Commit Graph

78 Commits

Author SHA256 Message Date
Christian Boltz
2520f26685 update changelog to mention patch name
- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs
  confinement. bnc#906858

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=113
2014-12-21 18:05:47 +00:00
Christian Boltz
a8ada6b88d - rename lessopen.sh profile file to usr.bin.lessopen.sh to match the
script filename

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=112
2014-12-21 16:26:04 +00:00
Christian Boltz
fd37374f57 Accepting request 264683 from home:msmeissn:branches:security:apparmor
- /usr/bin/lessopen.sh needs confinement. bnc#906858

OBS-URL: https://build.opensuse.org/request/show/264683
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=111
2014-12-21 16:18:25 +00:00
Christian Boltz
ce726570fb - delete cache in apparmor-profiles %post (workaround for
bnc#904620#c8 / lp#1392042)

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=109
2014-11-16 16:38:29 +00:00
Christian Boltz
62b0b4baf3 Accepting request 261546 from home:dimstar:gpg2
OBS-URL: https://build.opensuse.org/request/show/261546
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=108
2014-11-15 12:46:47 +00:00
Christian Boltz
611d65c78d Accepting request 260415 from home:Ledest:misc
fix bashism in post script

OBS-URL: https://build.opensuse.org/request/show/260415
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=106
2014-11-09 13:29:57 +00:00
Christian Boltz
bc413776a0 Accepting request 257520 from home:cboltz
- update to AppArmor 2.9.0 (r2759)
  - change aa-mergeprof to the final commandline syntax
  - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several
    bugs without a formal bugreport)
  - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java 
    and user-mail abstractions
  - fix mod_apparmor to not break basic auth
  - update perl modules to support signal, unix and ptrace rules (bnc#900013)
  - don't warn about rules not supported by the kernel
  - fix logging of "audit capability" (lp#1378091)
  - add support for the "hat" keyword in apparmor.vim
  - build html version of apparmor.vim manpage again (lp#1366572)
  - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
- update apparmor-abstractions-no-multiline.diff
- remove upstreamed apparmor-profiles-ntpd-pid-location.diff

- add apparmor-abstractions-no-multiline.diff: change all multiline
  rules into one line. Needed for yast2-apparmor (bnc#900013)

OBS-URL: https://build.opensuse.org/request/show/257520
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=104
2014-10-18 13:47:32 +00:00
Christian Boltz
225afaddfb Accepting request 254373 from home:cboltz
- add apparmor-profiles-ntpd-pid-location.diff to cover new ntpd pid
  location (bnc#899746)

OBS-URL: https://build.opensuse.org/request/show/254373
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=102
2014-10-06 18:24:32 +00:00
Christian Boltz
6915e079e5 Accepting request 254059 from home:cboltz
- update to AppArmor 2.8.97 (aka 2.9 beta3 aka r2721)
  - several bugfixes in python and C tools
  - rename "__unused" to "unused" in apparmor_parser to fix compilation
    on openSUSE <= 13.1 x86_64 (bnc#895495) 
  - usr.lib.dovecot.auth profile: allow access to auth-token-secret.dat
  - various small profile improvements
  - update and add several testcases
- drop upstreamed patch apparmor-profiles-dnsmasq-iface-mtu.patch
- re-number remaining patches

OBS-URL: https://build.opensuse.org/request/show/254059
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=100
2014-10-05 19:34:36 +00:00
Christian Boltz
f7c45c5e5a Accepting request 254032 from home:cboltz
- split apparmor-profiles package into -profiles and -abstractions

OBS-URL: https://build.opensuse.org/request/show/254032
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=99
2014-10-05 16:17:38 +00:00
Christian Boltz
2863c2011e Accepting request 247917 from home:cboltz
- update to AppArmor 2.8.96 (aka 2.9 beta2 aka r2652)
  - add unix abstract sockets, ptrace, and signal policy generation
  - several bugfixes in the python tools and elsewhere
  - move program-chunks/postfix-common to abstractions/
  - drop upstreamed patches:
    - apparmor-profiles-clustered-samba.diff
    - perl-apparmor-fix-bare-network-keyword-handling.diff
    - perl-apparmor-handle-bare-capability-keyword.diff
    - perl-apparmor-properly-handle-bare-file-keyword.diff
- re-enable installation of perl modules
- move python modules to python3-apparmor package
- create symlinks without aa- prefix only for tools existing in 2.8.x,
  but not for new tools added in 2.9
- make utils filelist explicit to ensure we have the right set of files
  without aa- prefix in sbindir
- switch easyprof python module location to python3
- drop unused defines APPARMOR_DOC_DIR and JNI_SO
- refresh patches:
  - apparmor-utils-string-split (file moved)
  - apparmor-profiles-dnsmasq-iface-mtu.patch
  - apparmor-2.5.1-edirectory-profile

