pool/apparmor
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
240 Commits 2 Branches 0 Tags 11 MiB
0c205599ae
Commit Graph

210 Commits

Author SHA256 Message Date
Christian Boltz
0c205599ae Accepting request 999637 from home:cboltz 
- update to AppArmor 3.0.7
  - fix setuptools version detection in buildpath.py
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.7
    for the detailed upstream changelog
- add dnsmasq-cpu-possible.diff: allow reading /sys/devices/system/cpu/possible
  in dnsmasc//libvirt-leaseshelper profile (boo#1202849)

OBS-URL: https://build.opensuse.org/request/show/999637
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=350
 2022-08-28 11:06:57 +00:00
Christian Boltz
65d1693eee Accepting request 999408 from home:dmdiss:aa-php-fpm-pid 
- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)

OBS-URL: https://build.opensuse.org/request/show/999408
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=348
 2022-08-26 13:37:48 +00:00
Christian Boltz
56136dc1ef Accepting request 993843 from home:cboltz 
- add dnsmasq.diff: missing r permissions for dnsmasq//libvirt-leaseshelper
  (boo#1202161)

OBS-URL: https://build.opensuse.org/request/show/993843
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=346
 2022-08-08 19:15:19 +00:00
Christian Boltz
1437772dac Accepting request 992099 from home:cboltz 
- update to AppArmor 3.0.6
  - fix LTO build in the parser
  - remove dbus deny rule in abstractions/exo-open
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6
    for the detailed upstream changelog
- drop upstream patch dirtest-sort-mr900.diff

OBS-URL: https://build.opensuse.org/request/show/992099
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=344
 2022-08-01 20:17:36 +00:00
Christian Boltz
4312257819 Accepting request 991157 from home:cboltz 
- update to AppArmor 3.0.5
  - several additions to profiles and abstractions
  - bugfixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.5
    for the detailed upstream changelog
- remove upstream(ed) patchs:
  - apparmor-setuptools61-mr897.patch
  - dovecot-profiles-boo1199535-mr881.diff
  - php8-fpm-mr876.patch
  - python310-help-mr848.patch
  - samba-new-dcerpcd.patch
  - samba_deny_net_admin.patch
  - update-samba-bgqd.diff
  - update-usr-sbin-smbd.diff
- apparmor-samba-include-permissions-for-shares.diff: remove
  upstreamed part
- add dirtest-sort-mr900.diff to fix random test failures
- change apache-extra-profile-include-if-exists.diff to the post-mv
  path (new quilt executes mv)
- stop disabling lto (fixed upstream) (boo#1133091)
- package profile-load script in -parser

OBS-URL: https://build.opensuse.org/request/show/991157
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=342
 2022-07-25 21:54:59 +00:00
Christian Boltz
629457566e Accepting request 989600 from home:bnavigator:branches:devel:languages:python 
- Add apparmor-setuptools61-mr897.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/897
- Add buildtime dependencies on python-rpm-macros and setuptools

OBS-URL: https://build.opensuse.org/request/show/989600
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=340
 2022-07-19 19:39:21 +00:00
Christian Boltz
0789b32d69 Accepting request 985681 from home:cboltz 
- update zgrep-profile-mr870.diff: allow zgrep to execute egrep and fgrep
  (poo#113108)

OBS-URL: https://build.opensuse.org/request/show/985681
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=338
 2022-06-28 22:06:37 +00:00
Christian Boltz
e26436faab Accepting request 977391 from home:cboltz 
- add dovecot-profiles-boo1199535-mr881.diff: update dovecot profiles
  for latest dovecot (boo#1199535)

OBS-URL: https://build.opensuse.org/request/show/977391
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=336
 2022-05-15 19:27:23 +00:00
Christian Boltz
98a1fb1ca2 Accepting request 976576 from home:npower:branches:security:apparmor 
- Update samba-new-dcerpcd.patch for aarch64 which needs some
  additional rules; (bnc#1198309).

