision 1413). In addition to getting the tools
to work with the maverick kernel, this update fixes:
- LP: #619521
- LP: #633369
- LP: #626451
- LP: #581525
- LP: #623467 (link and unlink still need to be addressed)
* Dropped the following patches, included upstream:
- 0002-lp615177.patch
- 0004-ubuntu-pux.patch
- 0006-kde4-config-pux.patch
- 0007-lp605835.patch
- 0012-lp625041.patch
- 0013-lp623586.patch
* Update the following patches:
- rename 0010-fix-release.patch as 0001-fix-release.patch since this will
likely always need to be here
- rename 0005-add-chromium-browser.patch as
0002-add-chromium-browser.patch
- rename 0001-local-includes.patch as 0003-local-includes.patch and update
to use r1493 (from trunk) of local/README file. This can be dropped in
2.6.
- collect the ubuntu abstractions updates pulled from trunk into
0004-ubuntu-abstractions-updates.patch. This can be dropped in 2.6.
- rename 0008-lp601583.patch as 0005-lp601583.patch. This can be dropped
in 2.5.1 final.
* fix up some lintian warnings:
- debian/control:
+ don't use 'Section' in apparmor-notify, since it is the same as the
source
+ updates Standards-Version to 3.9.1
+ add ${misc:Depends} to libapparmor-dev and apparmor-notify
- add debian/source/format
- debian/libapache2-mod-apparmor.postrm: use #DEBHELPER#
- debian/libapache2-mod-apparmor.preinst: use #DEBHELPER#
- add debian/watch
* debian/notify/notify.conf: set show_notifications="yes" by default
* debian/patches/0006-network-interface-enumeration.patch: allow network
interface enumeration. This can be dropped in 2.5.1 final.
* debian/patches/0007-gnome-updates.patch: update for font/icon/mime
locations in current gnome. This can be dropped in 2.5.1 final.
[ Kees Cook ]
* debian/apparmor.init: rename "stop" to "teardown", drop caches on
"stop" and warn about the dangers of "teardown".
-- Jamie Strandboge <email address hidden> Fri, 10 Sep 2010 11:07:19 -0500
Available diffs
| Superseded in maverick-release |
apparmor (2.5.1~pre1393-0ubuntu6) maverick; urgency=low
* debian/profiles/chromium-browser: updated to have the proper path to
local/
* debian/patches/0011-lp514356+573344+593413.patch: browser abstraction
updates for /net, kmozillahelper and gnome-appearance-properties
(LP: #593413, LP: #514356, LP: #573344)
* debian/patches/0012-lp625041.patch: add sensible-browser (LP: #625041)
* debian/patches/0013-lp623586.patch: allow access to ghostscript fonts when
not using defoma (LP: #623586)
-- Jamie Strandboge <email address hidden> Fri, 03 Sep 2010 07:39:31 -0500
Available diffs
| Superseded in maverick-release |
apparmor (2.5.1~pre1393-0ubuntu5) maverick; urgency=low
* debian/patches/0007-lp605835.patch: allow ca-certificates in ssl_certs
abstraction (LP: #605835)
* debian/patches/0008-lp601583.patch: adjust X abstraction for newer gdm
(LP: #601583)
* debian/patches/0009-lp565753.patch: add ubuntu-feed-readers abstraction
and have ubuntu-browsers.d/multimedia use it (LP: #565753)
* debian/apparmor.config: don't try to read in the existing value from
/etc/apparmor.d/tunables/home.d/ubuntu, but instead always use what is
in debconf. (LP: #561694)
* add aa-update-browser for giving a programmatic way to update browser
profiles to use browser abstractions
- add debian/aa-update-browser
- add debian/aa-update-browser.8
- debian/rules: install aa-update-browser*
* debian/patches/0003-ubuntu-browsers-d.patch: updated to generalize java
child profile names
* debian/patches/0010-fix-release.patch: update common/Make.rules to use
Canonical Ltd in generated documentation
-- Jamie Strandboge <email address hidden> Wed, 11 Aug 2010 09:24:23 -0500
Available diffs
| Superseded in maverick-release |
apparmor (2.5.1~pre1393-0ubuntu4) maverick; urgency=low