(prepared Thu Mar 20 23:35:03 UTC 2014 in home project)
- update to AppArmor 2.8.95 (aka 2.9 beta1)
  - complete rewrite of the aa-* tools in python
  - new tools: aa-cleanprof, aa-mergeprof
  - extra profiles moved to /usr/share/apparmor/extra-profiles/ (bnc#713647)
  - and much more, but there's no upstream changelog yet
- drop upstreamed patches and files:
  - usr.sbin.winbindd
  - usr.lib.dovecot.*, tunables-dovecot, apparmor-profiles-dovecot-bnc851984.diff
  - apparmor-init.py-gsoc.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
- add %bcond_with perl and disable the perl subpackage temporarily (the perl
  modules will be back in beta2)
- drop the apparmorapplet-gnome, apparmor-dbus and profile-editor subpackages 
  (they were disabled since a long time, and upstream no longer ships their code)
  and the apparmor-profile-editor.desktop and apparmor-profile-editor.png files
- drop apparmor-utils-subdomain-compat patch (was only included for <= 12.1)
- remove libimmunix Provides/Obsoletes (libimmunix was a compat wrapper
  and got finally dropped)
- refresh apparmor-samba-include-permissions-for-shares.diff and
  apparmor-2.5.1-edirectory-profile

OBS-URL: https://build.opensuse.org/request/show/247917
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=97
2014-09-07 19:10:23 +00:00
Christian Boltz
e1dce783c9 Accepting request 247625 from home:jfehlig:branches:security:apparmor
V2 (supersedes 247613)

This patch fixes bnc#892374, which I'd like to fix for SLE12, but
needs submitted here first.

The patch adds a (IMO) necessary rule to the dnsmasq profile,
question is whether I got the syntax right.  If so, please accept
this request and forward the patch upstream.  Thanks!

- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/<ifacename>/mtu
  (bnc#892374)

OBS-URL: https://build.opensuse.org/request/show/247625
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=95
2014-09-06 21:13:24 +00:00
Christian Boltz
cfa3ffe42d - usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
plaintext password files (bnc#874094)

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=93
2014-08-11 21:21:22 +00:00
Christian Boltz
95b82b4e5d Maually merge SR 243200 by dimstar
Descr: Rename rpmlintrc as per pkg guideline to %{name}-rpmlintrc

Also add upstream commit revisions for the perl-apparmor* patches

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=91
2014-08-02 10:53:38 +00:00
Christian Boltz
0525bb6f3c Accepting request 243065 from home:jeff_mahoney:branches:security:apparmor
- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)

OBS-URL: https://build.opensuse.org/request/show/243065
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=90
2014-08-02 10:37:10 +00:00
Christian Boltz
432d74349e Manual merge of SR 239282 by computersalat, with the exception of
adding /srv/maildirs/ to tunables/dovecot.

Also update upstream commits in apparmor.spec patch notes.



- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include <tunables/dovecot>
      /usr/lib/dovecot/managesieve {
       #include <abstractions/base>
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,

- add #include <abstractions/wutmp> to usr.lib.dovecot.auth

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=88
2014-07-15 22:04:34 +00:00
Christian Boltz
06f70bd7e3 Accepting request 239579 from home:dmdiss:bnc885317_clustered_samba_apparmor
- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)

OBS-URL: https://build.opensuse.org/request/show/239579
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=87
2014-07-15 21:37:38 +00:00
Tomáš Chvátal
e40d86fad0 Accepting request 228512 from home:lmuelle:branches:security:apparmor
- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/

- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/

OBS-URL: https://build.opensuse.org/request/show/228512
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=85
2014-04-18 11:18:39 +00:00
Christian Boltz
72703fa08c Accepting request 226903 from home:cboltz
- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)

OBS-URL: https://build.opensuse.org/request/show/226903
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=83
2014-03-20 20:01:40 +00:00
Christian Boltz
00e523d4b1 Accepting request 222637 from home:cboltz
- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and 
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff

OBS-URL: https://build.opensuse.org/request/show/222637
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=80
2014-02-17 21:27:57 +00:00
Christian Boltz
3552b148f2 Accepting request 220542 from home:coolo:branches:openSUSE:Factory
- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1