OBS-URL: https://build.opensuse.org/request/show/976576
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=334
 2022-05-12 12:07:17 +00:00
Christian Boltz
af1eec118e Accepting request 975634 from home:bnavigator:branches:security:apparmor 
- Add python310-help-mr848.patch so that Tumbleweed can switch
  python3 to Python 3.10
  (https://gitlab.com/apparmor/apparmor/-/merge_requests/848)

OBS-URL: https://build.opensuse.org/request/show/975634
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=332
 2022-05-08 13:58:25 +00:00
Christian Boltz
c1b382df0e Accepting request 973915 from home:cboltz 
- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils < 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)

OBS-URL: https://build.opensuse.org/request/show/973915
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=329
 2022-04-29 12:11:04 +00:00
Christian Boltz
f1c2c7aee9 Accepting request 970465 from home:cboltz 
- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)

OBS-URL: https://build.opensuse.org/request/show/970465
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=326
 2022-04-16 20:41:16 +00:00
Christian Boltz
c04137f806 Accepting request 970229 from home:npower:branches:security:apparmor 
- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);
  

- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).

OBS-URL: https://build.opensuse.org/request/show/970229
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=324
 2022-04-14 19:08:39 +00:00
Christian Boltz
9a2a40f1ba Accepting request 968252 from home:cboltz 
- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)

OBS-URL: https://build.opensuse.org/request/show/968252
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=322
 2022-04-10 13:52:36 +00:00
Christian Boltz
f697678c37 Accepting request 966666 from home:cboltz 
- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  -profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)

OBS-URL: https://build.opensuse.org/request/show/966666
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=320
 2022-04-03 14:46:04 +00:00
Goldwyn Rodrigues
153645aade Accepting request 964827 from home:npower:branches:security:apparmor 
- Add new rule to fix 'DENIED' open on /proc/{pid}/fd for
  samba-bgqd; (bnc#1196850).
- Add new rule to allow reading of openssl.cnf; (bnc#1195463).

OBS-URL: https://build.opensuse.org/request/show/964827
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=317
 2022-03-25 12:18:52 +00:00
Christian Boltz
7ae734d682 Accepting request 953283 from home:cboltz 
- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch

AppArmor 3.0.4 also includes a fix for the issue with 'mctp' found via
https://build.opensuse.org/request/show/951354
so you might want to pick this SR into Staging:O

OBS-URL: https://build.opensuse.org/request/show/953283
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=316
 2022-02-10 18:40:04 +00:00
Christian Boltz
a53ba0c4c6 Accepting request 949319 from home:cboltz 
- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)

OBS-URL: https://build.opensuse.org/request/show/949319
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=315
 2022-01-26 18:03:22 +00:00
Christian Boltz
b6bdf3e03b Accepting request 947009 from home:scabrero:branches:network:samba:STABLE 
- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb;
  (bsc#1192684).

OBS-URL: https://build.opensuse.org/request/show/947009
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=314
 2022-01-17 19:17:01 +00:00
Christian Boltz
808d4c74f6 Accepting request 941696 from home:cboltz 
patch comment update

OBS-URL: https://build.opensuse.org/request/show/941696
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=313
 2021-12-20 20:27:13 +00:00
Christian Boltz
880c63e84b Accepting request 941546 from home:cboltz 
- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update

OBS-URL: https://build.opensuse.org/request/show/941546
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=311
 2021-12-19 22:02:51 +00:00
Christian Boltz
b71124a2f1 Accepting request 930526 from home:cboltz 
- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)

OBS-URL: https://build.opensuse.org/request/show/930526
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=310
 2021-11-09 18:09:23 +00:00
Christian Boltz
d4a4627460 Accepting request 925556 from home:cboltz 
package /etc/apparmor.d/samba-bgqd

OBS-URL: https://build.opensuse.org/request/show/925556
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=309
 2021-10-15 21:38:52 +00:00
Christian Boltz
95882c1eba Accepting request 925550 from home:cboltz 
- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)