* debian/patches/0001-local-includes.patch: updated to adjust local/README
to have upstream clarifications
* debian/patches/0003-ubuntu-browsers-d.patch: add ubuntu-browsers.d/*
abstractions
* debian/patches/0004-ubuntu-pux.patch: use 'PUx' instead of 'Ux' in
abstractions/ubuntu-*
* add chromium-browser profile. All this can be removed once
chromium-browser ships its own profile:
- debian/patches/0005-add-chromium-browser.patch: add preliminary
profiles/apparmor.d/usr.bin.chromium-browser
- debian/profiles/chromium-browser: added for use with ubuntu-browsers.d
- debian/rules: ship debian/profiles/chromium-browser in apparmor-profiles
* don't make /etc/apparmor.d/local/* from apparmor-profiles conffiles
- debian/control: Build-Depends on debhelper 7.4.20ubuntu5
- debian/rules: use dh_apparmor instead of shipping the files as conffiles
- debian/apparmor-profiles.postinst: move DEBHELPER before initscript
reload
- debian/apparmor-profiles.postrm: added to remove chromium-browser config
file
* debian/patches/0006-kde4-config-pux.patch: remove kde4-config from kde
abstraction and add it to kde ubuntu-browsers abstraction
-- Jamie Strandboge <email address hidden> Tue, 10 Aug 2010 14:31:32 -0500
Available diffs
| Superseded in maverick-release |
apparmor (2.5.1~pre1393-0ubuntu3) maverick; urgency=low
* debian/patches/0002-lp615177.patch: 'owner' match in commit 1406 too
strict for /tmp/ and /var/tmp/ (LP: #615177)
-- Jamie Strandboge <email address hidden> Mon, 09 Aug 2010 10:17:05 -0500
Available diffs
| Superseded in maverick-release |
apparmor (2.5.1~pre1393-0ubuntu2) maverick; urgency=low
* debian/rules: move local/usr.lib.apache2.mpm-prefork.apache2 to
libapache2-mod-apparmor
-- Jamie Strandboge <email address hidden> Fri, 06 Aug 2010 13:38:59 -0500
Available diffs
| Superseded in maverick-release |
apparmor (2.5.1~pre1393-0ubuntu1) maverick; urgency=low
* Update to upstream bzr revision 1393 from lp:apparmor/2.5.
* add dbus-session abstraction (LP: #566207)
* require owner in user-tmp abstraction (LP: #578922)
* don't use uninitialized $opt_s (LP: #582075)
* allow thunderbird 3 in abstractions/ubuntu-email (LP: #590462)
* allow gmplayer in abstractions/ubuntu-media-players (LP: #591421)
* debian/control: updated branches.
* debian/patches/0001-local-includes.patch: backported patch from trunk to
allow local administrators to customize their profiles without modifying
a shipped profile
* debian/rules:
- don't pass RELEASE to libapparmor's 'make install' as it breaks the
build and isn't used by the Makfile anyway
- install apparmor.d/local/README in apparmor, not apparmor-profiles
- don't install apparmor.d/local/usr.sbin.ntpd
* Drop the following patches already included upstream:
- 0001-lp538561.patch
- 0002-aalogprof-warnings.patch
- 0003-fix-memleaks.patch
- 0004-lp549557.patch
- 0005-lp538661.patch
- 0006-lp611248.patch
-- Jamie Strandboge <email address hidden> Thu, 05 Aug 2010 16:10:46 -0500
Available diffs
| Superseded in maverick-release |
apparmor (2.5-0ubuntu4) maverick; urgency=low
* debian/patches/0006-lp611248.patch: allow access to gdk-pixbuf loaders
LP: #611248
-- Jamie Strandboge <email address hidden> Tue, 03 Aug 2010 09:32:10 -0500
Available diffs
- diff from 2.5-0ubuntu3 to 2.5-0ubuntu4 (653 bytes)
apparmor (2.5-0ubuntu3) lucid; urgency=low
[ Jamie Strandboge ]
* debian/patches/lp-549557.patch: have apparmor_notify deal with log file
rotation. (LP: #549557)
* debian/notify/notify.conf: set show_notifications="yes"
* debian/patches/0005-lp538661.patch: adjust php5 abstraction for cgi config
file path and extensions (LP: #538661)
[ Kees Cook ]
* debian/apparmor.functions: do not load in parallel, this is causing
weird side-effects.
