~apparmor-dev/apparmor/release-2.5 : changes

~apparmor-dev/apparmor/release-2.5 » Changes from revision 1497

From Revision 1497 to 1478

Rev	Summary	Authors	Tags	Date
1497	Rename tags to conform with git tag requirements Rename tags to conform with git tag requirements Rename tags apparmor_2.5.2~rc1 to apparmor_2.5.2-rc1 apparmor_2.6.0~rc1 to apparmor_2.6.0-rc1 this is necessary for export to the git mirror Signed-off-by: John Johansen <john.johansen@canonical.com>	John Johansen		12 years ago
1496	Update version to indicate 2.5.2 release Update version to indicate 2.5.2 release	Steve Beattie	apparmor_2.5.2	13 years ago
1495	Hook up the parser/tst 'make clean' target to the parser's m... Hook up the parser/tst 'make clean' target to the parser's makefile; modify the parser/tst 'make clean' target to not blow away the readme file.	Steve Beattie		13 years ago
1494	Merge from trunk revs 1671 and 1672: Update project info in Merge from trunk revs 1671 and 1672: Update project info in libapparmor's setup.py.in and adjust the python setup to actually match what swig expects so it will work. Signed-Off-By: Steve Beattie <sbeattie@ubuntu.com>	Steve Beattie		13 years ago
1493	Merge from trunk revs 1660 and 1661: Update swig to export a... Merge from trunk revs 1660 and 1661: Update swig to export all current interface fns, and update change_hatv and change_hat_vargs prototypes to use long (this would be an ABI change; however, there are no known users of those particular functions). Acked-By: Steve Beattie <sbeattie@ubuntu.com>	Steve Beattie		13 years ago
1492	Merge from trunk revs 1676 and 1677: Override AF_MAX for ker... Merge from trunk revs 1676 and 1677: Override AF_MAX for kernels that don't support proper masking. Older versions of the apparmor kernel patches didn't handle receiving network tables of a larger size than expected. Allow the parser to detect the kernel version and override the AF_MAX value for those kernels. This also replaces the hack using a hardcoded limit of 36 for kernels missing the features flag. Also, ensure that the buffer read from /proc/sys/kernel/osrelease is null terminated. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-By: Steve Beattie <sbeattie@ubuntu.com>	Steve Beattie		13 years ago
1491	Merge from trunk rev 1674: Make tcp test support current net... Merge from trunk rev 1674: Make tcp test support current network syntax, re-enable tcp test. Signed-Off-By: Steve Beattie <sbeattie@ubuntu.com>	Steve Beattie		13 years ago
1490	Merge from trunk rev 1667: more adjustments to the libapparm... Merge from trunk rev 1667: more adjustments to the libapparmor license headers.	Steve Beattie		13 years ago
1489	Merge from trunk rev 1666: Update the copyright message in Merge from trunk rev 1666: Update the copyright message in apparmor_parser --version Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-By: Steve Beattie <sbeattie@ubuntu.com>	Steve Beattie		13 years ago
1488	Merge from trunk rev 1658: Update licencing in libapparmor Merge from trunk rev 1658: Update licencing in libapparmor Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-By: Steve Beattie <sbeattie@ubuntu.com>	Steve Beattie		13 years ago
1487	Adjust clean target to match trunk. Adjust clean target to match trunk.	Steve Beattie	apparmor_2.5.2-rc1	13 years ago
1486	toplevel makefile: toplevel makefile: - adjust snapshot version to be less than the upcoming version - add a tag target - be a little more paranoid in the clean target and adjust for snapshot versioning scheme.	Steve Beattie		13 years ago
1485	Prep for 2.5.2 release Prep for 2.5.2 release	Steve Beattie		13 years ago
1484	Merge from trunk revisions 1519 and 1619: Add the compatibil... Merge from trunk revisions 1519 and 1619: Add the compatibility patches for the 2.6.36, 2.6.36.2 and 2.6.37 upstream kernel version of AppArmor. Nominated-by: John Johansen <john.johansen@canonical.com> Acked-By: Steve Beattie <sbeattie@ubuntu.com>	Steve Beattie		13 years ago