OBS-URL: https://build.opensuse.org/request/show/925550
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=308
 2021-10-15 20:26:27 +00:00
Christian Boltz
102dd5dab3 Accepting request 911594 from home:cboltz 
- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10

OBS-URL: https://build.opensuse.org/request/show/911594
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=306
 2021-08-12 11:55:02 +00:00
Christian Boltz
07f7b7b8e2 Accepting request 910590 from home:cboltz 
- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog

- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff

OBS-URL: https://build.opensuse.org/request/show/910590
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=305
 2021-08-07 11:29:35 +00:00
Christian Boltz
5607b21278 Accepting request 907195 from home:cboltz 
add upstreaming comment

OBS-URL: https://build.opensuse.org/request/show/907195
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=304
 2021-07-19 20:47:16 +00:00
Christian Boltz
90a47beb92 Accepting request 906541 from home:stroeder:sys 
added apparmor-dovecot-stats-metrics.diff to allow Prometheus metrics end-point

OBS-URL: https://build.opensuse.org/request/show/906541
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=303
 2021-07-19 20:35:07 +00:00
Christian Boltz
b8fb8937d0 Accepting request 898186 from home:cboltz 
- move Requires: python3 back to the python3-apparmor subpackage -
  readline usage is in the python modules, not in apparmor-utils

OBS-URL: https://build.opensuse.org/request/show/898186
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=301
 2021-06-07 19:32:55 +00:00
Goldwyn Rodrigues
00b1cea83e Accepting request 895564 from home:mcepl:branches:security:apparmor 
- Remove python symbols (python means currently python2), work
  only with python3 ones (fallout from bsc#1185588).

OBS-URL: https://build.opensuse.org/request/show/895564
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=300
 2021-06-07 18:40:06 +00:00
Christian Boltz
b410411567 Accepting request 894864 from home:cboltz 
- add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267)

OBS-URL: https://build.opensuse.org/request/show/894864
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=298
 2021-05-21 21:13:53 +00:00
Christian Boltz
0916435d00 Accepting request 888862 from home:cboltz 
- add crypto-policies-mr720.diff to allow reading crypto policies
  in abstractions/ssl_certs (boo#1183597)

- replace %{?systemd_requires} with %{?systemd_ordering} to avoid dragging in
  systemd into containers just because apparmor-parser ships a *.service file

OBS-URL: https://build.opensuse.org/request/show/888862
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=296
 2021-04-27 17:07:13 +00:00
Christian Boltz
4710d6ccea Accepting request 874370 from home:lnussel:usrmove 
- avoid file listed twice error

OBS-URL: https://build.opensuse.org/request/show/874370
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=294
 2021-02-22 18:21:51 +00:00
Christian Boltz
8416250f76 Accepting request 868745 from home:cboltz 
- define %_pamdir for <= 15.x to fix the build on those releases

OBS-URL: https://build.opensuse.org/request/show/868745
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=290
 2021-02-02 18:37:25 +00:00
Christian Boltz
a564ac7aa3 Accepting request 868407 from home:lnussel:usrmove 
- prepare usrmerge (boo#1029961)
  * use %_pamdir

OBS-URL: https://build.opensuse.org/request/show/868407
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=289
 2021-02-01 18:27:47 +00:00
Christian Boltz
cbfc4c18e3 Accepting request 865955 from home:cboltz 
- add apache-extra-profile-include-if-exists.diff: make <apache2.d>
  include in apache extra profile optional to avoid problems with empty
  profile directory (boo#1178527)

