~ubuntu-branches/ubuntu/maverick/apparmor/maverick-security : changes

~ubuntu-branches/ubuntu/maverick/apparmor/maverick-security » Changes from revision 109

From Revision 109 to 90

Rev	Summary	Authors	Tags	Date
109	* Fix for apparmor_parser not generating correct policy when... * Fix for apparmor_parser not generating correct policy when mixing exec transitions with and without unconfined fallback transitions. - debian/patches/0011-lp693082.patch: adjust dfa match flag table size and fix index calculation for pux and cux. - LP: #693082	Jamie Strandboge	2.5.1-0ubuntu0.10.10.3	13 years ago
108	abstractions/ubuntu-email: adjustment for ever-changing thun... abstractions/ubuntu-email: adjustment for ever-changing thunderbird path (LP: #648900)	Jamie Strandboge	2.5.1~rc1-0ubuntu2	13 years ago
107	[ Jamie Strandboge ] [ Jamie Strandboge ] * New upstream RC release (revision 1413). In addition to getting the tools to work with the maverick kernel, this update fixes: - LP: #619521 - LP: #633369 - LP: #626451 - LP: #581525 - LP: #623467 (link and unlink still need to be addressed) * Dropped the following patches, included upstream: - 0002-lp615177.patch - 0004-ubuntu-pux.patch - 0006-kde4-config-pux.patch - 0007-lp605835.patch - 0012-lp625041.patch - 0013-lp623586.patch * Update the following patches: - rename 0010-fix-release.patch as 0001-fix-release.patch since this will likely always need to be here - rename 0005-add-chromium-browser.patch as 0002-add-chromium-browser.patch - rename 0001-local-includes.patch as 0003-local-includes.patch and update to use r1493 (from trunk) of local/README file. This can be dropped in 2.6. - collect the ubuntu abstractions updates pulled from trunk into 0004-ubuntu-abstractions-updates.patch. This can be dropped in 2.6. - rename 0008-lp601583.patch as 0005-lp601583.patch. This can be dropped in 2.5.1 final. * fix up some lintian warnings: - debian/control: + don't use 'Section' in apparmor-notify, since it is the same as the source + updates Standards-Version to 3.9.1 + add ${misc:Depends} to libapparmor-dev and apparmor-notify - add debian/source/format - debian/libapache2-mod-apparmor.postrm: use #DEBHELPER# - debian/libapache2-mod-apparmor.preinst: use #DEBHELPER# - add debian/watch * debian/notify/notify.conf: set show_notifications="yes" by default * debian/patches/0006-network-interface-enumeration.patch: allow network interface enumeration. This can be dropped in 2.5.1 final. * debian/patches/0007-gnome-updates.patch: update for font/icon/mime locations in current gnome. This can be dropped in 2.5.1 final. [ Kees Cook ] * debian/apparmor.init: rename "stop" to "teardown", drop caches on "stop" and warn about the dangers of "teardown".	Jamie Strandboge	2.5.1~rc1-0ubuntu1	13 years ago
106	* debian/profiles/chromium-browser: updated to have the prop... * debian/profiles/chromium-browser: updated to have the proper path to local/ * debian/patches/0011-lp514356+573344+593413.patch: browser abstraction updates for /net, kmozillahelper and gnome-appearance-properties (LP: #593413, LP: #514356, LP: #573344) * debian/patches/0012-lp625041.patch: add sensible-browser (LP: #625041) * debian/patches/0013-lp623586.patch: allow access to ghostscript fonts when not using defoma (LP: #623586)	Jamie Strandboge	2.5.1~pre1393-0ubuntu6	13 years ago
