~ubuntu-branches/ubuntu/lucid/apparmor/lucid-proposed : changes

~ubuntu-branches/ubuntu/lucid/apparmor/lucid-proposed » Changes from revision 101

From Revision 101 to 82

Rev	Summary	Authors	Tags	Date
101	* debian/patches/0014-lp698194.patch: explicitly deny access... * debian/patches/0014-lp698194.patch: explicitly deny access to autostart directories, chromium, some popular email clients and kwallet - LP: #698194	Jamie Strandboge	2.5.1-0ubuntu0.10.04.3	13 years ago
100	* Backport 2.5.1-0ubuntu0.10.10.1 from maverick for userspac... * Backport 2.5.1-0ubuntu0.10.10.1 from maverick for userspace tools to work with newer kernels (LP: #660077) NOTE: user-tmp now uses 'owner' match, so non-default profiles will have to be adjusted when 2 separately confined applications that both use the user-tmp abstraction depend on being able to cooperatively share files with each other in /tmp or /var/tmp. * remove the following patches (features not appropriate for SRU): - 0002-add-chromium-browser.patch - 0003-local-includes.patch - 0004-ubuntu-abstractions-updates.patch * debian/rules (this makes it the same as what was shipped in 10.04 LTS release): - don't ship aa-update-browser and its man page (requires 0004-ubuntu-abstractions-updates.patch) - don't ship apparmor.d/local/ (requires 0003-local-includes.patch) - don't use dh_apparmor (not in Ubuntu 10.04 LTS) - don't ship chromium profile * remove debian/profiles/chromium-browser * remove debian/aa-update-browser* * debian/apparmor-profiles.postinst: revert to that in lucid release (requires dh_apparmor and 0002-add-chromium-browser.patch) * remove debian/apparmor-profiles.postrm: doesn't make sense without 0002-add-chromium-browser.patch * debian/control: - revert Build-Depends on debhelper (>= 5) - revert Standards-Version to 3.8.4 - revert Vcs-Bzr - use Conflicts/Replaces version that was in Ubuntu 10.04 LTS * debian/patches/0011-lucid-compat-dbus.patch: move /var/lib/dbus/machine-id back into dbus, since profiles on 10.04 LTS expect it there * debian/patches/0012-lucid-compat-kde.patch: add kde4-config to kde abstraction, since the firefox profile on Ubuntu 10.04 LTS expects it to be there	Jamie Strandboge	2.5.1-0ubuntu0.10.04.1	13 years ago
99	[ Jamie Strandboge ] [ Jamie Strandboge ] * debian/patches/lp-549557.patch: have apparmor_notify deal with log file rotation. (LP: #549557) * debian/notify/notify.conf: set show_notifications="yes" * debian/patches/0005-lp538661.patch: adjust php5 abstraction for cgi config file path and extensions (LP: #538661) [ Kees Cook ] * debian/apparmor.functions: do not load in parallel, this is causing weird side-effects.	Jamie Strandboge	2.5-0ubuntu3	14 years ago
98	[ Jamie Strandboge ] [ Jamie Strandboge ] * debian/patches/0001-lp538561.patch: add 'k' to /var/lib/samba/*.tdb in the samba abstraction (LP: #538561) [ Marc Deslauriers ] debian/patches/0002-aalogprof-warnings.patch: get rid of warnings when aa-logprof is run. * debian/{rules,control}: move apache2 abstractions into the base package so we can put apache2 profiles into the -profiles package without aa-logprof bailing out. (LP: #539441) * debian/patches/0003-fix-memleaks.patch: include a couple of leak patches from upstream.	Marc Deslauriers	2.5-0ubuntu2	14 years ago
97	* New upstream release. * New upstream release. * debian/control: updated branches. * debian/copyright: updated download locations. * debian/rules: drop unneeded build variables. * common/Make.rules: set distributor.	Kees Cook	2.5-0ubuntu1	14 years ago
96	* Update to upstream bzr revision 1367 * Update to upstream bzr revision 1367 * debian/notify/90apparmor-notify: sleep for 60 seconds for boot speed and to make sure that X is all the way up so the notifications look pretty	Jamie Strandboge	2.5~pre+bzr1367-0ubuntu1	14 years ago
95	* Update to upstream bzr revision 1364. * Update to upstream bzr revision 1364. * debian/apparmor.functions: ignore .dpkg-bak files when loading too.	Kees Cook	2.5~pre+bzr1364-0ubuntu1	14 years ago
94	debian/apparmor.postinst: on upgrades, prepopulate apparmor/... debian/apparmor.postinst: on upgrades, prepopulate apparmor/homedirs if it is not preseeded. Will check /etc/passwd for UIDs >= 1000 and < 30000 for unique dirnames of home directories that are not /home. Fully resolves (LP: #447292)	Jamie Strandboge	2.5~pre+bzr1362-0ubuntu2	14 years ago
93	[ Kees Cook ] [ Kees Cook ] * Update to upstream bzr revision 1362. - This release includes DFA minimization, transition table compression, and improved partitioning performance (LP: #503869). - drop 0001-tunable-alias.patch, now upstream. * debian/apparmor.postinst: update home.d template to note the trailing slash, even if the debconf template mentions it too. * debian/apparmor.functions: go fully parallel with parsing to use all CPUs in the case of needing to regenerate caches. * debian/rules: enable library testsuite during build. * debian/control: add dejagnu for library testsuite. * debian/{rules,control}: use chrpath to drop rpath in libapparmor-perl. [ Jamie Strandboge ] * debian/control: add apparmor-notify * add debian/notify/notify.conf * add debian/notify/90apparmor-notify * add debian/apparmor-notify.install: install notify.conf to /etc/apparmor and 90apparmor-notify to /etc/X11/Xsession.d * debian/rules: - remove upstream notify.conf since we will install our own via debhelper - move apparmor_notify script and man pages to apparmor-notify	Kees Cook	2.5~pre+bzr1362-0ubuntu1	14 years ago
