pool/apparmor
SHA256
17
0
Fork 1
Code Issues Pull Requests Activity
492 Commits 3 Branches 0 Tags
factory
Commit Graph

492 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Ana Guerrero
1eacf12bba Accepting request 1332580 from security:apparmor 
- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff (forwarded request 1332579 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1332580
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=231
 2026-02-13 11:40:28 +00:00
Christian Boltz
24eced1613 - update to AppArmor 4.1.6 
- various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=458
 2026-02-11 22:56:25 +00:00
Ana Guerrero
dbc86a009e Accepting request 1326518 from security:apparmor 
- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff (forwarded request 1326517 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1326518
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=230
 2026-01-12 11:38:49 +00:00
Christian Boltz
aed9653d41 Accepting request 1326517 from home:cboltz 
- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff

OBS-URL: https://build.opensuse.org/request/show/1326517
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=456
 2026-01-10 15:29:51 +00:00
Ana Guerrero
2c57a17a0f Accepting request 1312207 from security:apparmor 
- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles (forwarded request 1312206 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1312207
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=229
 2025-10-21 09:14:32 +00:00
Christian Boltz
f6ff052a6a Accepting request 1312206 from home:cboltz 
- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles

OBS-URL: https://build.opensuse.org/request/show/1312206
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=454
 2025-10-19 10:49:26 +00:00
Dominique Leuenberger
631ba8661d Accepting request 1309114 from security:apparmor 
- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff

- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470) (forwarded request 1309113 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1309114
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=228
 2025-10-07 16:25:38 +00:00
Christian Boltz
92f537017a Accepting request 1309113 from home:cboltz 
- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff

- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)

OBS-URL: https://build.opensuse.org/request/show/1309113
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=452
 2025-10-05 18:27:27 +00:00
Ana Guerrero
e155b82a22 Accepting request 1294456 from security:apparmor 
- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)

- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)

OBS-URL: https://build.opensuse.org/request/show/1294456
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=227
 2025-07-20 13:28:19 +00:00
Christian Boltz
8554f830ec Accepting request 1294455 from home:cboltz 
- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)

OBS-URL: https://build.opensuse.org/request/show/1294455
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=450
 2025-07-18 21:20:53 +00:00
Christian Boltz
36662cdff0 Accepting request 1294374 from home:cboltz 
- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)

OBS-URL: https://build.opensuse.org/request/show/1294374
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=449
 2025-07-18 12:19:34 +00:00
Ana Guerrero
b82ba8899c Accepting request 1293528 from security:apparmor 
- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)

OBS-URL: https://build.opensuse.org/request/show/1293528
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=226
 2025-07-16 15:35:31 +00:00
Christian Boltz
a929618a3e Accepting request 1293527 from home:cboltz 
fix patchlevel

OBS-URL: https://build.opensuse.org/request/show/1293527
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=447
 2025-07-15 19:30:02 +00:00
Christian Boltz
0a67b0f4bd Accepting request 1293520 from home:cboltz 
- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)

OBS-URL: https://build.opensuse.org/request/show/1293520
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=446
 2025-07-15 18:22:15 +00:00
Ana Guerrero
bcfcd25415 Accepting request 1288380 from security:apparmor 
- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog (forwarded request 1288379 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1288380
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=225
 2025-06-27 21:00:36 +00:00
Christian Boltz
69759d5376 Accepting request 1288379 from home:cboltz 
- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog

OBS-URL: https://build.opensuse.org/request/show/1288379
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=444
 2025-06-24 21:32:55 +00:00
Ana Guerrero
add5404fb0 Accepting request 1284254 from security:apparmor 
- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)

Note: If openQA still fails with more AppArmor denials in staging, feel free to decline - and point me to the openQA audit.log so that I can have a look and add more permissions. I'd prefer to have a single bigger change over 5 incremental fixes in Factory ;-)

Also note that the "mailserver_setup" test in https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=apparmor_profile&version=Tumbleweed#step/mailserver_setup/165 fails for unrelated reasons - with dovecot 2.4, /etc/dovecot/conf.d/ doesn't exist by default anymore, which also makes creating a file in that directory hard.

