pool/apparmor
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
76a45f653d
apparmor/apparmor.changes

341 lines
12 KiB
Plaintext
Raw Normal View History

Accepting request 93892 from security:apparmor:factory - package subdomain.conf only in -parser, not in -utils package - package libapparmor.so and libimmunix.so only in libapparmor-devel, not in libapparmor1 - make Provides for perl-libapparmor versioned to avoid self-Obsoletes - move libapparmor.a and libimmunix.a from libapparmor1 to libapparmor-devel package - update to AppArmor 2.7.0 rc2 Most of the changes since rc1 were already included as patches. Additional changes: - fix logprof/genprof to recognize "mknod" in audit.log - fix libapparmor python bindings to compile with python 3 - fix wrong status message in initscript if apparmor-utils are not installed - parser/Makefile: fix some warnings, always respect CXX and LDFLAGS - fix some warnings in utils/Makefile - remove 4 upstreamed patches - remove mkdir /etc/apparmor.d/disable - that's done by upstream Makefile now - update line numbers in 2 patches OBS-URL: https://build.opensuse.org/request/show/93892 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=30
2011-11-28 12:52:47 +01:00
-------------------------------------------------------------------
Sat Nov 26 21:52:31 UTC 2011 - opensuse@cboltz.de
- package subdomain.conf only in -parser, not in -utils package
- package libapparmor.so and libimmunix.so only in libapparmor-devel,
not in libapparmor1
- make Provides for perl-libapparmor versioned to avoid self-Obsoletes
- move libapparmor.a and libimmunix.a from libapparmor1 to
libapparmor-devel package
-------------------------------------------------------------------
Thu Nov 10 20:16:24 UTC 2011 - opensuse@cboltz.de
- update to AppArmor 2.7.0 rc2
Most of the changes since rc1 were already included as patches.
Additional changes:
- fix logprof/genprof to recognize "mknod" in audit.log
- fix libapparmor python bindings to compile with python 3
- fix wrong status message in initscript if apparmor-utils are not installed
- parser/Makefile: fix some warnings, always respect CXX and LDFLAGS
- fix some warnings in utils/Makefile
- remove 4 upstreamed patches
- remove mkdir /etc/apparmor.d/disable - that's done by upstream Makefile now
- update line numbers in 2 patches
Accepting request 89885 from security:apparmor:factory Two fixes for AppArmor profiles: - make abstractions/winbind working on 64bit systems - allow loading the libraries for samba "vfs objects" also on 32bit systems (bnc#725967) Please forward these profile fixes to openSUSE 12.1. OBS-URL: https://build.opensuse.org/request/show/89885 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=29
2011-11-02 11:44:00 +01:00
-------------------------------------------------------------------
Tue Nov 1 17:39:29 UTC 2011 - opensuse@cboltz.de
- make abstractions/winbind working on 64bit systems
- allow loading the libraries for samba "vfs objects" also on 32bit
systems (bnc#725967)
Accepting request 89465 from security:apparmor:factory - allow loading the libraries for samba "vfs objects" (bnc#725967) Please include this patch in 12.1 OBS-URL: https://build.opensuse.org/request/show/89465 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=28
2011-10-27 11:03:06 +02:00
-------------------------------------------------------------------
Wed Oct 26 20:48:16 UTC 2011 - opensuse@cboltz.de
- allow loading the libraries for samba "vfs objects" (bnc#725967)
Accepting request 88695 from security:apparmor:factory - include autogenerated profile sniplet for samba shares (bnc#688040) - more helpful error message for "aa-notify -p" if the user is not in the configured group OBS-URL: https://build.opensuse.org/request/show/88695 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=26
2011-10-19 13:56:25 +02:00
-------------------------------------------------------------------
Wed Oct 19 09:53:14 UTC 2011 - opensuse@cboltz.de
- include autogenerated profile sniplet for samba shares (bnc#688040)
- more helpful error message for "aa-notify -p" if the user is not in
the configured group
