| 81
|
|
* Updated to apparmor 2.9.beta4 (aka apparmor 2.8.98)
- fix logparsing memory leak (LP: #1340927)
- incorporate fixes to regression testsuite to compensate for
af_unix mediation, as well as extend test coverage
(LP: #1375403, LP: #1375516)
- fix libapparmor's log parsing code to accept additional rejection
types (LP: #1375413)
- fix X abstraction for changed lightdm xauthority file locations
(LP: #1339727)
- parser: disable downgrade and not enforced rule messages
by default
- fix error when using regex profile names in IPC rules
(LP: #1373085)
- updates and fixes to the python utilities
- translation updates
[ Steve Beattie ]
* Removed upstreamed patches:
drop-peer_addr-with-local-addr-in-base.patch,
update_socketpair_tests_for_af_unix.patch,
fix_socketpair_tests.patch, sanitized-helpers-updates.patch,
01-tests-unix_socket_lists.patch,
02-tests-accept_unix_rules_in_mkprofile.patch,
03-tests-unix_sockets_v7_pathnames.patch,
04-tests-migrate_from_poll_to_sockio_timeout.patch,
05-tests-add_abstract_socket_tests.patch,
06-tests-use_socketpair_and_none.patch,
07-parser-fix_local_perms.patch,
08-phpsysinfo-policy-updates.patch,
09-apache2-policy-instructions.patch,
10-lp1371771.patch, 11-lp1371765.patch,
lp1169881.patch
* refreshed etc-writable.patch and libapparmor-layout-deb.patch
* debian/control: add breaks on python3-apparmor against older
apparmor-utils that used to be where python bits lived
(LP: #1373259)
* debian/apport/source_apparmor.py:
- fixes the apparmor apport hook so it does not raise an exception if
a non-unicode character is found in /var/log/kern.log or in
/var/log/syslog. This should work under python3 or python2.7
(LP: #1304447)
- adjusts the add_info() function to take the expected additional ui
argument, though it has no need for it.
- converts the log parsing code to use with statements so as not to
leak open file descriptors
- updates the set of packages to query to see if installed and if so,
report the version of.
- adjust import to make pyflakes job easier
- minor pep8 cleanups
[ Jamie Strandboge ]
* add-chromium-browser.patch: don't allow writing to the oom score and
adjust files since this allows chromium to change the values for any
process matching our UID
* debian/apparmor.upstart: check if click-apparmor md5sums changed so we
regenerate the policy if it changes too (LP: #1371574)
* debian/apparmor.init: make corresponding upstart change to initscript
* debian/lib/apparmor/functions: fall back to using -n1 if the parser failed
to load a profile set. This should be removed when the parser properly
handles profile sets with corrupted profiles (LP: 1377338)
* debian/control: fix typo (LP: #1187447)
|
Steve Beattie |
2.8.98-0ubuntu2 |
9 years ago
|
 |
|
| 80
|
|
|
Jamie Strandboge |
2.8.96~2652-0ubuntu7 |
9 years ago
|
|
|
| 79
|
|
|
Jamie Strandboge |
2.8.96~2652-0ubuntu6 |
9 years ago
|
|
|
| 78
|
|
|
Jamie Strandboge |
2.8.96~2652-0ubuntu5 |
9 years ago
|
|
|
| 77
|
|
|
Jamie Strandboge |
2.8.96~2652-0ubuntu4 |
9 years ago
|
|
|
| 76
|
|
|
Jamie Strandboge |
2.8.96~2652-0ubuntu3 |
9 years ago
|
|
|
| 75
|
|
|
Jamie Strandboge |
2.8.96~2541-0ubuntu3.1 |
9 years ago
|
|
|
| 74
|
|
|
Jamie Strandboge |
2.8.96~2541-0ubuntu2 |
9 years ago
|
|
|
| 73
|
|
* Updated to r2541 snapshot of 2.8.96:
- removed upstreamed patches: convert-to-rules.patch, list-fns.patch,
parse-mode.patch, add-decimal-interp.patch, policy_mediates.patch,
fix-failpath.patch, feature_file.patch, fix-network.patch,
aare-to-class.patch, add-mediation-unix.patch, parser_version.patch,
caching.patch, label-class.patch, fix-lexer-debug.patch,
use-diff-encode.patch, fix-serialize.patch,
fix-ppc-endian-ftbfs.patch, opt_arg.patch, tests-cond-dbus.patch,
initialize-mount-flags.patch, fix-typo-in-dbus_write.patch,
limited-mount-rule-support.patch, bare-capability-rule-support.patch,
check-config-for-sysctl.patch, increase-swap-size.patch,
test-v6-policy.patch, test-mount-mediation.patch,
mediate-signals.patch, change-signal-syntax.patch,
mediate-ptrace.patch, change-ptrace-syntax.patch,
test-signal-rules.patch, test-ptrace-rules.patch,
update-tests-for-new-semantics.patch,
fix-garbage-in-preprocessor-output.patch,
fix-double-comma-in-preprocessor-output.patch,
symtab-tests-and-seenlist-bug.patch, add-profile-name-variable.patch,
fix-names-treated-as-condlistid.patch, manpage-signal-ptrace.patch,
python-utils-file-support.patch, python-utils-signal-support.patch,
python-utils-ptrace-support.patch,
python-utils-pivot_root-support.patch.
* Added upstart job (LP: #1305108)
- debian/apparmor.upstart: new upstart job.
- debian/apparmor.init: added click handling, move some code to
unload_obsolete_profiles().
- debian/lib/apparmor/functions: add unload_obsolete_profiles().