92	0001-tunable-alias.patch: backport r1330 to make it easier f... 0001-tunable-alias.patch: backport r1330 to make it easier for people to use AppArmor's alias rules (LP: #160002)	Jamie Strandboge	2.3.1+bzr1312-0ubuntu4	14 years ago
91	* debian/apparmor.{init,functions}: * debian/apparmor.{init,functions}: - add "recache" argument to init script for liveCD cache generation. - skip start/stop/reload when running on liveCD.	Kees Cook	2.3.1+bzr1312-0ubuntu3	14 years ago
90	debian/rules: disable profiling support for released version... debian/rules: disable profiling support for released version.	Kees Cook	2.3.1+bzr1312-0ubuntu2	14 years ago
89	[ Kees Cook ] [ Kees Cook ] * Update to upstream bzr revision 1312. * debian/apparmor.postrm: fix comment typo. * debain/rules: switch to bzr for upstream versioning. * debian/rules: install apache2-* abstractions into apache2-mod package. * drop debian/patches/0001-likewise-home-tunables.patch: this is causing too much time in the parser (see LP 503869). The default install is suffering, so move this configuration to likewise-open (see LP 274350). [ Jamie Strandboge ] * debian/rules: - don't ship tunables/home.d/site.local - correct path for moving apache2 abstraction * add debconf question for adjusting HOMEDIRS (LP: #447292) - add debian/apparmor.config - debian/apparmor.postinst: query debconf and adjust tunables/home.d/ubuntu - debian/apparmor.postrm: on purge, remove tunables/home.d/ubuntu and run db_purge - debian/control: Build-Depends on po-debconf and have apparmor Depends on debconf - add debian/po/* - debian/rules: use dh_installdebconf -papparmor - added debian/templates	Kees Cook	2.3.1+bzr1312-0ubuntu1	14 years ago
88	Remove initramfs hooks, as early profile loading is handled Remove initramfs hooks, as early profile loading is handled on a service-by-service basis with Upstart jobs now.	Kees Cook	2.3.1+1403-0ubuntu31	14 years ago
87	[ Jamie Strandboge ] [ Jamie Strandboge ] * convert to using quilt - debian/control: Build-Depends on quilt - add debian/README.source - debian/rules: include /usr/share/quilt/quilt.make and adjust targets for patching * debian/patches/0001-likewise-home-tunables.patch: tunables/home: add /home/likewise-open// to HOMEDIRS (LP: #274350) Merge to upstream bzr rev 1308. - really add chromium-browser (LP: #488559) - add official google-chrome (LP: #481661) [ Kees Cook ] * parser/parser_main.c: use nanosec ctime resolution when checking cache file times. * parser/tst/caching.sh: add tests for cache use based on timestamps.	Jamie Strandboge	2.3.1+1403-0ubuntu30	14 years ago
86	* parser/Makefile: generate af_names.h based on bits/socket.... * parser/Makefile: generate af_names.h based on bits/socket.h since linux/socket.h no longer has what we need (LP: #474751) * usr.sbin.dnsmasq: fully address LP: #445818 - more pidfile refinements - allow access to /var/run/dnsmasq - allow access to /etc/dnsmasq.d - allow dac_override so it can write its pidfile	Jamie Strandboge	2.3.1+1403-0ubuntu29	14 years ago
85	[ Jamie Strandboge ] [ Jamie Strandboge ] * update skype profile in extras. Based on work by Андрей Калинин. (LP: #226624) * abstractions/ubuntu-browsers: add opera and icecat (LP: #432778) * abstractions/ubuntu-browsers: add epiphany (epiphany-browser and epiphany-webkit were already present, but the recent changes in epiphany packaging require /usr/bin/epiphany) (LP: #472952) * usr.sbin.dnsmasq: allow pidfiles for /var/run/dnsmasq.pid (LP: #445818) abstractions/gnome: allow access to ~/.themes (LP: #460125) * abstractions/kde: allow access to /etc/kde4rc and /usr/bin/kde4-config (LP: #447006) [ Marc Deslauriers ] * utils/Subdomain.pm: don't skip reading profiles that are also in the cache directory (LP: #446449) * utils/Subdomain.pm: correctly parse PUxr modes * utils/Subdomain.pm: support include directories	Jamie Strandboge	2.3.1+1403-0ubuntu28	14 years ago
84	utils/SubDomain.pm: handle new format "null" log entries (LP... utils/SubDomain.pm: handle new format "null" log entries (LP: #446524)	Marc Deslauriers	2.3.1+1403-0ubuntu27	14 years ago
83	* abstractions/ubuntu-browsers: add Dooble * abstractions/ubuntu-browsers: add Dooble * abstractions/ubuntu-browsers: add chromium (LP: #448812) * abstractions/gnome: add read for /etc/orbitrc * abstractions/audio: add read for /etc/pulse/* for when ~/.pulse/* doesn't exist and these files are used for fallback	Jamie Strandboge	2.3.1+1403-0ubuntu26	14 years ago
82	Do not use tools in /usr during initial start-up (LP: #43972... Do not use tools in /usr during initial start-up (LP: #439726).	Kees Cook	2.3.1+1403-0ubuntu25	14 years ago

Older »