Accepting request 87773 from security:apparmor:factory - update to AppArmor 2.7.0 rc1 - aa-notify: add --display option and warn if $DISPLAY is not set (important for usage with sudo on openSUSE) - fix syntax error on "rcapparmor stop" - allow read access to /proc/*/mounts in the dovecot profile OBS-URL: https://build.opensuse.org/request/show/87773 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=25
2011-10-14 09:46:42 +02:00
-------------------------------------------------------------------
Thu Oct 13 22:52:24 UTC 2011 - opensuse@cboltz.de
- update to AppArmor 2.7.0 rc1
- aa-notify: add --display option and warn if $DISPLAY is not set
(important for usage with sudo on openSUSE)
- fix syntax error on "rcapparmor stop"
- allow read access to /proc/*/mounts in the dovecot profile
Accepting request 87208 from security:apparmor:factory - add patch with upstream changes since 2.7.0 beta2 release - add example parser.conf - print warning if profile cache directory doesn't exist - remove initscript for no longer existing aa-eventd (bnc#720617) - set correct $HOME in aa-notify - enable caching of profiles (= massive speedup) (bnc#689458) - add comments for patches in .spec and comments in some patches - run spec-cleaner - add libtool as buildrequire to make the spec file more reliable OBS-URL: https://build.opensuse.org/request/show/87208 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=24
2011-10-10 14:10:08 +02:00
-------------------------------------------------------------------
Sun Oct 9 19:42:05 UTC 2011 - opensuse@cboltz.de
- add patch with upstream changes since 2.7.0 beta2 release
- add example parser.conf
- print warning if profile cache directory doesn't exist
- remove initscript for no longer existing aa-eventd (bnc#720617)
- set correct $HOME in aa-notify
- enable caching of profiles (= massive speedup) (bnc#689458)
- add comments for patches in .spec and comments in some patches
- run spec-cleaner
-------------------------------------------------------------------
Fri Sep 30 20:07:41 UTC 2011 - coolo@suse.com
- add libtool as buildrequire to make the spec file more reliable
Accepting request 82501 from security:apparmor:factory - update to AppArmor 2.7.0 beta2 - includes fixes for bnc#717707, bnc#678749, bnc#685674, bnc#679182, bnc#691072, bnc#705319, bnc#713728 - add some missing perl module Requires to perl-apparmor OBS-URL: https://build.opensuse.org/request/show/82501 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=23
2011-09-19 22:48:33 +02:00
-------------------------------------------------------------------
Fri Sep 16 15:25:19 UTC 2011 - opensuse@cboltz.de
- update to AppArmor 2.7.0 beta2
- includes fixes for bnc#717707, bnc#678749, bnc#685674, bnc#679182,
bnc#691072, bnc#705319, bnc#713728
- add some missing perl module Requires to perl-apparmor
Accepting request 82045 from security:apparmor:factory - update to AppArmor 2.7.0 beta1, for details see http://wiki.apparmor.net/index.php/ReleaseNotes_2_7 - removed lots of patches I pushed upstream - disabled apparmor-2.5.1-unified-build (patch to use automake, does not apply to 2.7 and probably won't be accepted upstream) - disabled build of tomcat_apparmor (doesn't build, deprecated upstream) - run spec-cleaner - remove *.la files - move usr.sbin.nscd profile back to apparmor-profiles package - Update patch apparmor-profiles-usr.sbin.dnsmasq to include /var/lib/libvirt/dnsmasq/*.leases (bnc#694197). OBS-URL: https://build.opensuse.org/request/show/82045 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=22
2011-09-14 13:56:46 +02:00
-------------------------------------------------------------------
Tue Sep 13 18:47:36 UTC 2011 - opensuse@cboltz.de
- update to AppArmor 2.7.0 beta1, for details see
http://wiki.apparmor.net/index.php/ReleaseNotes_2_7
- removed lots of patches I pushed upstream
- disabled apparmor-2.5.1-unified-build (patch to use automake,
does not apply to 2.7 and probably won't be accepted upstream)
- disabled build of tomcat_apparmor (doesn't build, deprecated upstream)
- run spec-cleaner
- remove *.la files
- move usr.sbin.nscd profile back to apparmor-profiles package
-------------------------------------------------------------------
Wed Sep 7 10:35:12 MDT 2011 - jfehlig@suse.com
- Update patch apparmor-profiles-usr.sbin.dnsmasq to include
/var/lib/libvirt/dnsmasq/*.leases (bnc#694197).