1483	From: Jeff Mahoney <jeffm@suse.com> From: Jeff Mahoney <jeffm@suse.com> Subject: apparmor-utils: Inherit flags in sub-profiles when generating profiles References: bnc#496204 When creating profiles with cx subprofiles, genprof will set the sub-profile in enforce mode. When genprof cycles multiple times, it prohibits the sub-profile from working correctly. e.g. # Last Modified: Mon Jan 24 13:52:26 2011 #include <tunables/global> /home/jeffm/mycat flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/consoles> /bin/bash ix, /bin/cat cx, /home/jeffm/mycat r, profile /bin/cat { #include <abstractions/base> /bin/cat r, /home/jeffm/mycat r, } } This patch allows sub-profiles to inherit the flags from the parent profile, which allows it to be created in complain mode (if appropriate). The temporary complain flags are cleaned up at genprof completion as expected. This issue was reported at: https://bugzilla.novell.com/show_bug.cgi?id=496204 Signed-off-by: Jeff Mahoney <jeffm@suse.com> Acked-By: Steve Beattie <sbeattie@ubuntu.com>	Steve Beattie		13 years ago
1482	From: Jeff Mahoney <jeffm@suse.com> From: Jeff Mahoney <jeffm@suse.com> Subject: Subdomain.pm: Fix for null path References: bnc#407959 When handling the following log entry, logprof will spew perl errors and ultimately generate an invalid config: "r," Since there is nothing to do with a null path, just skip to the next entry. type=APPARMOR_DENIED msg=audit(1214497030.421:39): operation="inode_permission" info="Failed name resolution - object not a valid entry" requested_mask="r" denied_mask="r" pid=31367 profile="/usr/sbin/httpd2-worker Acked-By: Steve Beattie <sbeattie@ubuntu.com>	Steve Beattie		13 years ago
1481	From: Jeff Mahoney <jeffm@suse.com> From: Jeff Mahoney <jeffm@suse.com> Subject: apparmor: Subdomain.pm: Fix handling of audits of unconfined processes The version of AppArmor that was accepted into the mainline kernel issues audit events for things like change_hat while unconfined. Previous versions just returned -EPERM without the audit. This results in logprof and friends spewing uninitialized value errors when it hits events like: type=AVC msg=audit(1291742101.899:220): apparmor="DENIED" operation="change_hat" info="unconfined" error=-1 pid=28005 comm="cron ... which happen any time an unconfined process does something with pam when pam_apparmor is installed. This patch skips those events. [Note that the second half of the OpenSUSE patch had already been applied.] Signed-off-by: Jeff Mahoney <jeffm@suse.com> Acked-By: Steve Beattie <sbeattie@ubuntu.com>	Steve Beattie		13 years ago
1480	From: Jeff Mahoney <jeffm@suse.com> From: Jeff Mahoney <jeffm@suse.com> Subject: apparmor-profiles: Fix proc usage in firefox profile References: bnc#436262 This patch corrects the use of the {proc} macro. It should be {PROC}. Signed-off-by: Jeff Mahoney <jeffm@suse.com> Acked-By: Steve Beattie <sbeattie@ubuntu.com>	Steve Beattie		13 years ago
1479	From: Jeff Mahoney <jeffm@suse.com> From: Jeff Mahoney <jeffm@suse.com> Subject: apparmor: Fix incorrect /proc//sys usage in usr.sbin.ntpd References: bnc#634801 /proc/sys/kernel exists, but /proc//sys/kernel doesn't. This patch fixes the profile. Signed-off-by: Jeff Mahoney <jeffm@suse.com> Acked-By: Steve Beattie <sbeattie@ubuntu.com>	Steve Beattie		13 years ago
1478	Author: Jamie Strandboge <jamie@canonical.com> Author: Jamie Strandboge <jamie@canonical.com> Description: the Ubuntu buildds do not have the AppArmor securityfs mounted, so the cache tests fail. This patch skips these tests if the introspection directory is not mounted, but runs them if it is. This should allow testing of local builds while still allowing builds on the official buildds. Acked-By: Steve Beattie <sbeattie@ubuntu.com> - both Ubuntu and OpenSUSE were carrying patches that disabled the caching test, though OpenSUSE's disabled it completely rather than checking. The parser builds need to complete even when the kernel it's building on doesn't support AppArmor or all the extensions that the parser needs at runtime.	Steve Beattie		13 years ago

Older »