OBS-URL: https://build.opensuse.org/request/show/220542
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=78
2014-02-01 12:26:11 +00:00
Christian Boltz
ddc41a170f - update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql 
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=75
2014-01-26 15:18:37 +00:00
Christian Boltz
25eca62b0a Accepting request 214398 from home:cboltz
- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*, 
  /{var/,}run/dovecot/mounts, deny capability block_suspend)

OBS-URL: https://build.opensuse.org/request/show/214398
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=73
2014-01-19 14:56:57 +00:00
Christian Boltz
645ce4a678 Accepting request 214262 from home:develop7:branches:security:apparmor
Fixes broken dnsmasq dns plugin in NetworkManager

OBS-URL: https://build.opensuse.org/request/show/214262
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=72
2014-01-17 17:13:27 +00:00
Christian Boltz
5d66f079f8 Accepting request 212802 from home:cboltz
- add permissions for kerberos replay cache to usr.lib.dovecot.auth
- add permissions for /proc/*/mounts and /var/run/dovecot/mounts to
  usr.lib.dovecot.dovecot-lda
- update changelog to mention apparmor-profiles-dovecot-bnc851984.diff
  and usr.lib.dovecot.*

OBS-URL: https://build.opensuse.org/request/show/212802
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=70
2014-01-04 12:09:34 +00:00
Christian Boltz
07a11c242d Accepting request 212635 from home:cboltz
- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)

- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.

- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time. 
  Run aa-status to get a list of processes you need to restart, or reboot 
  your computer.
- reload profiles in %post of the apparmor-profiles package

OBS-URL: https://build.opensuse.org/request/show/212635
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=69
2014-01-02 13:01:50 +00:00
Christian Boltz
1f745b649e Accepting request 208366 from home:cboltz
- add apparmor-abstractions-ssl_certs.diff to allow access to 
  certificates in /var/lib/ca-certificates/ (bnc#852018)

OBS-URL: https://build.opensuse.org/request/show/208366
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=67
2013-11-25 23:58:28 +00:00
Christian Boltz
31be6e635f Accepting request 206954 from home:cboltz
- add apparmor-profiles-ntpd-r2103.diff with updated driftfile
  location for ntpd (bnc#850374)

OBS-URL: https://build.opensuse.org/request/show/206954
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=65
2013-11-14 20:59:22 +00:00
Christian Boltz
ca1171db19 Accepting request 205615 from home:cboltz
fix wrong bug number in .changes

OBS-URL: https://build.opensuse.org/request/show/205615
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=63
2013-11-02 19:05:50 +00:00
Christian Boltz
58f1803dff Accepting request 205608 from home:cboltz
- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846054#c12 and #c15)

Please include this change in 13.1.

OBS-URL: https://build.opensuse.org/request/show/205608
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=62
2013-11-02 16:11:42 +00:00
Christian Boltz
d171a3c620 - add apparmor-profiles-dnsmasq.diff - add missing permissions for
libvirt-generated files to dnsmasq profile (bnc#848215)

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=59
2013-10-30 11:36:14 +00:00
Christian Boltz
dfbaa33afd Accepting request 204015 from home:cboltz
- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)

Please also include this change in 13.1

OBS-URL: https://build.opensuse.org/request/show/204015
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=56
2013-10-20 12:05:07 +00:00
Christian Boltz
a4facc5105 Accepting request 203431 from home:cboltz
- add apparmor-profiles-samba4.diff - various profile additions for 
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)

OBS-URL: https://build.opensuse.org/request/show/203431
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=53
2013-10-15 21:44:56 +00:00
Christian Boltz
359d038285 Accepting request 201622 from home:cboltz
- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py

OBS-URL: https://build.opensuse.org/request/show/201622
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=51
2013-10-01 15:59:24 +00:00
Christian Boltz
568a5c7083 Accepting request 199886 from home:cboltz
- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages 
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages

Please also forward those fixes to 13.1

OBS-URL: https://build.opensuse.org/request/show/199886
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=49
2013-09-20 20:54:16 +00:00
Christian Boltz
7800cf233b Accepting request 199335 from home:cboltz
- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations

OBS-URL: https://build.opensuse.org/request/show/199335
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=47
2013-09-16 22:11:37 +00:00
Christian Boltz
3350370468 Accepting request 199292 from home:seife:branches:security:apparmor
fix ntp by allowing read access to openssl.cnf (see comment in patch)

OBS-URL: https://build.opensuse.org/request/show/199292
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=46
2013-09-16 20:26:54 +00:00
Christian Boltz
b950fbc28a Accepting request 198933 from home:cboltz
- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC

OBS-URL: https://build.opensuse.org/request/show/198933
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=44
2013-09-13 11:53:29 +00:00
Christian Boltz
cdba64057c Accepting request 196152 from home:cboltz
- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires

OBS-URL: https://build.opensuse.org/request/show/196152
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=42
2013-08-23 22:02:24 +00:00
Christian Boltz
644c700c5c Accepting request 195617 from home:cboltz
- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
    - various additions to abstractions/fonts
    - move poppler's cMaps from gnome to fonts; gnome includes fonts
    - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
    - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
      (bnc#824577)
    - update pulseaudio directory and cookie file paths
    - add missing permissions to the nscd profile (bnc#807104)
    - deny capability block_suspend to nscd (bnc#807104)
    - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff

- swig for python3 is broken on openSUSE 12.2 - build python-apparmor 
  (for python2) instead on 12.2

OBS-URL: https://build.opensuse.org/request/show/195617
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=41
2013-08-19 16:02:10 +00:00
Christian Boltz
4da2ecce1b Accepting request 188225 from home:cboltz
- add python3-apparmor subpackage (currently py2 OR py3 package can be 
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues

- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)

- enable python and ruby subpackages (using %bcond_without)
- update/fix paths in %files for python and ruby subpackages

OBS-URL: https://build.opensuse.org/request/show/188225
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=40
2013-08-15 12:10:13 +00:00
Christian Boltz
2ea42efed0 Accepting request 175273 from home:coolo:branches:openSUSE:Factory
- do not package directories as %config - especially not as noreplace

OBS-URL: https://build.opensuse.org/request/show/175273
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=37
2013-05-13 23:00:39 +00:00
Christian Boltz
a516810243 Accepting request 162270 from home:cboltz
- add Requires: insserv to parser package (needed by initscript)

OBS-URL: https://build.opensuse.org/request/show/162270
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=36
2013-04-02 20:03:24 +00:00
Christian Boltz
27e7628744 Accepting request 157429 from home:cboltz
This time with better paperwork ;-)

- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104, apparmor-profiles-nscd.diff)

Please also add this patch to openSUSE 12.3

The patch only adds permissions, which means it can't break anything.
Even "deny capability block_suspend" doesn't take away any permissions
(everything that is not allowed is denied by default). The deny rule
just disables the logging for capability block_suspend.

OBS-URL: https://build.opensuse.org/request/show/157429
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=34
2013-03-05 21:19:30 +00:00
Christian Boltz
fb230fe709 Accepting request 157409 from home:cboltz
- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104)

Please also add this patch to openSUSE 12.3

The patch only adds permissions, which means it can't break anything.
Even "deny capability block_suspend" doesn't take away any permissions 
(everything that is not allowed is denied by default). The deny rule
just disables the logging for capability block_suspend.

OBS-URL: https://build.opensuse.org/request/show/157409
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=33
2013-03-05 18:19:50 +00:00
Christian Boltz
5c998ab082 Accepting request 155632 from home:jengelh:branches:security:apparmor
- Add missing files to SRPM (bnc#777471)

OBS-URL: https://build.opensuse.org/request/show/155632
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=31
2013-02-17 15:48:15 +00:00
Christian Boltz
a8c35deb1a Accepting request 148267 from home:cboltz
- update abstractions/mysql with correct paths and add MariaDB paths
  (bnc#798183)

OBS-URL: https://build.opensuse.org/request/show/148267
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=29
2013-01-13 14:11:59 +00:00
Christian Boltz
c33e50b1a0 Accepting request 147965 from home:cboltz
- update to AppArmor 2.8.1 (=2.8 branch r2069)
  Bugfix release, http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_1
  Most important changes are:
  - add various missing parts to profiles and abstractions
  - fix a possible x conflict with hats or child profiles in 
    apparmor_parser
  - fix and speedup stdin handling in aa-decode
  - various other bugfixes
  - add pkgconfig support to libapparmor
- remove upstream(ed) patches

OBS-URL: https://build.opensuse.org/request/show/147965
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=27
2013-01-10 19:32:25 +00:00
Christian Boltz
76780104ab Accepting request 144621 from home:cboltz
- verify tarball with gpg-offline

OBS-URL: https://build.opensuse.org/request/show/144621
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=25
2012-12-07 16:18:41 +00:00
Christian Boltz
1b9e252479 Accepting request 135892 from home:coolo:branches:openSUSE:Factory
- fix directory flags for /etc/apparmor.d to be in sync between
  -parser and -profiles subpackage

OBS-URL: https://build.opensuse.org/request/show/135892
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=23
2012-09-26 20:23:10 +00:00