pool/apparmor
SHA256
3
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
443 Commits 2 Branches 0 Tags 11 MiB
088abec96f
Commit Graph

443 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Ana Guerrero
088abec96f Accepting request 1177404 from security:apparmor 
Note: Unfortunately my SR earlier today didn't fix everything that was reported by openQA :-(

This SR adds two more fixes. Especially teardown-unconfined.diff makes this SR a "fast track" candidate.

- add utils-relax-mount-rules.diff and utils-relax-mount-rules-2.diff:
  Relax handling of mount rules in utils to avoid errors when
  parsing valid profiles
- add teardown-unconfined.diff to fix aa-teardown for 'unconfined'
  profiles (boo#1225457)

OBS-URL: https://build.opensuse.org/request/show/1177404
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=208
 2024-05-28 20:03:24 +00:00
Christian Boltz
534e2c4e8e Accepting request 1177403 from home:cboltz 
- add utils-relax-mount-rules.diff and utils-relax-mount-rules-2.diff:
  Relax handling of mount rules in utils to avoid errors when
  parsing valid profiles
- add teardown-unconfined.diff to fix aa-teardown for 'unconfined'
  profiles (boo#1225457)

OBS-URL: https://build.opensuse.org/request/show/1177403
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=409
 2024-05-28 19:51:09 +00:00
Ana Guerrero
a92857537c Accepting request 1177352 from security:apparmor 
- exclude runc profile until updated runc packages (including
  updated profile with "signal peer=runc") have arrived

- add aa-remove-unknown-fix-unconfined.diff to fix
  aa-remove-unknown for 'unconfined' profiles (boo#1225457)
- set permissions for %ghost files (boo#1223578) (forwarded request 1177351 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1177352
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=207
 2024-05-28 15:27:17 +00:00
Christian Boltz
7450ea5e32 Accepting request 1177351 from home:cboltz 
- exclude runc profile until updated runc packages (including
  updated profile with "signal peer=runc") have arrived

- add aa-remove-unknown-fix-unconfined.diff to fix
  aa-remove-unknown for 'unconfined' profiles (boo#1225457)
- set permissions for %ghost files (boo#1223578)

OBS-URL: https://build.opensuse.org/request/show/1177351
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=407
 2024-05-28 12:49:08 +00:00
Ana Guerrero
c5cb266355 Accepting request 1176730 from security:apparmor 
- fix bashism in %post profiles

- Update to AppArmor 4.0.1
  Too many changes to list them here. See
  https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.1
  for the detailed upstream release notes
- add tools-fix-redefinition.diff: fix redefinition of _ in tools
- add test-aa-notify.diff: relax test-aa-notify to avoid a mismatch
  with argparse on Leap 15.5
- drop upstreamed patches:
  - apparmor-abstractions-openssl-allow-version-specific-en.patch
  - dovecot-unix_chkpwd.diff
  - smbd-unix_chkpwd.diff
- apparmor-lessopen-profile.patch: update lessopen profile to
  abi/4.0
- mark local/* as %ghost so that these dummy files don't get
  installed anymore (changed existing local/files will be kept,
  unchanged files will be deleted)
- switch to gitlab tarballs (without pregenerated libapparmor
  configure script and prebuilt techdoc.pdf)
  - run libapparmor autogen.sh (needs additional BuildRequires
    autoconf, autoconf-archive, automake and libtool)
  - no longer package techdoc.pdf - old documentation, not worth
    the texlive BuildRequires we would need to build it
- drop old (up to 2.12) cache location /var/lib/apparmor/ and the
  /etc/apparmor.d/cache symlink pointing to it
- drop apparmor-samba-include-permissions-for-shares.diff - no
  longer needed, update-apparmor-samba-profile in Tumbleweed works
  without a pre-existing local/usr.sbin.smbd-shares file
- drop ruby-2_0-mkmf-destdir.patch - this ancient patch doesn't
  change a single bit in the resulting build (anymore?)
- drop apparmor-lessopen-nfs-workaround.diff - no longer needed
  since Kernel 6.0 (see https://bugs.launchpad.net/bugs/1784499)
- drop ancient, unused update-trans.sh


Note: %post profiles contains a for loop calling "rm" (to delete unchanged /etc/apparmor.d/local/* files). Please double-check for possible side effects I didn't consider.

