~ubuntu-branches/ubuntu/wily/apparmor-easyprof-ubuntu/wily : changes

~ubuntu-branches/ubuntu/wily/apparmor-easyprof-ubuntu/wily » Changes from revision 116

From Revision 116 to 97

Rev	Summary	Authors	Tags	Date
116	adjust autopkgtests for in-app-purchases adjust autopkgtests for in-app-purchases	Jamie Strandboge	15.10.11	8 years ago
115	[ Rodney Dawes ] [ Rodney Dawes ] Add in-app-purchases policy group for IAP support (LP: #1498202)	Jamie Strandboge	15.10.10	8 years ago
114	[ Alberto Mardegan ] [ Alberto Mardegan ] ubuntu/15.10/accounts: add back v1 API	Jamie Strandboge	15.10.9	8 years ago
113	[ Alberto Mardegan ] [ Alberto Mardegan ] * ubuntu/15.10/accounts: use only the new Online Accounts v2 API * ubuntu/1.[23]/accounts: add the new Online Accounts v2 API * ubuntu/15.10/ubuntu-account-plugin: add the required v1 API	Jamie Strandboge	15.10.8	8 years ago
112	ubuntu/ubuntu-webapp: allow read access to /usr/share/ubuntu... ubuntu/ubuntu-webapp: allow read access to /usr/share/ubuntu-html5-theme and /usr/share/ubuntu-html5-ui-toolkit (LP: #1477580)	Jamie Strandboge	15.10.7	8 years ago
111	* add ubuntu/keep-display-on for using the Unity screen DBus... * add ubuntu/keep-display-on for using the Unity screen DBus API - LP: #1462489 * adjust autopkgtests for keep-display-on	Jamie Strandboge	15.10.6	8 years ago
110	* ubuntu/ubuntu-account-plugin (LP: #1468792): * ubuntu/ubuntu-account-plugin (LP: #1468792): - allow access to QML cache - explicitly deny access to /proc/[0-9]/mounts and /dev/disk/by-label/ hardware/graphics.d/apparmor-easyprof-ubuntu_(hammerhead\|mako\|flo): also allow access to kgsl-3d0.0/kgsl/kgsl-3d0/reset_count	Jamie Strandboge	15.10.5	8 years ago
109	[ Ken VanDine ] [ Ken VanDine ] Fixed the interface name for the SocketDemangler rule in the ubuntu-sdk template and added rule to allow the socket-demangler to be executed.	Jamie Strandboge	15.10.4	8 years ago
108	ubuntu/unconfined: remove autopilot specific rules and use s... ubuntu/unconfined: remove autopilot specific rules and use simpler '/*pix,' rule. This is possible because dbus-property-service no longer ships 'fakeenv' rules. This is only backportable on earlier releases if dbus-property-service in those releases has the same change. (LP: #1464341)	Jamie Strandboge	15.10.3	8 years ago
107	[ Ted Gould ] [ Ted Gould ] ubuntu/ubuntu-sdk: DBus rule for UAL TPS untrusted helpers (LP: #1462494)	Jamie Strandboge	15.10.2	8 years ago
106	[ James Henstridge ] [ James Henstridge ] * ubuntu/ubuntu-sdk: add rules to allow access to the new GetThumbnail method [ Jamie Strandboge ] * create policy version 15.10 for wily * adjust autopkgtests for policy version 15.10 * README.source: update for new version numbers that track releases	Jamie Strandboge	15.10.1	8 years ago
105	templates/: explicitly deny noisy access to accountsservice templates/: explicitly deny noisy access to accountsservice (LP: #1433590)	Jamie Strandboge	1.3.10	9 years ago
104	* templates/ubuntu-sdk\|ubuntu-webapp: explicitly deny noisy ... * templates/ubuntu-sdk\|ubuntu-webapp: explicitly deny noisy /dev/tty access * policygroups/accounts: also deny 'r' to /{,var/}run/user/*/signond/socket to silence expected noisy denial (LP: #1415492)	Jamie Strandboge	1.3.9	9 years ago
103	hardware/video.d/apparmor-easyprof-ubuntu_mako: add accesses... hardware/video.d/apparmor-easyprof-ubuntu_mako: add accesses for video4linux 1 and 2 devices needed by mediascanner2 (gst-plugin-scanner) et al	Jamie Strandboge	1.3.8	9 years ago
102	ubuntu/webview: allow oxide_helper read access to /sys/devic... ubuntu/webview: allow oxide_helper read access to /sys/devices/system/cpu/ and /sys/devices/system/cpu/cpu[0-9]*/cpufreq/cpuinfo_max_freq	Jamie Strandboge	1.3.7	9 years ago
101	ubuntu/1.0/ubuntu-{sdk,webapp}: also allow access to mir lib... ubuntu/1.0/ubuntu-{sdk,webapp}: also allow access to mir libraries via the new mir abstraction for 1.0 templates (LP: #1422521)	Steve Beattie	1.3.6	9 years ago
100	[ Alberto Mardegan ] [ Alberto Mardegan ] * ubuntu/accounts: explictly deny access to the p2p socket. This will now be available only to unconfined apps to support a trusted socket for privileged processes (LP: #1415492) [ Jamie Strandboge ] * add ubuntu/1.2/ubuntu-account-plugin template and add to 1.3 policy (LP: #1219644) * adjust expected_templates_12 in autopkgtests to have ubuntu-account-plugin * ubuntu/webview: allow /sys/devices/system/cpu/*/cpufreq/cpuinfo_max_freq readonly access	Jamie Strandboge	1.3.4	9 years ago
99	ubuntu/{music,pictures,video}_files: temporarily allow read... ubuntu/{music,pictures,video}_files: temporarily allow read access to global SD card user directory (LP: #1392368). This can be removed once there is a proper API for apps to find the SD card label.	Jamie Strandboge	1.3.3	9 years ago
98	[ Ricardo Salveti de Araujo ] [ Ricardo Salveti de Araujo ] Adding hardware/video.d/apparmor-easyprof-ubuntu_manta to allow rw on /dev/video, needed for hardware video decoding (LP: #1408130). (Note: we may need to add rw on /dev/v4l-subdev, but this seems to be enough for now)	Jamie Strandboge	1.3.2	9 years ago
97	* ubuntu/ubuntu-sdk: * ubuntu/ubuntu-sdk: - explicitly deny reads on ~/.cache/QML/Apps/ to silence noisy denials. Undo this when LP: 1381620 is fixed in qtdeclarative-opensource-src - explicitly deny dbus bind on name="org.freedesktop.Application" since it is noisy. Undo this when LP: 1378823 is fixed in ubuntu-ui-toolkit * ubuntu/1.3/ubuntu-sdk: drop html5-container policy. html5 apps should use webapp-container and specify the 'webview' policy group with 1.3 (15.04) policy (LP: #1392461) * ubuntu/ubuntu-scope-network, pending/ubuntu-scope-local-content: allow scopes to read data from the apps data dir (LP: #1384286) * adjust all dbus rules to use peer=(label=unconfined) to prevent coordinated communications between apps over DBus (LP: #1383824) * ubuntu/{music,pictures,video}_files: allow access to global SD card directories (LP: #1391930) debian/control: Depends on apparmor >= 2.8.98-0ubuntu2~ for the dbus peer changes (we need at least apparmor_parser 2.9.beta4 for these)	Jamie Strandboge	1.3.1	9 years ago

Older »