Accepting request 81356 from security:apparmor:factory - install SubDomain.pm compat module (bnc#713408) - Update to 2.6.1. - One patch eliminated - Lots of minor fixes - Split out more common abstractions - Add check_for_apparmor() helper. - dhcpd: Fix apparmor profile (bnc#692428) - Fixed typos in descriptions and summaries of apparmor.spec - move the requires and prerequires to the right package OBS-URL: https://build.opensuse.org/request/show/81356 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=20
2011-09-09 11:06:14 +02:00
-------------------------------------------------------------------
Mon Aug 22 11:54:21 UTC 2011 - opensuse@cboltz.de
- install SubDomain.pm compat module (bnc#713408)
-------------------------------------------------------------------
Wed Aug 3 02:46:08 CEST 2011 - jeffm@suse.de
- Update to 2.6.1.
- One patch eliminated
- Lots of minor fixes
- Split out more common abstractions
- Add check_for_apparmor() helper.
-------------------------------------------------------------------
Tue Aug 2 17:07:43 CEST 2011 - jeffm@suse.de
- dhcpd: Fix apparmor profile (bnc#692428)
Accepting request 77678 from security:apparmor:factory - Add apparmor-securityfs-systemd.patch: do not mount securityfs when running under systemd, just access the directory, systemd will automount it (bnc#704460). OBS-URL: https://build.opensuse.org/request/show/77678 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=18
2011-08-02 16:41:53 +02:00
-------------------------------------------------------------------
Tue Aug 2 09:19:45 UTC 2011 - fcrozat@suse.com
- Add apparmor-securityfs-systemd.patch: do not mount securityfs
when running under systemd, just access the directory, systemd
will automount it (bnc#704460).
Accepting request 81356 from security:apparmor:factory - install SubDomain.pm compat module (bnc#713408) - Update to 2.6.1. - One patch eliminated - Lots of minor fixes - Split out more common abstractions - Add check_for_apparmor() helper. - dhcpd: Fix apparmor profile (bnc#692428) - Fixed typos in descriptions and summaries of apparmor.spec - move the requires and prerequires to the right package OBS-URL: https://build.opensuse.org/request/show/81356 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=20
2011-09-09 11:06:14 +02:00
-------------------------------------------------------------------
Sun Jul 17 20:04:18 UTC 2011 - andrea.turrini@gmail.com
- Fixed typos in descriptions and summaries of apparmor.spec
Accepting request 75398 from security:apparmor:factory - Fixed building of pam_apparmor to properly link libpam (bnc#696553). - Fixed building of apache2-mod_apparmor to properly link (bnc#701821). (forwarded request 74458 from jeff_mahoney) OBS-URL: https://build.opensuse.org/request/show/75398 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=16
2011-07-05 13:45:31 +02:00
-------------------------------------------------------------------
Fri Jun 24 16:02:21 CEST 2011 - jeffm@suse.de
- Fixed building of pam_apparmor to properly link libpam (bnc#696553).
- Fixed building of apache2-mod_apparmor to properly link (bnc#701821).
Accepting request 81356 from security:apparmor:factory - install SubDomain.pm compat module (bnc#713408) - Update to 2.6.1. - One patch eliminated - Lots of minor fixes - Split out more common abstractions - Add check_for_apparmor() helper. - dhcpd: Fix apparmor profile (bnc#692428) - Fixed typos in descriptions and summaries of apparmor.spec - move the requires and prerequires to the right package OBS-URL: https://build.opensuse.org/request/show/81356 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=20
2011-09-09 11:06:14 +02:00
-------------------------------------------------------------------
Tue Jun 21 09:54:28 UTC 2011 - coolo@novell.com
- move the requires and prerequires to the right package
Accepting request 75398 from security:apparmor:factory - Fixed building of pam_apparmor to properly link libpam (bnc#696553). - Fixed building of apache2-mod_apparmor to properly link (bnc#701821). (forwarded request 74458 from jeff_mahoney) OBS-URL: https://build.opensuse.org/request/show/75398 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=16
2011-07-05 13:45:31 +02:00
-------------------------------------------------------------------
Wed Apr 27 17:28:58 UTC 2011 - opensuse@cboltz.de
- make the -doc and -profiles subpackages noarch (again)
Accepting request 65172 from security:apparmor:factory Accepted submit request 65172 from user licensedigger OBS-URL: https://build.opensuse.org/request/show/65172 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=14
2011-03-25 09:04:51 +01:00
-------------------------------------------------------------------
Thu Mar 24 21:30:15 CET 2011 - jeffm@suse.de
- Added alias from Immunix::SubDomain to Immunix:AppArmor to allow
older users of perl-apparmor to work properly.
