Christian Boltz
4c6d64a169
Accepting request 842314 from home:cboltz
...
- update to AppArmor 2.13.5
- add missing permissions to several profiles and abstractions
- bugfixes in parser and tools
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
for the detailed upstream changelog
- remove upstream(ed) patches
- changes-since-2.13.4.diff
- abstractions-X-xauth-mr582.diff
- sevdb-caps-mr589.diff
- libvirt-leaseshelper.patch
- cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658 )
libapparmor:
- update to AppArmor 2.13.5
- fix two potential build failures
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
for the detailed upstream changelog
- add libapparmor-so-number.diff to fix libapparmor so version (!658 )
OBS-URL: https://build.opensuse.org/request/show/842314
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=279
2020-10-17 16:56:14 +00:00
Dominique Leuenberger
7a921ffd7b
Accepting request 841767 from security:apparmor
...
- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
cap_checkpoint_restore.diff)
- %service_del_postun_without_restart only works for Tumbleweed,
keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x
OBS-URL: https://build.opensuse.org/request/show/841767
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=143
2020-10-15 11:44:02 +00:00
Christian Boltz
9c5c1e5926
Accepting request 841766 from home:cboltz
...
- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
cap_checkpoint_restore.diff)
OBS-URL: https://build.opensuse.org/request/show/841766
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=277
2020-10-14 12:23:14 +00:00
Christian Boltz
13d781e542
Accepting request 840334 from home:cboltz
...
- %service_del_postun_without_restart only works for Tumbleweed,
keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x
OBS-URL: https://build.opensuse.org/request/show/840334
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=276
2020-10-08 21:20:17 +00:00
Dominique Leuenberger
b88fe66366
Accepting request 838608 from security:apparmor
...
- Make use of %service_del_postun_without_restart
And stop using DISABLE_RESTART_ON_UPDATE as this interface is
obsolete. (forwarded request 835136 from fbui)
OBS-URL: https://build.opensuse.org/request/show/838608
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=142
2020-10-03 16:53:40 +00:00
Christian Boltz
7de39802e7
Accepting request 835136 from home:fbui:branches:security:apparmor
...
- Make use of %service_del_postun_without_restart
And stop using DISABLE_RESTART_ON_UPDATE as this interface is
obsolete.
OBS-URL: https://build.opensuse.org/request/show/835136
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=274
2020-09-29 19:13:52 +00:00
Dominique Leuenberger
9b427222e5
Accepting request 832593 from security:apparmor
...
This needs to go upstream but hoping someone here more familiar with
apparmor and its dev processes can do that. If not please let me know
and I can give it a stab.
- libvirt-leaseshelper.patch: add /usr/libexec as a path to the
libvirt leaseshelper script (jsc#SLE-14253) (forwarded request 831960 from jfehlig)
OBS-URL: https://build.opensuse.org/request/show/832593
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=141
2020-09-09 15:47:09 +00:00
Christian Boltz
98bfbb94e5
Accepting request 831960 from home:jfehlig:branches:security:apparmor
...
This needs to go upstream but hoping someone here more familiar with
apparmor and its dev processes can do that. If not please let me know
and I can give it a stab.
- libvirt-leaseshelper.patch: add /usr/libexec as a path to the
libvirt leaseshelper script (jsc#SLE-14253)
OBS-URL: https://build.opensuse.org/request/show/831960
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=272
2020-09-06 10:18:31 +00:00
Dominique Leuenberger
48de4393da
Accepting request 824913 from security:apparmor
...
- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON
to severity.db (lp#1890547) (forwarded request 824912 from cboltz)
OBS-URL: https://build.opensuse.org/request/show/824913
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=140
2020-08-17 09:59:28 +00:00
Christian Boltz
a56c5e56bc
Accepting request 824912 from home:cboltz
...
- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON
to severity.db (lp#1890547)
OBS-URL: https://build.opensuse.org/request/show/824912
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=270
2020-08-07 21:09:36 +00:00
Dominique Leuenberger
958b7d78e5
Accepting request 821972 from security:apparmor
...
- add abstractions-X-xauth-mr582.diff to allow reading the xauth file
from its new sddm location (boo#1174290, boo#1174293) (forwarded request 821970 from cboltz)
OBS-URL: https://build.opensuse.org/request/show/821972
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=139
2020-07-26 14:16:27 +00:00
Christian Boltz
d925988ada
Accepting request 821970 from home:cboltz
...
- add abstractions-X-xauth-mr582.diff to allow reading the xauth file
from its new sddm location (boo#1174290, boo#1174293)
OBS-URL: https://build.opensuse.org/request/show/821970
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=268
2020-07-20 18:53:52 +00:00
Dominique Leuenberger
decc2cfaba
Accepting request 807999 from security:apparmor
...