105	* debian/patches/0007-lp605835.patch: allow ca-certificates ... * debian/patches/0007-lp605835.patch: allow ca-certificates in ssl_certs abstraction (LP: #605835) * debian/patches/0008-lp601583.patch: adjust X abstraction for newer gdm (LP: #601583) * debian/patches/0009-lp565753.patch: add ubuntu-feed-readers abstraction and have ubuntu-browsers.d/multimedia use it (LP: #565753) * debian/apparmor.config: don't try to read in the existing value from /etc/apparmor.d/tunables/home.d/ubuntu, but instead always use what is in debconf. (LP: #561694) * add aa-update-browser for giving a programmatic way to update browser profiles to use browser abstractions - add debian/aa-update-browser - add debian/aa-update-browser.8 - debian/rules: install aa-update-browser* * debian/patches/0003-ubuntu-browsers-d.patch: updated to generalize java child profile names * debian/patches/0010-fix-release.patch: update common/Make.rules to use Canonical Ltd in generated documentation	Jamie Strandboge	2.5.1~pre1393-0ubuntu5	13 years ago
104	* debian/patches/0001-local-includes.patch: updated to adjus... * debian/patches/0001-local-includes.patch: updated to adjust local/README to have upstream clarifications * debian/patches/0003-ubuntu-browsers-d.patch: add ubuntu-browsers.d/* abstractions * debian/patches/0004-ubuntu-pux.patch: use 'PUx' instead of 'Ux' in abstractions/ubuntu-* * add chromium-browser profile. All this can be removed once chromium-browser ships its own profile: - debian/patches/0005-add-chromium-browser.patch: add preliminary profiles/apparmor.d/usr.bin.chromium-browser - debian/profiles/chromium-browser: added for use with ubuntu-browsers.d - debian/rules: ship debian/profiles/chromium-browser in apparmor-profiles * don't make /etc/apparmor.d/local/* from apparmor-profiles conffiles - debian/control: Build-Depends on debhelper 7.4.20ubuntu5 - debian/rules: use dh_apparmor instead of shipping the files as conffiles - debian/apparmor-profiles.postinst: move DEBHELPER before initscript reload - debian/apparmor-profiles.postrm: added to remove chromium-browser config file * debian/patches/0006-kde4-config-pux.patch: remove kde4-config from kde abstraction and add it to kde ubuntu-browsers abstraction	Jamie Strandboge	2.5.1~pre1393-0ubuntu4	13 years ago
103	debian/patches/0002-lp615177.patch: 'owner' match in commit ... debian/patches/0002-lp615177.patch: 'owner' match in commit 1406 too strict for /tmp/ and /var/tmp/ (LP: #615177)	Jamie Strandboge	2.5.1~pre1393-0ubuntu3	13 years ago
102	debian/rules: move local/usr.lib.apache2.mpm-prefork.apache2... debian/rules: move local/usr.lib.apache2.mpm-prefork.apache2 to libapache2-mod-apparmor	Jamie Strandboge	2.5.1~pre1393-0ubuntu2	13 years ago
101	* Update to upstream bzr revision 1393 from lp:apparmor/2.5. * Update to upstream bzr revision 1393 from lp:apparmor/2.5. * add dbus-session abstraction (LP: #566207) * require owner in user-tmp abstraction (LP: #578922) * don't use uninitialized $opt_s (LP: #582075) * allow thunderbird 3 in abstractions/ubuntu-email (LP: #590462) * allow gmplayer in abstractions/ubuntu-media-players (LP: #591421) * debian/control: updated branches. * debian/patches/0001-local-includes.patch: backported patch from trunk to allow local administrators to customize their profiles without modifying a shipped profile * debian/rules: - don't pass RELEASE to libapparmor's 'make install' as it breaks the build and isn't used by the Makfile anyway - install apparmor.d/local/README in apparmor, not apparmor-profiles - don't install apparmor.d/local/usr.sbin.ntpd * Drop the following patches already included upstream: - 0001-lp538561.patch - 0002-aalogprof-warnings.patch - 0003-fix-memleaks.patch - 0004-lp549557.patch - 0005-lp538661.patch - 0006-lp611248.patch	Jamie Strandboge	2.5.1~pre1393-0ubuntu1	13 years ago
100	debian/patches/0006-lp611248.patch: allow access to gdk-pixb... debian/patches/0006-lp611248.patch: allow access to gdk-pixbuf loaders LP: #611248	Jamie Strandboge	2.5-0ubuntu4	13 years ago