-- Jamie Strandboge <email address hidden> Tue, 30 Mar 2010 11:31:49 -0500
Available diffs
- diff from 2.5-0ubuntu2 to 2.5-0ubuntu3 (4.0 KiB)
| Superseded in lucid-release |
apparmor (2.5-0ubuntu2) lucid; urgency=low
[ Jamie Strandboge ]
* debian/patches/0001-lp538561.patch: add 'k' to /var/lib/samba/**.tdb in
the samba abstraction (LP: #538561)
[ Marc Deslauriers ]
* debian/patches/0002-aalogprof-warnings.patch: get rid of warnings when
aa-logprof is run.
* debian/{rules,control}: move apache2 abstractions into the base package
so we can put apache2 profiles into the -profiles package without
aa-logprof bailing out. (LP: #539441)
* debian/patches/0003-fix-memleaks.patch: include a couple of leak
patches from upstream.
-- Marc Deslauriers <email address hidden> Fri, 26 Mar 2010 11:39:18 -0400
Available diffs
- diff from 2.5-0ubuntu1 to 2.5-0ubuntu2 (1.9 KiB)
| Superseded in lucid-release |
apparmor (2.5-0ubuntu1) lucid; urgency=low * New upstream release. * debian/control: updated branches. * debian/copyright: updated download locations. * debian/rules: drop unneeded build variables. * common/Make.rules: set distributor. -- Kees Cook <email address hidden> Thu, 11 Mar 2010 00:08:08 -0800
Available diffs
| Superseded in lucid-release |
apparmor (2.5~pre+bzr1367-0ubuntu1) lucid; urgency=low
* Update to upstream bzr revision 1367
* debian/notify/90apparmor-notify: sleep for 60 seconds for boot speed and
to make sure that X is all the way up so the notifications look pretty
-- Jamie Strandboge <email address hidden> Mon, 08 Mar 2010 13:53:50 -0600
Available diffs
| Superseded in lucid-release |
apparmor (2.5~pre+bzr1364-0ubuntu1) lucid; urgency=low * Update to upstream bzr revision 1364. * debian/apparmor.functions: ignore .dpkg-bak files when loading too. -- Kees Cook <email address hidden> Wed, 17 Feb 2010 13:36:21 -0800
Available diffs
| Superseded in lucid-release |
apparmor (2.5~pre+bzr1362-0ubuntu2) lucid; urgency=low
* debian/apparmor.postinst: on upgrades, prepopulate apparmor/homedirs
if it is not preseeded. Will check /etc/passwd for UIDs >= 1000 and
< 30000 for unique dirnames of home directories that are not /home. Fully
resolves (LP: #447292)
-- Jamie Strandboge <email address hidden> Wed, 17 Feb 2010 09:42:55 -0600
Available diffs
| Superseded in lucid-release |
apparmor (2.5~pre+bzr1362-0ubuntu1) lucid; urgency=low
[ Kees Cook ]
* Update to upstream bzr revision 1362.
- This release includes DFA minimization, transition table compression,
and improved partitioning performance (LP: #503869).
- drop 0001-tunable-alias.patch, now upstream.
* debian/apparmor.postinst: update home.d template to note the trailing
slash, even if the debconf template mentions it too.
* debian/apparmor.functions: go fully parallel with parsing to use all
CPUs in the case of needing to regenerate caches.
* debian/rules: enable library testsuite during build.
* debian/control: add dejagnu for library testsuite.
* debian/{rules,control}: use chrpath to drop rpath in libapparmor-perl.
[ Jamie Strandboge ]
* debian/control: add apparmor-notify
* add debian/notify/notify.conf
* add debian/notify/90apparmor-notify
* add debian/apparmor-notify.install: install notify.conf to /etc/apparmor
and 90apparmor-notify to /etc/X11/Xsession.d
* debian/rules:
- remove upstream notify.conf since we will install our own via debhelper
- move apparmor_notify script and man pages to apparmor-notify
-- Kees Cook <email address hidden> Sat, 13 Feb 2010 12:19:30 -0800
Available diffs
| Superseded in lucid-release |
apparmor (2.3.1+bzr1312-0ubuntu4) lucid; urgency=low
* 0001-tunable-alias.patch: backport r1330 to make it easier for people
to use AppArmor's alias rules (LP: #160002)
-- Jamie Strandboge <email address hidden> Mon, 11 Jan 2010 14:31:06 -0600
Available diffs
| 226 → 300 of 397 results | First • Previous • Next • Last |