-------------------------------------------------------------------
Tue Mar 22 21:29:49 CET 2011 - jeffm@suse.de
- Properly re-created links to old utility names.
-------------------------------------------------------------------
Mon Mar 14 19:24:02 CET 2011 - jeffm@suse.de
- Added /etc/ethers and /var/run/dnsmasq-forwarders to
usr.sbin.dnsmasq (bnc#678749)
-------------------------------------------------------------------
Mon Mar 14 16:48:53 CET 2011 - jeffm@suse.de
- Update to 2.6.0
- 19 patches eliminated
- Lots of minor fixes.
- Split out more common abstractions
- Added more local includes
Accepting request 63720 from security:apparmor:factory Accepted submit request 63720 from user coolo OBS-URL: https://build.opensuse.org/request/show/63720 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=12
2011-03-10 12:49:13 +01:00
-------------------------------------------------------------------
Tue Mar 1 09:56:30 UTC 2011 - rhafer@suse.de
- Additional libvirt related fixes in usr.sbin.dnsmasq (bnc#675867)
-------------------------------------------------------------------
Thu Feb 24 15:52:15 CET 2011 - jeffm@suse.de
- Added 'network packet raw' to dhclient profile.
Accepting request 62599 from security:apparmor:factory Accepted submit request 62599 from user coolo OBS-URL: https://build.opensuse.org/request/show/62599 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=10
2011-02-23 11:04:10 +01:00
-------------------------------------------------------------------
Tue Feb 22 12:45:43 UTC 2011 - bwiedemann@novell.com
- Add Requires for used perl packages (bnc#670650).
Accepting request 59942 from security:apparmor:factory Accepted submit request 59942 from user jeff_mahoney OBS-URL: https://build.opensuse.org/request/show/59942 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=7
2011-02-03 22:31:10 +01:00
-------------------------------------------------------------------
Tue Jan 25 23:25:28 CET 2011 - jeffm@suse.de
- Updated dhclient profile and added dhclient-script profile (bnc#561152).
-------------------------------------------------------------------
Tue Jan 25 18:11:00 CET 2011 - jeffm@suse.de
- Added ability to completely disable repositories.
-------------------------------------------------------------------
Mon Jan 24 21:27:45 CET 2011 - jeffm@suse.de
- Properly indent sub-profiles after genprof completion (bnc#480795).
Accepting request 59064 from security:apparmor:factory Accepted submit request 59064 from user jeff_mahoney OBS-URL: https://build.opensuse.org/request/show/59064 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=5
2011-01-25 13:16:44 +01:00
-------------------------------------------------------------------
Mon Jan 24 20:16:03 CET 2011 - jeffm@suse.de
- Inherit flags in sub-profiles when generating profiles (bnc#496204).
-------------------------------------------------------------------
Mon Jan 24 01:02:53 CET 2011 - jeffm@suse.de
- Stop treating profiles shipped with the package as config files.
- /etc/apparmor.d will still be treated specially.
- Add support for parsing network operation events (bnc#665483)
-------------------------------------------------------------------
Mon Jan 24 00:23:35 CET 2011 - jeffm@suse.de
- Fix for sbin.klogd profile using kernel versions >= 2.6.38-rc1.
-------------------------------------------------------------------
Mon Jan 24 00:11:28 CET 2011 - jeffm@suse.de
- Update to apparmor-2.5 r1445.
- Includes 3 of the fixes below.
- Several testsuite fixes.
- Update for Thunderbird profile.