OBS-URL: https://build.opensuse.org/request/show/865955
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=287
 2021-01-22 11:50:03 +00:00
Christian Boltz
052f1da54b Accepting request 852710 from home:cboltz 
- update to AppArmor 3.0.1
  - minor additions to profiles and abstractions
  - some bugfixes in libapparmor, apparmor_parser and the aa-* utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
    for the detailed upstream changelog
- removed upstream(ed) patches:
  - changes-since-3.0.0.diff
  - extra-profiles-fix-Pux.diff
  - utils-fix-hotkey-conflict.diff

libapparmor:
- update to AppArmor 3.0.1
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
    for the detailed upstream changelog
  - drop upstream patch changes-since-3.0.0.diff

OBS-URL: https://build.opensuse.org/request/show/852710
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=285
 2020-12-02 20:13:56 +00:00
Christian Boltz
d058b1185f Accepting request 852662 from home:dimstar:Factory 
Fix build with new/reworked apache package without breaking compat to previous mode

OBS-URL: https://build.opensuse.org/request/show/852662
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=284
 2020-12-02 16:27:43 +00:00
Christian Boltz
7fc9e62410 Accepting request 845532 from home:cboltz 
- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in
  de, id and sv translations (and fix the test) (MR 675)
- add extra-profiles-fix-Pux.diff to fix an inactive profile -
  prevents a crash in aa-logprof and aa-genprof when creating a new
  profile (MR 676)

OBS-URL: https://build.opensuse.org/request/show/845532
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=282
 2020-11-02 19:55:01 +00:00
Christian Boltz
980f095fc4 Accepting request 844157 from home:cboltz 
- update to AppArmor 3.0.0
  - introduce feature abi declaration in profiles to enable use of
    new rule types (for openSUSE: dbus and unix rules)
  - support xattr attachment conditionals
  - experimental support for kill and unconfined profile modes
  - rewritten aa-status (in C), including support for new profile modes
  - rewritten aa-notify (in python), finally dropping the perl
    requirement at runtime
  - new tool aa-features-abi for extracting feature abis from the kernel
  - update profiles to have profile names and to use 3.0 feature abi
  - introduce @{etc_ro} and @{etc_rw} profile variables
  - new profile for php-fpm
  - several updates to profiles and abstractions (including boo#1166007)
  - fully support 'include if exists' in the aa-* tools
  - rewrite handling of alias, include, link and variable rules in
    the aa-* tools
  - rewrite and simplify log handling in the aa-logprof and aa-genprof
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
    for the detailed upstream changelog
- patches:
  - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
    release up to 3e18c0785abc03ee42a022a67a27a085516a7921
  - drop upstreamed usr-etc-abstractions-base-nameservice.diff
  - drop 2.13-only libapparmor-so-number.diff
  - refresh apparmor-enable-profile-cache.diff - partially upstreamed
  - update apparmor-samba-include-permissions-for-shares.diff and
    apparmor-lessopen-profile.patch - switch to "include if exists"
  - apparmor-lessopen-profile.patch: add abi rule to lessopen profile
  - refresh apparmor-lessopen-nfs-workaround.diff
- move away very loose apache profile that doesn't even match the
  apache2 binary path in openSUSE to avoid confusion (boo#872984)
- move rewritten aa-status from utils to parser subpackage
- add aa-features-abi to parser subpackage
- replace perl and libnotify-tools requires with requiring
  python3-notify2 and python3-psutil (needed by the rewritten
  aa-notify)
- drop ancient cleanup for /etc/init.d/subdomain from parser %pre
- drop (never enabled) conditionals to build with python2 and to
  build the python-apparmor subpackage (upstream dropped python2
  support)
- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed
- set PYFLAKES path for utils check
- add precompiled_cache build conditional to allow faster local
  builds without using kvm
- remove duplicated BuildRequires: swig

libapparmor:
- update to AppArmor 3.0.0
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
    for the detailed upstream changelog
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
  release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop 2.13-only patch libapparmor-so-number.diff