OBS-URL: https://build.opensuse.org/request/show/1176730
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=206
 2024-05-27 09:44:44 +00:00
Christian Boltz
ae29aa0b55 Accepting request 1176727 from home:cboltz 
- fix bashism in %post profiles

OBS-URL: https://build.opensuse.org/request/show/1176727
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=405
 2024-05-24 12:22:43 +00:00
Christian Boltz
8f0fcf5e40 Accepting request 1176504 from home:cboltz 
- Update to AppArmor 4.0.1
  Too many changes to list them here. See
  https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.1
  for the detailed upstream release notes
- add tools-fix-redefinition.diff: fix redefinition of _ in tools
- add test-aa-notify.diff: relax test-aa-notify to avoid a mismatch
  with argparse on Leap 15.5
- drop upstreamed patches:
  - apparmor-abstractions-openssl-allow-version-specific-en.patch
  - dovecot-unix_chkpwd.diff
  - smbd-unix_chkpwd.diff
- apparmor-lessopen-profile.patch: update lessopen profile to
  abi/4.0
- mark local/* as %ghost so that these dummy files don't get
  installed anymore (changed existing local/files will be kept,
  unchanged files will be deleted)
- switch to gitlab tarballs (without pregenerated libapparmor
  configure script and prebuilt techdoc.pdf)
  - run libapparmor autogen.sh (needs additional BuildRequires
    autoconf, autoconf-archive, automake and libtool)
  - no longer package techdoc.pdf - old documentation, not worth
    the texlive BuildRequires we would need to build it
- drop old (up to 2.12) cache location /var/lib/apparmor/ and the
  /etc/apparmor.d/cache symlink pointing to it
- drop apparmor-samba-include-permissions-for-shares.diff - no
  longer needed, update-apparmor-samba-profile in Tumbleweed works
  without a pre-existing local/usr.sbin.smbd-shares file
- drop ruby-2_0-mkmf-destdir.patch - this ancient patch doesn't
  change a single bit in the resulting build (anymore?)
- drop apparmor-lessopen-nfs-workaround.diff - no longer needed

OBS-URL: https://build.opensuse.org/request/show/1176504
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=404
 2024-05-23 14:51:56 +00:00
Ana Guerrero
b69ee97142 Accepting request 1165715 from security:apparmor 
Use full URLs for source tarball and signature. (forwarded request 1165684 from badshah400)

OBS-URL: https://build.opensuse.org/request/show/1165715
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=205
 2024-04-07 20:04:33 +00:00
Christian Boltz
0696aaace6 Accepting request 1165684 from home:badshah400:branches:security:apparmor 
Use full URLs for source tarball and signature.

OBS-URL: https://build.opensuse.org/request/show/1165684
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=402
 2024-04-05 21:36:20 +00:00
Dominique Leuenberger
54cd803dd8 Accepting request 1154197 from security:apparmor 
- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).

- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).

- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)

OBS-URL: https://build.opensuse.org/request/show/1154197
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=204
 2024-03-02 22:23:23 +00:00
Christian Boltz
d108d92e93 Accepting request 1154195 from home:cboltz 
- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).

OBS-URL: https://build.opensuse.org/request/show/1154195
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=400
 2024-03-01 22:28:16 +00:00
Goldwyn Rodrigues
4fb7056ea8 Accepting request 1148955 from home:dmdiss:aa_multivers_openssl_prof 
- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)

OBS-URL: https://build.opensuse.org/request/show/1148955
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=399
 2024-03-01 19:52:43 +00:00
Christian Boltz
8cf3c6a617 Accepting request 1152898 from home:npower:branches:security:apparmor 
- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).

OBS-URL: https://build.opensuse.org/request/show/1152898
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=398
 2024-02-29 20:44:35 +00:00
Ana Guerrero
b5360557b2 Accepting request 1151926 from security:apparmor 
- Fix systemd userdb access in unix-chkpwd (forwarded request 1151902 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/1151926
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=203
 2024-02-28 18:44:44 +00:00
Christian Boltz
9041844394 Accepting request 1151902 from home:lnussel:branches:security:apparmor 
- Fix systemd userdb access in unix-chkpwd

OBS-URL: https://build.opensuse.org/request/show/1151902
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=396
 2024-02-26 18:34:45 +00:00
Ana Guerrero
0176d4568d Accepting request 1147947 from security:apparmor 
Prepare for RPM 4.20 (forwarded request 1147750 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/1147947
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=202
 2024-02-21 16:54:47 +00:00
Christian Boltz
ea1a0afe49 Accepting request 1147750 from home:dimstar:rpm4.20:a 
Prepare for RPM 4.20

OBS-URL: https://build.opensuse.org/request/show/1147750
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=394
 2024-02-20 12:41:09 +00:00
Ana Guerrero
aca6dec627 Accepting request 1147189 from security:apparmor 
- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef & engines openssl paths (boo#1219571) (forwarded request 1145034 from dmdiss)