OBS-URL: https://build.opensuse.org/request/show/1284254
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=224
 2025-06-11 14:20:06 +00:00
Christian Boltz
1f2aa77657 Accepting request 1284253 from home:cboltz 
- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)

OBS-URL: https://build.opensuse.org/request/show/1284253
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=442
 2025-06-09 16:40:45 +00:00
Ana Guerrero
f32d44ce36 Accepting request 1282447 from security:apparmor 
- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008) (forwarded request 1282446 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1282447
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=223
 2025-06-06 20:34:34 +00:00
Christian Boltz
3f7afac898 Accepting request 1282446 from home:cboltz 
- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)

OBS-URL: https://build.opensuse.org/request/show/1282446
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=440
 2025-06-03 19:27:18 +00:00
Ana Guerrero
b0ffebaa01 Accepting request 1277890 from security:apparmor 
- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553) (forwarded request 1277180 from dmdiss)

OBS-URL: https://build.opensuse.org/request/show/1277890
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=222
 2025-05-23 12:27:41 +00:00
Christian Boltz
53591a7244 Accepting request 1277180 from home:dmdiss:aa-profile-stale-cache 
- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)

OBS-URL: https://build.opensuse.org/request/show/1277180
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=438
 2025-05-15 19:48:11 +00:00
Ana Guerrero
11ba0220c0 Accepting request 1268895 from security:apparmor 
changelog update: add missing
- remove upstream py313-aa-notify.patch (forwarded request 1268894 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1268895
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=221
 2025-04-15 14:44:47 +00:00
Christian Boltz
a59705aa85 Accepting request 1268894 from home:cboltz 
changelog update: add missing
- remove upstream py313-aa-notify.patch

OBS-URL: https://build.opensuse.org/request/show/1268894
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=436
 2025-04-12 20:49:55 +00:00
Christian Boltz
7a904f7714 Accepting request 1268891 from home:cboltz 
TL;DR: update to AppArmor 4.1.0

Details (including 4.1 beta updates):

- update to ApppArmor 4.1.0
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.0
    for the detailed upstream changelog

- update to AppArmor 4.1 beta5
- remove upstream(ed) patches
  - aa-notify-polkit--mr-1540.diff
  - aa-notify-ttkthemes-fallback--mr1324-partial.diff
  - libapparmor-fixes--mr-1536.diff

- add libapparmor-fixes--mr-1536.diff to fix Leap 15.x and i586 build
- add aa-notify-polkit--mr-1540.diff to remove DESTDIR from polkit file
- own /usr/share/polkit-1 and /usr/share/polkit-1/actions

- update to AppArmor 4.1 beta4
- drop upstream(ed) patches:
  - mesa-cachedir.diff
  - python313.patch
- (Build)Require python3-tk - used by latest aa-notify
- add aa-notify-ttkthemes-fallback--mr1324-partial.diff

OBS-URL: https://build.opensuse.org/request/show/1268891
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=435
 2025-04-12 19:54:02 +00:00
Ana Guerrero
c75b1ce3be Accepting request 1254512 from security:apparmor 
- remove unused pcre build dependency (forwarded request 1254508 from AndreasStieger)

OBS-URL: https://build.opensuse.org/request/show/1254512
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=220
 2025-03-20 18:24:05 +00:00
Christian Boltz
0b5c8f6f08 Accepting request 1254508 from home:AndreasStieger:branches:security:apparmor 
- remove unused pcre build dependency

OBS-URL: https://build.opensuse.org/request/show/1254508
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=433
 2025-03-19 19:39:19 +00:00
Dominique Leuenberger
42efda8d7e Accepting request 1248250 from security:apparmor 
- add py313-aa-notify.patch to adapt the last bits to python 3.13 (forwarded request 1247658 from mcalabkova)

OBS-URL: https://build.opensuse.org/request/show/1248250
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=219
 2025-02-25 15:40:30 +00:00
Christian Boltz
b214ee5dc8 Accepting request 1247658 from home:mcalabkova:branches:security:apparmor 
- add py313-aa-notify.patch to adapt the last bits to python 3.13

OBS-URL: https://build.opensuse.org/request/show/1247658
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=431
 2025-02-24 22:01:24 +00:00
Ana Guerrero
412345cac8 Accepting request 1247245 from security:apparmor 
OBS-URL: https://build.opensuse.org/request/show/1247245
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=218
 2025-02-20 15:27:55 +00:00
David Disseldorp
f16f43aa3e Accepting request 1247095 from home:mcepl:branches:security:apparmor 
- Fix commented out macros

OBS-URL: https://build.opensuse.org/request/show/1247095
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=429
 2025-02-19 22:07:29 +00:00
Ana Guerrero
6704559359 Accepting request 1243514 from security:apparmor 
- add python313.patch to fix build with python 3.13

  - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
    on openSUSE <= 13.1 x86_64 (bnc#895495)
- drop the apparmorapplet-gnome, apparmor-dbus and profile-editor subpackages
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
  - add abstractions/mysql
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
- add apparmor-abstractions-ssl_certs.diff to allow access to
- add apparmor-profiles-samba4.diff - various profile additions for
- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
- add python3-apparmor subpackage (currently py2 OR py3 package can be
  - fix a possible x conflict with hats or child profiles in
- add 0001-fix-for-lp929531.patch to allow reading
- move libapparmor.a and libimmunix.a from libapparmor1 to
- allow loading the libraries for samba "vfs objects" also on 32bit
- update to AppArmor 2.7.0 beta1, for details see (forwarded request 1243410 from dirkmueller)

OBS-URL: https://build.opensuse.org/request/show/1243514
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=217
 2025-02-06 21:02:19 +00:00
Christian Boltz
02715422e8 Accepting request 1243410 from home:dirkmueller:Factory 
- add python313.patch to fix build with python 3.13

  - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
    on openSUSE <= 13.1 x86_64 (bnc#895495)
- drop the apparmorapplet-gnome, apparmor-dbus and profile-editor subpackages
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
  - add abstractions/mysql
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
- add apparmor-abstractions-ssl_certs.diff to allow access to
- add apparmor-profiles-samba4.diff - various profile additions for
- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
- add python3-apparmor subpackage (currently py2 OR py3 package can be
  - fix a possible x conflict with hats or child profiles in
- add 0001-fix-for-lp929531.patch to allow reading
- move libapparmor.a and libimmunix.a from libapparmor1 to
- allow loading the libraries for samba "vfs objects" also on 32bit
- update to AppArmor 2.7.0 beta1, for details see

OBS-URL: https://build.opensuse.org/request/show/1243410
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=427
 2025-02-05 22:05:46 +00:00
Ana Guerrero
309fc3b0a4 Accepting request 1204991 from security:apparmor 
- add mesa-cachedir.diff: new cachedir in Mesa 24.2.2

- update to AppArmor 4.0.3
  - several small bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.3
    for the full release notes (forwarded request 1204990 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1204991
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=216
 2024-10-02 19:31:50 +00:00
Christian Boltz
d9053065c2 Accepting request 1204990 from home:cboltz 
- add mesa-cachedir.diff: new cachedir in Mesa 24.2.2

- update to AppArmor 4.0.3
  - several small bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.3
    for the full release notes

OBS-URL: https://build.opensuse.org/request/show/1204990
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=425
 2024-10-01 20:36:55 +00:00
Ana Guerrero
1fa5024874 Accepting request 1195595 from security:apparmor 
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476] (forwarded request 1195292 from pgajdos)

OBS-URL: https://build.opensuse.org/request/show/1195595
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=215
 2024-08-23 20:26:09 +00:00
Christian Boltz
d80a5b0eda Accepting request 1195292 from home:pgajdos 
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]

OBS-URL: https://build.opensuse.org/request/show/1195292
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=423
 2024-08-22 19:23:03 +00:00
Dominique Leuenberger
4c6747fb94 Accepting request 1189676 from security:apparmor 
- update to AppArmor 4.0.2
  - bugfix release with lots of fixes in all areas
  - add new userns profiles for balena-etcher, chromium and wike
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.2
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - aa-remove-unknown-fix-unconfined.diff
  - logprof-mount-empty-source.diff
  - plasmashell.diff
  - sampa-rpcd-witness.diff
  - sddm-xauth.diff
  - teardown-unconfined.diff
  - test-aa-notify.diff
  - tools-fix-redefinition.diff
  - utils-relax-mount-rules-2.diff
  - utils-relax-mount-rules.diff
- refresh GPG key (was expired)


Note: I checked the GPG signature with both the expired and the refreshed key, and it validated with both. (forwarded request 1189675 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1189676
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=214
 2024-07-28 15:18:51 +00:00
Christian Boltz
fa4e51666f Accepting request 1189675 from home:cboltz 
- update to AppArmor 4.0.2
  - bugfix release with lots of fixes in all areas
  - add new userns profiles for balena-etcher, chromium and wike
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.2
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - aa-remove-unknown-fix-unconfined.diff
  - logprof-mount-empty-source.diff
  - plasmashell.diff
  - sampa-rpcd-witness.diff
  - sddm-xauth.diff
  - teardown-unconfined.diff
  - test-aa-notify.diff
  - tools-fix-redefinition.diff
  - utils-relax-mount-rules-2.diff
  - utils-relax-mount-rules.diff
- refresh GPG key (was expired)


Note: I checked the GPG signature with both the expired and the refreshed key, and it validated with both.