- add changes-since-2.13.4.diff with upstream changes and fixes
since 2.13.4 up to 5f61bd4c:
- add several abstractions related to xdg-open:
dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
kde-open5, xdg-open
- introduce @{run} variable
- update dnsmasq and winbindd profile
- update mdns, mesa and nameservice abstraction
- some bugfixes in the aa-* tools, including a remote bugfix in the
YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-fix-utils-network-test.diff
- make-4.3-network.diff
- abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff (forwarded request 807998 from cboltz)
OBS-URL: https://build.opensuse.org/request/show/807999
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=138
2020-06-04 15:49:49 +00:00
Christian Boltz
15e585724c
Accepting request 807998 from home:cboltz
...
- add changes-since-2.13.4.diff with upstream changes and fixes
since 2.13.4 up to 5f61bd4c:
- add several abstractions related to xdg-open:
dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
kde-open5, xdg-open
- introduce @{run} variable
- update dnsmasq and winbindd profile
- update mdns, mesa and nameservice abstraction
- some bugfixes in the aa-* tools, including a remote bugfix in the
YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-fix-utils-network-test.diff
- make-4.3-network.diff
- abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff
OBS-URL: https://build.opensuse.org/request/show/807998
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=266
2020-05-21 13:33:21 +00:00
Dominique Leuenberger
4a10adec20
Accepting request 792970 from security:apparmor
...
bsc1168306 - Add /etc/mdns.allow (forwarded request 792967 from goldwynr)
OBS-URL: https://build.opensuse.org/request/show/792970
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=137
2020-04-14 13:08:56 +00:00
Christian Boltz
3d58d48604
Accepting request 792967 from home:goldwynr:branches:security:apparmor
...
bsc1168306 - Add /etc/mdns.allow
OBS-URL: https://build.opensuse.org/request/show/792967
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=264
2020-04-10 16:39:59 +00:00
Dominique Leuenberger
5f86695b6c
Accepting request 789398 from security:apparmor
...
- fix build with make 4.3 by backporting some commits from upstream
master (boo#1167953):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-network.diff
- make-4.3-fix-utils-network-test.diff
Also fix a wrong patch filename in the previous .changes entry.
The correct message about the refreshed patch is:
- refresh usr-etc-abstractions-base-nameservice.diff (forwarded request 789397 from cboltz)
OBS-URL: https://build.opensuse.org/request/show/789398
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=136
2020-04-08 17:54:14 +00:00
Christian Boltz
eb47f5e85c
Accepting request 789397 from home:cboltz
...
- fix build with make 4.3 by backporting some commits from upstream
master (boo#1167953):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-network.diff
- make-4.3-fix-utils-network-test.diff
Also fix a wrong patch filename in the previous .changes entry.
The correct message about the refreshed patch is:
- refresh usr-etc-abstractions-base-nameservice.diff
OBS-URL: https://build.opensuse.org/request/show/789397
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=262
2020-03-29 00:17:09 +00:00
Dominique Leuenberger
d593b4708f
Accepting request 784421 from security:apparmor
...
- update to AppArmor 2.13.4
- several abstraction updates (including boo#1153162)
- disallow writing to fontconfig cache in abstractions/fonts
- some bugfixes in the aa-* tools
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
- drop upstreamed patches:
- abstractions-ssl-certbot-paths.diff
- apparmor-krb5-conf-d.diff
- libapparmor-python3.8.diff
- usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-authentification.diff
libapparmor:
- update to AppArmor 2.13.4
- fix log parsing for logs with an embedded newline
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
OBS-URL: https://build.opensuse.org/request/show/784421
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=135
2020-03-16 09:15:58 +00:00
Christian Boltz
9e2caf2d7f
Accepting request 784420 from home:cboltz
...
- update to AppArmor 2.13.4
- several abstraction updates (including boo#1153162)
- disallow writing to fontconfig cache in abstractions/fonts
- some bugfixes in the aa-* tools
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
- drop upstreamed patches:
- abstractions-ssl-certbot-paths.diff
- apparmor-krb5-conf-d.diff
- libapparmor-python3.8.diff
- usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-authentification.diff
libapparmor:
- update to AppArmor 2.13.4
- fix log parsing for logs with an embedded newline
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
OBS-URL: https://build.opensuse.org/request/show/784420
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=260
2020-03-12 20:45:35 +00:00
Dominique Leuenberger
21d4ec5418
Accepting request 767253 from security:apparmor
...