- debian/apparmor.postinst, debian/apparmor-profiles.postinst: reload
profiles directly since invoke-rc.d won't allow to do this easily
with upstart and systemd jobs.
- debian/rules: pass --no-start to dh_installinit since we're handling
reloading profiles manually in the postinst scripts.
- debian/control: add a versioned apparmor Depends to the
apparmor-profiles package to make sure the required tools are
installed for the postinst script.
|
Marc Deslauriers |
2.8.96~2541-0ubuntu1 |
9 years ago
|
|
|
| 72
|
|
|
Jamie Strandboge |
2.8.95~2430-0ubuntu5 |
10 years ago
|
|
|
| 71
|
|
|
Tyler Hicks |
2.8.95~2430-0ubuntu3 |
10 years ago
|
|
|
| 70
|
|
|
Jamie Strandboge |
2.8.95~2430-0ubuntu2 |
10 years ago
|
|
|
| 69
|
|
[ Jamie Strandboge ]
* debian/debhelper/dh_apparmor: exit with error if aa-easyprof does not
exist
* debian/control: drop Depends on apparmor-easyprof to Suggests for
dh-apparmor
[ Seth Arnold, Jamie Strandboge, Steve Beattie, John Johansen, Tyler Hicks ]
* New upstream snapshot (LP: #1278702, #1061693, #1285653) dropping very
large Ubuntu delta and fixing the following bugs:
- Adjust fonts abstraction for libthai (LP: #1278702)
- Support translated XDG user directories (LP: #1061693)
- Adjust abstractions/web-data to include /var/www/html (LP: #1285653)
Refresh 0002-add-debian-integration-to-lighttpd.patch to include
/etc/lighttpd/conf-available/*.conf
- Adjust debian/libapparmor1.symbols to reflect new upstream versioning
for the aa_query_label() function
- Raise exceptions in Python bindings when something fails
* ship new Python replacements for previous Perl-based tools
- debian/apparmor-utils.install: remove usr/share/perl5/Immunix/*.pm and
add usr/sbin/aa-autodep, usr/sbin/aa-cleanprof and usr/sbin/aa-mergeprof
- debian/control:
+ remove various Perl dependencies
+ add python-apparmor and python3-apparmor
+ python3-apparmor Breaks: apparmor-easyprof to move the file since it
ships dist-packages/apparmor/__init__.py now
- debian/apparmor-utils.manpages: ship new manpages for aa-cleanprof and
aa-mergeprof
- debian/rules: build and install Python tools
* debian/apparmor.install:
- install apparmorfs, dovecot, kernelvars, securityfs, sys,
and xdg-user-dirs tunables and xdg-user-dirs.d directory
* debian/apparmor.dirs:
- install /etc/apparmor.d/tunables/xdg-user-dirs.d
* debian/rules: delete upstream-provided xdg-user-dirs.d/site.local
* debian/apparmor.postinst: create xdg-user-dirs.d/site.local
* debian/apparmor.postrm: remove xdg-user-dirs.d
* Remaining patches:
- add-chromium-browser.patch
- add-debian-integration-to-lighttpd.patch
- ubuntu-manpage-updates.patch
- libapparmor-layout-deb.patch
- libapparmor-mention-dbus-method-in-getcon-man.patch
- etc-writable.patch
- aa-utils_are_bilingual.patch
* New patches:
- convert-to-rules.patch
- list-fns.patch
- parse-mode.patch
- add-decimal-interp.patch
- policy_mediates.patch
- fix-failpath.patch
- feature_file.patch
- fix-network.patch
- aare-to-class.patch
- add-mediation-unix.patch
- parser_version.patch
- caching.patch
- label-class.patch
- fix-lexer-debug.patch
- use-diff-encode.patch
- fix-serialize.patch
- fix-ppc-endian-ftbfs.patch
- opt_arg.patch
- tests-cond-dbus.patch
* Move manpages from libapparmor1 to libapparmor-dev
- debian/libapparmor-dev.manpages: install aa_change_hat.2,
aa_change_profile.2, aa_find_mountpoint.2, aa_getcon.2
- debian/control: libapparmor-dev Replaces: and Breaks: libapparmor1
* Move /usr/lib/python3/dist-packages/apparmor/__init__.py from
apparmor-easyprof to python3-apparmor
- debian/control: python3-apparmor Breaks: apparmor-easyprof
- debian/apparmor-easyprof.install: remove
usr/lib/python*.*/site-packages/apparmor*
* New profiles and abstractions:
- debian/apparmor.install: tunables/dovecot, tunables/kernelvars,
tunables/xdg-user-dirs, tunables/xdg-user-dirs.d
|
Seth Arnold |
2.8.95~2430-0ubuntu1 |
10 years ago
|
|
|
| 68
|
|
|
Tyler Hicks |
2.8.0-0ubuntu38 |
10 years ago
|
|
|
| 67
|
|
|
Tyler Hicks |
2.8.0-0ubuntu37 |
10 years ago
|
|
|
| 66
|
|
|
Matthias Klose |
2.8.0-0ubuntu36 |
10 years ago
|
|
|
| 65
|
|
|
Stéphane Graber |
2.8.0-0ubuntu35 |
10 years ago
|
|
|
| 64
|
|
|
Tyler Hicks |
2.8.0-0ubuntu34 |
10 years ago
|
|
|
| 63
|
|
|
Steve Langasek |
2.8.0-0ubuntu33 |
10 years ago
|
|
|
| 62
|
|
|
Jamie Strandboge |
2.8.0-0ubuntu32 |
10 years ago
|
|
|
collapse all