OBS-URL: https://build.opensuse.org/request/show/1147189
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=201
 2024-02-18 19:22:45 +00:00
Christian Boltz
cca2b01644 Accepting request 1145034 from home:dmdiss:aa_multivers_openssl_prof 
- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef & engines openssl paths (boo#1219571)

OBS-URL: https://build.opensuse.org/request/show/1145034
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=392
 2024-02-16 20:16:09 +00:00
Ana Guerrero
520f1cd44c Accepting request 1144685 from security:apparmor 
- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch (forwarded request 1144684 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1144685
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=200
 2024-02-07 17:47:35 +00:00
Christian Boltz
a6186b65ec Accepting request 1144684 from home:cboltz 
- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch

OBS-URL: https://build.opensuse.org/request/show/1144684
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=390
 2024-02-06 16:57:35 +00:00
Ana Guerrero
32180a3adb Accepting request 1142650 from security:apparmor 
- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed (forwarded request 1142649 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1142650
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=199
 2024-01-30 17:24:26 +00:00
Christian Boltz
4d639e7be3 Accepting request 1142649 from home:cboltz 
- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed

OBS-URL: https://build.opensuse.org/request/show/1142649
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=388
 2024-01-29 21:22:57 +00:00
Ana Guerrero
01e869679f Accepting request 1124276 from security:apparmor 
- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)

OBS-URL: https://build.opensuse.org/request/show/1124276
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=198
 2023-11-09 20:34:30 +00:00
Christian Boltz
d4f95baf8b Accepting request 1124275 from home:cboltz 
- Actually apply the previously added patch for bsc#1216878

- Add apparmor-systemd-sessions.patch to allow read access to

OBS-URL: https://build.opensuse.org/request/show/1124275
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=386
 2023-11-08 18:21:57 +00:00
Christian Boltz
59c7ab6268 Accepting request 1124273 from home:juliogonzalez:branches:security:apparmor 
- Add apparmor-systemd-sessions.patch to allow read access to 
  /run/systemd/sessions/ (bsc#1216878)

OBS-URL: https://build.opensuse.org/request/show/1124273
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=385
 2023-11-08 18:13:57 +00:00
Ana Guerrero
75d19b971e Accepting request 1113527 from security:apparmor 
- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596) (forwarded request 1113476 from dmdiss)

OBS-URL: https://build.opensuse.org/request/show/1113527
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=197
 2023-09-26 20:00:29 +00:00
Christian Boltz
6fa03b13c7 Accepting request 1113476 from home:dmdiss:aa-php-fpm-pid 
- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)

OBS-URL: https://build.opensuse.org/request/show/1113476
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=383
 2023-09-25 17:58:43 +00:00
Ana Guerrero
a1fdf67e96 Accepting request 1108110 from security:apparmor 
Sorry Christian, another boring changelog-only change to track the
samba-4-17.patch fix we're carrying in 15.5 and dropping for 15.6
thanks to the upstream 926 merge. (forwarded request 1108011 from dmdiss)

OBS-URL: https://build.opensuse.org/request/show/1108110
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=196
 2023-08-31 11:43:12 +00:00
Christian Boltz
27c282dc26 Accepting request 1108011 from home:dmdiss:aa_15.6 
Sorry Christian, another boring changelog-only change to track the
samba-4-17.patch fix we're carrying in 15.5 and dropping for 15.6
thanks to the upstream 926 merge.

OBS-URL: https://build.opensuse.org/request/show/1108011
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=381
 2023-08-30 12:41:09 +00:00
Ana Guerrero
c9e9ace3e6 Accepting request 1107796 from security:apparmor 
Add Jira tag to track AppArmor 3.1.6 submission for 15.6 (jsc#PED-5600)

(+ an unrelated spec file comment for a patch)

OBS-URL: https://build.opensuse.org/request/show/1107796
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=195
 2023-08-30 08:18:04 +00:00
Christian Boltz
66f47fbe46 Accepting request 1107795 from home:cboltz 
spec comment for nfs vs. needing network

OBS-URL: https://build.opensuse.org/request/show/1107795
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=379
 2023-08-28 15:52:36 +00:00
Christian Boltz
9b8cd28372 Accepting request 1106958 from home:dmdiss:aa_15.6 
Add Jira tag to track AppArmor 3.1.6 submission for 15.6 (jsc#PED-5600)

OBS-URL: https://build.opensuse.org/request/show/1106958
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=378
 2023-08-28 15:51:07 +00:00
Ana Guerrero
53c97a1a3b Accepting request 1100613 from security:apparmor 
- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472) (forwarded request 1100592 from dmdiss)