- add usr-etc-abstractions-base-nameservice.diff to adjust
abstractions/base and nameservice for /usr/etc/ (boo#1161756) (forwarded request 767252 from cboltz)
OBS-URL: https://build.opensuse.org/request/show/767253
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=134
2020-01-30 08:40:58 +00:00
Christian Boltz
469de27df3
Accepting request 767252 from home:cboltz
...
- add usr-etc-abstractions-base-nameservice.diff to adjust
abstractions/base and nameservice for /usr/etc/ (boo#1161756)
OBS-URL: https://build.opensuse.org/request/show/767252
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=258
2020-01-25 19:11:40 +00:00
Dominique Leuenberger
4edff0cca6
Accepting request 749291 from security:apparmor
...
- Properly pull in full python3 interpreter (forwarded request 749270 from scarabeus_iv)
OBS-URL: https://build.opensuse.org/request/show/749291
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=133
2019-11-22 09:25:54 +00:00
Christian Boltz
36072d063b
Accepting request 749270 from home:scarabeus_iv:branches:security:apparmor
...
- Properly pull in full python3 interpreter
OBS-URL: https://build.opensuse.org/request/show/749270
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=256
2019-11-18 11:15:04 +00:00
Dominique Leuenberger
58b9a5ad79
Accepting request 746670 from security:apparmor
...
- add libapparmor-python3.8.diff to fix building the libapparmor python
bindings (deb#943657)
Note: the build with python 3.8 will still fail because of boo#1155839 - but at least we get a different build failure now ;-)
OBS-URL: https://build.opensuse.org/request/show/746670
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=132
2019-11-13 12:12:49 +00:00
Christian Boltz
90a7b9f915
Accepting request 746669 from home:cboltz
...
- add libapparmor-python3.8.diff to fix building the libapparmor python
bindings (deb#943657)
OBS-URL: https://build.opensuse.org/request/show/746669
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=254
2019-11-08 17:42:53 +00:00
Dominique Leuenberger
06739eae77
Accepting request 735945 from security:apparmor
...
- add usr-etc-abstractions-authentification.diff to allow reading
/usr/etc/pam.d/* and some other authentification-related files (boo#1153162) (forwarded request 735944 from cboltz)
OBS-URL: https://build.opensuse.org/request/show/735945
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=131
2019-10-10 10:21:35 +00:00
Christian Boltz
5a3f92eb01
Accepting request 735944 from home:cboltz
...
- add usr-etc-abstractions-authentification.diff to allow reading
/usr/etc/pam.d/* and some other authentification-related files (boo#1153162)
OBS-URL: https://build.opensuse.org/request/show/735944
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=252
2019-10-07 20:19:22 +00:00
Dominique Leuenberger
8d5c8d0986
Accepting request 733858 from security:apparmor
...
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
abstractions/ssl_certs and abstractions/ssl_keys
- add apparmor-krb5-conf-d.diff for kerberos client
OBS-URL: https://build.opensuse.org/request/show/733858
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=130
2019-10-07 11:36:55 +00:00
Christian Boltz
433977903f
Accepting request 733857 from home:cboltz
...
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
abstractions/ssl_certs and abstractions/ssl_keys
OBS-URL: https://build.opensuse.org/request/show/733857
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=250
2019-09-28 15:36:36 +00:00
Christian Boltz
34919fc720
Accepting request 733763 from home:luizluca:branches:security:apparmor
...
- add apparmor-krb5-conf-d.diff for kerberos client
Since https://build.opensuse.org/package/rdiff/network/krb5?linkrev=base&rev=204 , it is possible to use configuration snippets for krb5.conf. However, any service under apparmor will not be able to read it.
As /etc/krb5.conf.d is default for SUSE but not for upstream apparmor, the patch might not be accepted upstream.
LEAP15(.1) should also get this fix.
OBS-URL: https://build.opensuse.org/request/show/733763
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=249
2019-09-28 15:13:31 +00:00
Dominique Leuenberger
905c5d44d8
Accepting request 710683 from security:apparmor
...
- update to 2.13.3
- profile updates for dnsmasq, dovecot, identd, syslog-ng
- new "lsb_release" profile (only used when using "Px -> lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
- re-number remaining patches
libapparmor:
- update to AppArmor 2.13.1
- some fixes in cache handling
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
OBS-URL: https://build.opensuse.org/request/show/710683
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=129
2019-06-22 09:04:46 +00:00
Christian Boltz
c2744d57c4
Accepting request 710682 from home:cboltz
...
- re-number remaining patches
OBS-URL: https://build.opensuse.org/request/show/710682
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=247
2019-06-18 22:47:39 +00:00
Christian Boltz
040db79da2
Accepting request 710679 from home:cboltz
...