99	[ Jamie Strandboge ] [ Jamie Strandboge ] * debian/patches/lp-549557.patch: have apparmor_notify deal with log file rotation. (LP: #549557) * debian/notify/notify.conf: set show_notifications="yes" * debian/patches/0005-lp538661.patch: adjust php5 abstraction for cgi config file path and extensions (LP: #538661) [ Kees Cook ] * debian/apparmor.functions: do not load in parallel, this is causing weird side-effects.	Jamie Strandboge	2.5-0ubuntu3	14 years ago
98	[ Jamie Strandboge ] [ Jamie Strandboge ] * debian/patches/0001-lp538561.patch: add 'k' to /var/lib/samba/*.tdb in the samba abstraction (LP: #538561) [ Marc Deslauriers ] debian/patches/0002-aalogprof-warnings.patch: get rid of warnings when aa-logprof is run. * debian/{rules,control}: move apache2 abstractions into the base package so we can put apache2 profiles into the -profiles package without aa-logprof bailing out. (LP: #539441) * debian/patches/0003-fix-memleaks.patch: include a couple of leak patches from upstream.	Marc Deslauriers	2.5-0ubuntu2	14 years ago
97	* New upstream release. * New upstream release. * debian/control: updated branches. * debian/copyright: updated download locations. * debian/rules: drop unneeded build variables. * common/Make.rules: set distributor.	Kees Cook	2.5-0ubuntu1	14 years ago
96	* Update to upstream bzr revision 1367 * Update to upstream bzr revision 1367 * debian/notify/90apparmor-notify: sleep for 60 seconds for boot speed and to make sure that X is all the way up so the notifications look pretty	Jamie Strandboge	2.5~pre+bzr1367-0ubuntu1	14 years ago
95	* Update to upstream bzr revision 1364. * Update to upstream bzr revision 1364. * debian/apparmor.functions: ignore .dpkg-bak files when loading too.	Kees Cook	2.5~pre+bzr1364-0ubuntu1	14 years ago
94	debian/apparmor.postinst: on upgrades, prepopulate apparmor/... debian/apparmor.postinst: on upgrades, prepopulate apparmor/homedirs if it is not preseeded. Will check /etc/passwd for UIDs >= 1000 and < 30000 for unique dirnames of home directories that are not /home. Fully resolves (LP: #447292)	Jamie Strandboge	2.5~pre+bzr1362-0ubuntu2	14 years ago
93	[ Kees Cook ] [ Kees Cook ] * Update to upstream bzr revision 1362. - This release includes DFA minimization, transition table compression, and improved partitioning performance (LP: #503869). - drop 0001-tunable-alias.patch, now upstream. * debian/apparmor.postinst: update home.d template to note the trailing slash, even if the debconf template mentions it too. * debian/apparmor.functions: go fully parallel with parsing to use all CPUs in the case of needing to regenerate caches. * debian/rules: enable library testsuite during build. * debian/control: add dejagnu for library testsuite. * debian/{rules,control}: use chrpath to drop rpath in libapparmor-perl. [ Jamie Strandboge ] * debian/control: add apparmor-notify * add debian/notify/notify.conf * add debian/notify/90apparmor-notify * add debian/apparmor-notify.install: install notify.conf to /etc/apparmor and 90apparmor-notify to /etc/X11/Xsession.d * debian/rules: - remove upstream notify.conf since we will install our own via debhelper - move apparmor_notify script and man pages to apparmor-notify	Kees Cook	2.5~pre+bzr1362-0ubuntu1	14 years ago
92	0001-tunable-alias.patch: backport r1330 to make it easier f... 0001-tunable-alias.patch: backport r1330 to make it easier for people to use AppArmor's alias rules (LP: #160002)	Jamie Strandboge	2.3.1+bzr1312-0ubuntu4	14 years ago
91	* debian/apparmor.{init,functions}: * debian/apparmor.{init,functions}: - add "recache" argument to init script for liveCD cache generation. - skip start/stop/reload when running on liveCD.	Kees Cook	2.3.1+bzr1312-0ubuntu3	14 years ago
90	debian/rules: disable profiling support for released version... debian/rules: disable profiling support for released version.	Kees Cook	2.3.1+bzr1312-0ubuntu2	14 years ago

Older »