OBS-URL: https://build.opensuse.org/request/show/1100613
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=194
 2023-07-26 11:22:07 +00:00
Christian Boltz
42a8953453 Accepting request 1100592 from home:dmdiss:pam_apparmor_readme 
- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)

OBS-URL: https://build.opensuse.org/request/show/1100592
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=376
 2023-07-25 12:07:57 +00:00
Dominique Leuenberger
8383a36269 Accepting request 1094655 from security:apparmor 
- update to AppArmor 3.1.6
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog (forwarded request 1094654 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1094655
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=193
 2023-06-23 19:52:07 +00:00
Christian Boltz
3cbddb4090 Accepting request 1094654 from home:cboltz 
- update to AppArmor 3.1.6
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog

OBS-URL: https://build.opensuse.org/request/show/1094654
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=374
 2023-06-22 11:50:42 +00:00
Dominique Leuenberger
b38b7b40ec Accepting request 1092351 from security:apparmor 
- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles. (forwarded request 1092349 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1092351
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=192
 2023-06-12 13:24:13 +00:00
Christian Boltz
4677ecc2c8 Accepting request 1092349 from home:cboltz 
- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.

OBS-URL: https://build.opensuse.org/request/show/1092349
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=372
 2023-06-11 16:08:52 +00:00
Dominique Leuenberger
8a3b7d82b6 Accepting request 1091163 from security:apparmor 
- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12) (forwarded request 1091162 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1091163
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=191
 2023-06-08 19:41:43 +00:00
Christian Boltz
bc914eedfb Accepting request 1091162 from home:cboltz 
- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)

OBS-URL: https://build.opensuse.org/request/show/1091162
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=370
 2023-06-06 22:05:43 +00:00
Dominique Leuenberger
998e958f01 Accepting request 1090055 from security:apparmor 
- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog (forwarded request 1090054 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1090055
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=190
 2023-06-02 22:06:33 +00:00
Christian Boltz
66f8380e84 Accepting request 1090054 from home:cboltz 
- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog

OBS-URL: https://build.opensuse.org/request/show/1090054
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=368
 2023-05-31 17:47:43 +00:00
Dominique Leuenberger
bfda69ee6d Accepting request 1085178 from security:apparmor 
- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS. (forwarded request 1084717 from fcrozat)

OBS-URL: https://build.opensuse.org/request/show/1085178
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=189
 2023-05-06 20:08:55 +00:00
Christian Boltz
9f11e0eae7 Accepting request 1084717 from home:fcrozat:branches:security:apparmor 
- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.

OBS-URL: https://build.opensuse.org/request/show/1084717
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=366
 2023-05-05 22:08:45 +00:00
Dominique Leuenberger
e272bb2860 Accepting request 1068312 from security:apparmor 
- update to AppArmor 3.1.3
  - add support for more audit.log formats in libapparmor
  - add abstractions/groff (boo#1065388)
  - various additions in abstractions and profiles
  - several bug fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-openssl-1_1.diff
  - dnsmasq-cpu-possible.diff
  - nscd-systemd-userdb.diff (forwarded request 1068311 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1068312
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=188
 2023-03-01 15:13:48 +00:00
Christian Boltz
2d719d1da8 Accepting request 1068311 from home:cboltz 
- update to AppArmor 3.1.3
  - add support for more audit.log formats in libapparmor
  - add abstractions/groff (boo#1065388)
  - various additions in abstractions and profiles
  - several bug fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-openssl-1_1.diff
  - dnsmasq-cpu-possible.diff
  - nscd-systemd-userdb.diff

OBS-URL: https://build.opensuse.org/request/show/1068311
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=364
 2023-02-28 20:14:12 +00:00
Dominique Leuenberger
8b45158640 Accepting request 1063514 from security:apparmor 
- add abstractions-openssl-1_1.diff: allow to read
  /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911) (forwarded request 1063513 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1063514
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=187
 2023-02-07 17:48:28 +00:00
Christian Boltz
01b087876d Accepting request 1063513 from home:cboltz 
- add abstractions-openssl-1_1.diff: allow to read
  /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911)

OBS-URL: https://build.opensuse.org/request/show/1063513
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=362
 2023-02-06 19:49:37 +00:00
Dominique Leuenberger
b0ebae81de Accepting request 1062692 from security:apparmor 
- add nscd-systemd-userdb.diff: allow nscd to read systemd-userdb
  (boo#1207698) (forwarded request 1062036 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/1062692
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=186
 2023-02-04 13:11:00 +00:00