- update to 2.13.3
- profile updates for dnsmasq, dovecot, identd, syslog-ng
- new "lsb_release" profile (only used when using "Px -> lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
libapparmor:
- update to AppArmor 2.13.1
- some fixes in cache handling
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
OBS-URL: https://build.opensuse.org/request/show/710679
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=246
2019-06-18 22:31:34 +00:00
Dominique Leuenberger
fa1219e441
Accepting request 707833 from security:apparmor
...
- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751) (forwarded request 707832 from cboltz)
OBS-URL: https://build.opensuse.org/request/show/707833
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=128
2019-06-07 10:17:17 +00:00
Christian Boltz
81e6e09dde
Accepting request 707832 from home:cboltz
...
- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751)
OBS-URL: https://build.opensuse.org/request/show/707832
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=244
2019-06-05 12:14:49 +00:00
Dominique Leuenberger
e92adfd7cc
Accepting request 697782 from security:apparmor
...
- Disable LTO (boo#1133091). (forwarded request 697748 from marxin)
OBS-URL: https://build.opensuse.org/request/show/697782
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=127
2019-04-30 10:55:20 +00:00
Christian Boltz
bdfa577764
Accepting request 697748 from home:marxin:branches:security:apparmor
...
- Disable LTO (boo#1133091).
OBS-URL: https://build.opensuse.org/request/show/697748
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=242
2019-04-25 08:20:14 +00:00
Dominique Leuenberger
be8c60ef83
Accepting request 694060 from security:apparmor
...
- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) (forwarded request 694059 from cboltz)
OBS-URL: https://build.opensuse.org/request/show/694060
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=126
2019-04-15 09:51:02 +00:00
Christian Boltz
901b8032a7
Accepting request 694059 from home:cboltz
...
- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)
OBS-URL: https://build.opensuse.org/request/show/694059
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=240
2019-04-14 15:15:50 +00:00
Dominique Leuenberger
dbc6bc4006
Accepting request 682454 from security:apparmor
...
- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877) (forwarded request 682453 from cboltz)
OBS-URL: https://build.opensuse.org/request/show/682454
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=125
2019-03-13 08:04:35 +00:00
Christian Boltz
ef40d07d30
Accepting request 682453 from home:cboltz
...
- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877)
OBS-URL: https://build.opensuse.org/request/show/682453
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=238
2019-03-07 12:45:58 +00:00
Stephan Kulow
5ad4f1cd38
Accepting request 679945 from security:apparmor
...
- add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
breaking libvirtd (boo#1127073)
OBS-URL: https://build.opensuse.org/request/show/679945
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=124
2019-03-01 19:29:54 +00:00
Christian Boltz
4a792e8754
Accepting request 679944 from home:cboltz
...
update dnsmasq-revert-alternation.diff from upstream merge request
OBS-URL: https://build.opensuse.org/request/show/679944
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=236
2019-02-27 19:30:05 +00:00
Christian Boltz
854f9b32a9
Accepting request 679592 from home:cboltz
...
- add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile to avoid breaking libvirtd (boo#1127073)
OBS-URL: https://build.opensuse.org/request/show/679592
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=235
2019-02-26 20:52:01 +00:00
Stephan Kulow
b44801e295
Accepting request 668473 from security:apparmor
...
IMPORTANT: the dnsmasq profile update is needed by the updated libvirtd profile in SR 668191, so please include this SR in Staging:H.
- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
to match the newly added libvirtd profile name (boo#1118952#c3)
- Use %license instead of %doc [bsc#1082318]
OBS-URL: https://build.opensuse.org/request/show/668473
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=123
2019-02-04 20:24:08 +00:00
Christian Boltz
c0b44a6d8f
add patch name to changelog
...
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=233
2019-01-25 00:14:02 +00:00
Christian Boltz
5e53819734
Accepting request 668438 from home:cboltz
...
- allow peer=libvirtd in the dnsmasq profile to match the newly added
libvirtd profile name (boo#1118952#c3)
OBS-URL: https://build.opensuse.org/request/show/668438
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=232
2019-01-24 21:48:27 +00:00
Dominique Leuenberger
9fced15774
Accepting request 663646 from security:apparmor
...
- add apparmor-lessopen-nfs-workaround.diff: allow network access in
lessopen.sh for reading files on NFS (workaround for boo#1119937 /
lp#1784499) (forwarded request 663645 from cboltz)
OBS-URL: https://build.opensuse.org/request/show/663646
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=122
2019-01-15 12:15:06 +00:00
Christian Boltz
44de259587
Accepting request 665861 from home:kukuk:branches:security:apparmor
...
- Use %license instead of %doc [bsc#1082318]
OBS-URL: https://build.opensuse.org/request/show/665861
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=230
2019-01-14 14:42:04 +00:00