OBS-URL: https://build.opensuse.org/request/show/1189675
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=421
 2024-07-25 21:08:11 +00:00
Ana Guerrero
0ef5d3e97d Accepting request 1183251 from security:apparmor 
- add sampa-rpcd-witness.diff: allow samba-dcerpcd to execute
  rpcd_witness (boo#1225811) (forwarded request 1183249 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1183251
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=213
 2024-06-28 13:46:45 +00:00
Christian Boltz
d7d4455ed0 Accepting request 1183249 from home:cboltz 
- add sampa-rpcd-witness.diff: allow samba-dcerpcd to execute
  rpcd_witness (boo#1225811)

OBS-URL: https://build.opensuse.org/request/show/1183249
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=419
 2024-06-25 20:04:16 +00:00
Ana Guerrero
c928bce76d Accepting request 1180048 from security:apparmor 
- add logprof-mount-empty-source.diff: add support for mount rules
  with quoted paths and empty source (boo#1226031) (forwarded request 1180047 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1180048
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=212
 2024-06-12 13:37:42 +00:00
Christian Boltz
ad158c6455 Accepting request 1180047 from home:cboltz 
- add logprof-mount-empty-source.diff: add support for mount rules
  with quoted paths and empty source (boo#1226031)

OBS-URL: https://build.opensuse.org/request/show/1180047
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=417
 2024-06-11 16:36:48 +00:00
Ana Guerrero
2cf67447f8 Accepting request 1178600 from security:apparmor 
- add sddm-xauth.diff - sddm uses a new path for xauth (boo#1223900)
- add plasmashell.diff - fix QtWebEngineProcess path to prevent a
  crash in plasmashell (boo#1225961) (forwarded request 1178599 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1178600
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=211
 2024-06-06 10:31:39 +00:00
Christian Boltz
a426c289cb Accepting request 1178599 from home:cboltz 
- add sddm-xauth.diff - sddm uses a new path for xauth (boo#1223900)
- add plasmashell.diff - fix QtWebEngineProcess path to prevent a
  crash in plasmashell (boo#1225961)

OBS-URL: https://build.opensuse.org/request/show/1178599
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=415
 2024-06-04 19:56:31 +00:00
Ana Guerrero
960c8a32fe Accepting request 1177757 from security:apparmor 
- Also exclude podman profile - boo#1225608 (forwarded request 1177727 from Guillaume_G)

OBS-URL: https://build.opensuse.org/request/show/1177757
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=210
 2024-05-30 13:31:28 +00:00
Christian Boltz
7891d97dcf Accepting request 1177727 from home:Guillaume_G:branches:security:apparmor 
- Also exclude podman profile - boo#1225608

OBS-URL: https://build.opensuse.org/request/show/1177727
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=413
 2024-05-30 13:02:46 +00:00
Dominique Leuenberger
828cd00037 Accepting request 1177466 from security:apparmor 
- Exclude the crun profile in addition to runc (forwarded request 1177448 from favogt)

OBS-URL: https://build.opensuse.org/request/show/1177466
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=209
 2024-05-29 08:12:11 +00:00
Dominique Leuenberger
32de4dfd38 Accepting request 1177448 from home:favogt:branches:security:apparmor 
- Exclude the crun profile in addition to runc

OBS-URL: https://build.opensuse.org/request/show/1177448
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=411
 2024-05-29 08:11:54 +00:00
Ana Guerrero
8de43f7328 Accepting request 1177404 from security:apparmor 
Note: Unfortunately my SR earlier today didn't fix everything that was reported by openQA :-(

This SR adds two more fixes. Especially teardown-unconfined.diff makes this SR a "fast track" candidate.

- add utils-relax-mount-rules.diff and utils-relax-mount-rules-2.diff:
  Relax handling of mount rules in utils to avoid errors when
  parsing valid profiles
- add teardown-unconfined.diff to fix aa-teardown for 'unconfined'
  profiles (boo#1225457)

OBS-URL: https://build.opensuse.org/request/show/1177404
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=208
 2024-05-28 20:03:24 +00:00