OBS-URL: https://build.opensuse.org/request/show/844157
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=281
 2020-10-26 20:16:22 +00:00
Christian Boltz
4c6d64a169 Accepting request 842314 from home:cboltz 
- update to AppArmor 2.13.5
  - add missing permissions to several profiles and abstractions
  - bugfixes in parser and tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
    for the detailed upstream changelog
- remove upstream(ed) patches
  - changes-since-2.13.4.diff
  - abstractions-X-xauth-mr582.diff
  - sevdb-caps-mr589.diff
  - libvirt-leaseshelper.patch
  - cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658)

libapparmor:
- update to AppArmor 2.13.5
  - fix two potential build failures
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
    for the detailed upstream changelog
- add libapparmor-so-number.diff to fix libapparmor so version (!658)

OBS-URL: https://build.opensuse.org/request/show/842314
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=279
 2020-10-17 16:56:14 +00:00
Christian Boltz
9c5c1e5926 Accepting request 841766 from home:cboltz 
- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
  cap_checkpoint_restore.diff)

OBS-URL: https://build.opensuse.org/request/show/841766
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=277
 2020-10-14 12:23:14 +00:00
Christian Boltz
13d781e542 Accepting request 840334 from home:cboltz 
- %service_del_postun_without_restart only works for Tumbleweed,
  keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x

OBS-URL: https://build.opensuse.org/request/show/840334
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=276
 2020-10-08 21:20:17 +00:00
Christian Boltz
7de39802e7 Accepting request 835136 from home:fbui:branches:security:apparmor 
- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.

OBS-URL: https://build.opensuse.org/request/show/835136
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=274
 2020-09-29 19:13:52 +00:00
Christian Boltz
98bfbb94e5 Accepting request 831960 from home:jfehlig:branches:security:apparmor 
This needs to go upstream but hoping someone here more familiar with
apparmor and its dev processes can do that. If not please let me know
and I can give it a stab.

- libvirt-leaseshelper.patch: add /usr/libexec as a path to the
  libvirt leaseshelper script (jsc#SLE-14253)

OBS-URL: https://build.opensuse.org/request/show/831960
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=272
 2020-09-06 10:18:31 +00:00
Christian Boltz
a56c5e56bc Accepting request 824912 from home:cboltz 
- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON
  to severity.db (lp#1890547)

OBS-URL: https://build.opensuse.org/request/show/824912
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=270
 2020-08-07 21:09:36 +00:00
Christian Boltz
d925988ada Accepting request 821970 from home:cboltz 
- add abstractions-X-xauth-mr582.diff to allow reading the xauth file
  from its new sddm location (boo#1174290, boo#1174293)

OBS-URL: https://build.opensuse.org/request/show/821970
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=268
 2020-07-20 18:53:52 +00:00
Christian Boltz
15e585724c Accepting request 807998 from home:cboltz 
- add changes-since-2.13.4.diff with upstream changes and fixes
  since 2.13.4 up to 5f61bd4c:
  - add several abstractions related to xdg-open:
    dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
    kde-open5, xdg-open
  - introduce @{run} variable
  - update dnsmasq and winbindd profile
  - update mdns, mesa and nameservice abstraction
  - some bugfixes in the aa-* tools, including a remote bugfix in the
    YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-fix-utils-network-test.diff
  - make-4.3-network.diff
  - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
  Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff

OBS-URL: https://build.opensuse.org/request/show/807998
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=266
 2020-05-21 13:33:21 +00:00
Christian Boltz
3d58d48604 Accepting request 792967 from home:goldwynr:branches:security:apparmor 
bsc1168306 - Add /etc/mdns.allow

OBS-URL: https://build.opensuse.org/request/show/792967
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=264
 2020-04-10 16:39:59 +00:00
Christian Boltz
eb47f5e85c Accepting request 789397 from home:cboltz 
- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff

Also fix a wrong patch filename in the previous .changes entry.
The correct message about the refreshed patch is:
- refresh usr-etc-abstractions-base-nameservice.diff

OBS-URL: https://build.opensuse.org/request/show/789397
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=262
 2020-03-29 00:17:09 +00:00