-------------------------------------------------------------------
Fri Jan 21 19:07:15 CET 2011 - jeffm@suse.de
- Add support for libvirt in usr.sbin.dnsmasq (bnc#666090)
Accepting request 58682 from security:apparmor:factory Accepted submit request 58682 from user coolo OBS-URL: https://build.opensuse.org/request/show/58682 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=3
2011-01-18 13:50:57 +01:00
-------------------------------------------------------------------
Tue Jan 18 10:51:33 UTC 2011 - coolo@novell.com
- fix rm call for nscd profile to avoid file conflict
-------------------------------------------------------------------
Tue Jan 11 15:24:16 CET 2011 - jeffm@suse.de
- profiles: Add openssl abstraction (bnc#623886).
-------------------------------------------------------------------
Tue Jan 11 15:12:45 CET 2011 - jeffm@suse.de
- Added support for sys_nice to ntpd profile (bnc#657054).
Accepting request 57745 from security:apparmor:factory Accepted submit request 57745 from user jeff_mahoney OBS-URL: https://build.opensuse.org/request/show/57745 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=1
2011-01-17 17:43:05 +01:00
-------------------------------------------------------------------
Mon Jan 10 19:27:01 CET 2011 - jeffm@suse.de
- apparmor-utils: Support newer auditd formatted messages.
- Fix two x transition conflict bugs. (bnc#662928)
-------------------------------------------------------------------
Thu Jan 6 16:23:19 UTC 2011 - rhafer@suse.de
- Splitted ldap related things from nameservice into separate
profile and added some missing paths (bnc#662761)
-------------------------------------------------------------------
Wed Dec 22 03:41:43 CET 2010 - jeffm@suse.de
- Fixed pod2man macros with older versions of GNU make
-------------------------------------------------------------------
Tue Dec 21 00:36:39 CET 2010 - jeffm@suse.de
- Fixed building of perl and ruby SWIG modules. The former
is required for apparmor-utils to work properly.
-------------------------------------------------------------------
Tue Dec 7 18:22:55 CET 2010 - jeffm@suse.de
- Fixed use-after-free issue in apparmor_parser.
-------------------------------------------------------------------
Tue Dec 7 17:52:59 CET 2010 - jeffm@suse.de
- Added fixes for logprof issuing uninitialized variable errors
while encountering audit messages for unconfined processes.
-------------------------------------------------------------------
Wed Dec 1 19:52:58 CET 2010 - jeffm@suse.de
- Updated cupsd profile (bnc#539401)
-------------------------------------------------------------------
Wed Dec 1 19:00:56 CET 2010 - jeffm@suse.de
- Fix {proc} vs {PROC} macro usage in firefox profile (bnc#436262)
-------------------------------------------------------------------
Wed Dec 1 18:41:31 CET 2010 - jeffm@suse.de
- Added support for eDirectory nameservice (bnc#621394)
-------------------------------------------------------------------
Wed Dec 1 18:05:44 CET 2010 - jeffm@suse.de
- Fixed incorrect /proc/*/sys usage in usr.sbin.ntpd profile (bnc#634801)
-------------------------------------------------------------------
Wed Dec 1 17:39:08 CET 2010 - jeffm@suse.de
- Added fix for another case of whitespace affecting profile
removal (bnc#510740)
-------------------------------------------------------------------
Tue Nov 30 12:00:00 CET 2010 - jeffm@suse.de
- Added support for unified build, which massively simplified
the packaging.
-------------------------------------------------------------------
Fri Nov 15 21:22:46 CET 2010 - czanik@balabit.hu
- Fix for syslog-ng profile to allow upgrade to v3.2
- add mysql support to syslog-ng profile
-------------------------------------------------------------------
Thu Oct 21 15:16:38 CEST 2010 - jeffm@suse.de
- Added support for enabling/disabling the module automatically
during installation/removal (bnc#623246)
-------------------------------------------------------------------
Tue Oct 5 17:58:31 CEST 2010 - jeffm@suse.de
- Converted archive to tar.bz2.
-------------------------------------------------------------------
Tue Oct 5 17:49:16 CEST 2010 - jeffm@suse.de
- Updated to 2.5.1-final.
- Lots of testcase updates.
-------------------------------------------------------------------
Fri Aug 27 21:21:38 CEST 2010 - jeffm@suse.de
- Initial packaging of AppArmor 2.5
- Now contained in a single archive so built from a single spec file
Reference in New Issue Copy Permalink