- add python313.patch to fix build with python 3.13
- small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
on openSUSE <= 13.1 x86_64 (bnc#895495)
- drop the apparmorapplet-gnome, apparmor-dbus and profile-editor subpackages
(except abstractions/winbind (bnc#863226), abstractions/fonts and
- add abstractions/mysql
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
created by recent NetworkManager (see
http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
will remove AppArmor protection from running processes a last time.
Run aa-status to get a list of processes you need to restart, or reboot
- add apparmor-abstractions-ssl_certs.diff to allow access to
- add apparmor-profiles-samba4.diff - various profile additions for
- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
- add python3-apparmor subpackage (currently py2 OR py3 package can be
- fix a possible x conflict with hats or child profiles in
- add 0001-fix-for-lp929531.patch to allow reading
- move libapparmor.a and libimmunix.a from libapparmor1 to
- allow loading the libraries for samba "vfs objects" also on 32bit
- update to AppArmor 2.7.0 beta1, for details see (forwarded request 1243410 from dirkmueller)
OBS-URL: https://build.opensuse.org/request/show/1243514
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=217
- small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
on openSUSE <= 13.1 x86_64 (bnc#895495)
- drop the apparmorapplet-gnome, apparmor-dbus and profile-editor subpackages
(except abstractions/winbind (bnc#863226), abstractions/fonts and
- add abstractions/mysql
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
created by recent NetworkManager (see
http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
will remove AppArmor protection from running processes a last time.
Run aa-status to get a list of processes you need to restart, or reboot
- add apparmor-abstractions-ssl_certs.diff to allow access to
- add apparmor-profiles-samba4.diff - various profile additions for
- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
- add python3-apparmor subpackage (currently py2 OR py3 package can be
- fix a possible x conflict with hats or child profiles in
- add 0001-fix-for-lp929531.patch to allow reading
- move libapparmor.a and libimmunix.a from libapparmor1 to
- allow loading the libraries for samba "vfs objects" also on 32bit
- update to AppArmor 2.7.0 beta1, for details see
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=427
- update to AppArmor 4.0.2
- bugfix release with lots of fixes in all areas
- add new userns profiles for balena-etcher, chromium and wike
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.2
for the detailed upstream changelog
- drop upstream(ed) patches:
- aa-remove-unknown-fix-unconfined.diff
- logprof-mount-empty-source.diff
- plasmashell.diff
- sampa-rpcd-witness.diff
- sddm-xauth.diff
- teardown-unconfined.diff
- test-aa-notify.diff
- tools-fix-redefinition.diff
- utils-relax-mount-rules-2.diff
- utils-relax-mount-rules.diff
- refresh GPG key (was expired)
Note: I checked the GPG signature with both the expired and the refreshed key, and it validated with both. (forwarded request 1189675 from cboltz)
OBS-URL: https://build.opensuse.org/request/show/1189676
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=214
- bugfix release with lots of fixes in all areas
- add new userns profiles for balena-etcher, chromium and wike
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.2
for the detailed upstream changelog
- drop upstream(ed) patches:
- aa-remove-unknown-fix-unconfined.diff
- logprof-mount-empty-source.diff
- plasmashell.diff
- sampa-rpcd-witness.diff
- sddm-xauth.diff
- teardown-unconfined.diff
- test-aa-notify.diff
- tools-fix-redefinition.diff
- utils-relax-mount-rules-2.diff
- utils-relax-mount-rules.diff
- refresh GPG key (was expired)
Note: I checked the GPG signature with both the expired and the refreshed key, and it validated with both.
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=421
Note: Unfortunately my SR earlier today didn't fix everything that was reported by openQA :-(
This SR adds two more fixes. Especially teardown-unconfined.diff makes this SR a "fast track" candidate.
- add utils-relax-mount-rules.diff and utils-relax-mount-rules-2.diff:
Relax handling of mount rules in utils to avoid errors when
parsing valid profiles
- add teardown-unconfined.diff to fix aa-teardown for 'unconfined'
profiles (boo#1225457)
OBS-URL: https://build.opensuse.org/request/show/1177404
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=208
- fix bashism in %post profiles
- Update to AppArmor 4.0.1
Too many changes to list them here. See
https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.1
for the detailed upstream release notes
- add tools-fix-redefinition.diff: fix redefinition of _ in tools
- add test-aa-notify.diff: relax test-aa-notify to avoid a mismatch
with argparse on Leap 15.5
- drop upstreamed patches:
- apparmor-abstractions-openssl-allow-version-specific-en.patch
- dovecot-unix_chkpwd.diff
- smbd-unix_chkpwd.diff
- apparmor-lessopen-profile.patch: update lessopen profile to
abi/4.0
- mark local/* as %ghost so that these dummy files don't get
installed anymore (changed existing local/files will be kept,
unchanged files will be deleted)
- switch to gitlab tarballs (without pregenerated libapparmor
configure script and prebuilt techdoc.pdf)
- run libapparmor autogen.sh (needs additional BuildRequires
autoconf, autoconf-archive, automake and libtool)
- no longer package techdoc.pdf - old documentation, not worth
the texlive BuildRequires we would need to build it
- drop old (up to 2.12) cache location /var/lib/apparmor/ and the
/etc/apparmor.d/cache symlink pointing to it
- drop apparmor-samba-include-permissions-for-shares.diff - no
longer needed, update-apparmor-samba-profile in Tumbleweed works
without a pre-existing local/usr.sbin.smbd-shares file
- drop ruby-2_0-mkmf-destdir.patch - this ancient patch doesn't
change a single bit in the resulting build (anymore?)
- drop apparmor-lessopen-nfs-workaround.diff - no longer needed
since Kernel 6.0 (see https://bugs.launchpad.net/bugs/1784499)
- drop ancient, unused update-trans.sh
Note: %post profiles contains a for loop calling "rm" (to delete unchanged /etc/apparmor.d/local/* files). Please double-check for possible side effects I didn't consider.
OBS-URL: https://build.opensuse.org/request/show/1176730
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=206
- Update to AppArmor 4.0.1
Too many changes to list them here. See
https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.1
for the detailed upstream release notes
- add tools-fix-redefinition.diff: fix redefinition of _ in tools
- add test-aa-notify.diff: relax test-aa-notify to avoid a mismatch
with argparse on Leap 15.5
- drop upstreamed patches:
- apparmor-abstractions-openssl-allow-version-specific-en.patch
- dovecot-unix_chkpwd.diff
- smbd-unix_chkpwd.diff
- apparmor-lessopen-profile.patch: update lessopen profile to
abi/4.0
- mark local/* as %ghost so that these dummy files don't get
installed anymore (changed existing local/files will be kept,
unchanged files will be deleted)
- switch to gitlab tarballs (without pregenerated libapparmor
configure script and prebuilt techdoc.pdf)
- run libapparmor autogen.sh (needs additional BuildRequires
autoconf, autoconf-archive, automake and libtool)
- no longer package techdoc.pdf - old documentation, not worth
the texlive BuildRequires we would need to build it
- drop old (up to 2.12) cache location /var/lib/apparmor/ and the
/etc/apparmor.d/cache symlink pointing to it
- drop apparmor-samba-include-permissions-for-shares.diff - no
longer needed, update-apparmor-samba-profile in Tumbleweed works
without a pre-existing local/usr.sbin.smbd-shares file
- drop ruby-2_0-mkmf-destdir.patch - this ancient patch doesn't
change a single bit in the resulting build (anymore?)
- drop apparmor-lessopen-nfs-workaround.diff - no longer needed
OBS-URL: https://build.opensuse.org/request/show/1176504
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=404
