Christian Boltz
7ae734d682
Accepting request 953283 from home:cboltz
...
- update to AppArmor 3.0.4
- various fixes in profiles, abstractions, apparmor_parser and utils
(some of them were already included as patches)
- add support for mctp address family
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
for the full upstream changelog
- remove upstream(ed) patches:
- aa-notify-more-arch-mr809.diff
- ruby-3.1-build-fix.diff
- add-samba-bgqd.diff
- openssl-engdef-mr818.diff
- profiles-python-3.10-mr783.diff
- update-samba-abstractions-ldb2.diff
- refresh patches:
- apparmor-samba-include-permissions-for-shares.diff
- ruby-2_0-mkmf-destdir.patch
AppArmor 3.0.4 also includes a fix for the issue with 'mctp' found via
https://build.opensuse.org/request/show/951354
so you might want to pick this SR into Staging:O
OBS-URL: https://build.opensuse.org/request/show/953283
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=316
2022-02-10 18:40:04 +00:00
Christian Boltz
a53ba0c4c6
Accepting request 949319 from home:cboltz
...
- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
MR 827)
OBS-URL: https://build.opensuse.org/request/show/949319
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=315
2022-01-26 18:03:22 +00:00
Christian Boltz
b6bdf3e03b
Accepting request 947009 from home:scabrero:branches:network:samba:STABLE
...
- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
packaging to allow parallel installation with libldb;
(bsc#1192684).
OBS-URL: https://build.opensuse.org/request/show/947009
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=314
2022-01-17 19:17:01 +00:00
Christian Boltz
29f71f58a2
Accepting request 941674 from home:npower:branches:security:apparmor
...
- Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).
OBS-URL: https://build.opensuse.org/request/show/941674
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=312
2021-12-20 20:25:33 +00:00
Christian Boltz
880c63e84b
Accepting request 941546 from home:cboltz
...
- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
/etc/ssl/engines.d/ in abstractions/openssl which were introduced
with the latest openssl update
OBS-URL: https://build.opensuse.org/request/show/941546
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=311
2021-12-19 22:02:51 +00:00
Christian Boltz
b71124a2f1
Accepting request 930526 from home:cboltz
...
- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
and aarch64 wtmp files (boo#1181155)
OBS-URL: https://build.opensuse.org/request/show/930526
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=310
2021-11-09 18:09:23 +00:00
Christian Boltz
95882c1eba
Accepting request 925550 from home:cboltz
...
- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)
OBS-URL: https://build.opensuse.org/request/show/925550
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=308
2021-10-15 20:26:27 +00:00
Christian Boltz
4c0a0a0ace
Accepting request 920053 from home:cboltz
...
- lessopen.sh profile: allow reading files that live on NFS over UDP
(added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)
OBS-URL: https://build.opensuse.org/request/show/920053
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=307
2021-09-18 13:20:11 +00:00
Christian Boltz
102dd5dab3
Accepting request 911594 from home:cboltz
...
- add profiles-python-3.10-mr783.diff: update abstractions/python and
profiles for python 3.10
OBS-URL: https://build.opensuse.org/request/show/911594
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=306
2021-08-12 11:55:02 +00:00
Christian Boltz
07f7b7b8e2
Accepting request 910590 from home:cboltz
...
- update to AppArmor 3.0.3
- fix a failure in the parser tests
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
for the detailed upstream changelog
- update to AppArmor 3.0.2
- add missing permissions to several profiles and abstractions
(including boo#1188296)
- bugfixes in utils and parser (including boo#1180766 and boo#1184779)
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
for the detailed upstream changelog
- remove upstreamed patches:
- apparmor-dovecot-stats-metrics.diff
- abstractions-php8.diff
- crypto-policies-mr720.diff
OBS-URL: https://build.opensuse.org/request/show/910590
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=305
2021-08-07 11:29:35 +00:00
Christian Boltz
90a47beb92
Accepting request 906541 from home:stroeder:sys
...
added apparmor-dovecot-stats-metrics.diff to allow Prometheus metrics end-point
OBS-URL: https://build.opensuse.org/request/show/906541
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=303
2021-07-19 20:35:07 +00:00
Christian Boltz
b8fb8937d0
Accepting request 898186 from home:cboltz
...
- move Requires: python3 back to the python3-apparmor subpackage -
readline usage is in the python modules, not in apparmor-utils
OBS-URL: https://build.opensuse.org/request/show/898186
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=301
2021-06-07 19:32:55 +00:00
Goldwyn Rodrigues
00b1cea83e
Accepting request 895564 from home:mcepl:branches:security:apparmor
...
- Remove python symbols (python means currently python2), work
only with python3 ones (fallout from bsc#1185588).
OBS-URL: https://build.opensuse.org/request/show/895564
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=300
2021-06-07 18:40:06 +00:00
Christian Boltz
b410411567
Accepting request 894864 from home:cboltz
...
- add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267)
OBS-URL: https://build.opensuse.org/request/show/894864
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=298
2021-05-21 21:13:53 +00:00
Christian Boltz
0916435d00
Accepting request 888862 from home:cboltz
...
- add crypto-policies-mr720.diff to allow reading crypto policies
in abstractions/ssl_certs (boo#1183597)
- replace %{?systemd_requires} with %{?systemd_ordering} to avoid dragging in
systemd into containers just because apparmor-parser ships a *.service file
OBS-URL: https://build.opensuse.org/request/show/888862
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=296
2021-04-27 17:07:13 +00:00
Christian Boltz
4710d6ccea
Accepting request 874370 from home:lnussel:usrmove
...
- avoid file listed twice error
OBS-URL: https://build.opensuse.org/request/show/874370
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=294
2021-02-22 18:21:51 +00:00
Christian Boltz
1906a6ea33
Accepting request 871276 from home:cboltz
...
- merge libapparmor.changes into apparmor.changes
OBS-URL: https://build.opensuse.org/request/show/871276
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=292
2021-02-11 18:20:43 +00:00
Christian Boltz
8416250f76
Accepting request 868745 from home:cboltz
...
- define %_pamdir for <= 15.x to fix the build on those releases
OBS-URL: https://build.opensuse.org/request/show/868745
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=290
2021-02-02 18:37:25 +00:00
Christian Boltz
a564ac7aa3
Accepting request 868407 from home:lnussel:usrmove
...
- prepare usrmerge (boo#1029961)
* use %_pamdir
OBS-URL: https://build.opensuse.org/request/show/868407
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=289
2021-02-01 18:27:47 +00:00
Christian Boltz
cbfc4c18e3
Accepting request 865955 from home:cboltz
...
- add apache-extra-profile-include-if-exists.diff: make <apache2.d>
include in apache extra profile optional to avoid problems with empty
profile directory (boo#1178527)
OBS-URL: https://build.opensuse.org/request/show/865955
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=287
2021-01-22 11:50:03 +00:00
Christian Boltz
052f1da54b
Accepting request 852710 from home:cboltz
...
- update to AppArmor 3.0.1
- minor additions to profiles and abstractions
- some bugfixes in libapparmor, apparmor_parser and the aa-* utils
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
for the detailed upstream changelog
- removed upstream(ed) patches:
- changes-since-3.0.0.diff
- extra-profiles-fix-Pux.diff
- utils-fix-hotkey-conflict.diff
libapparmor:
- update to AppArmor 3.0.1
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
for the detailed upstream changelog
- drop upstream patch changes-since-3.0.0.diff
OBS-URL: https://build.opensuse.org/request/show/852710
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=285
2020-12-02 20:13:56 +00:00
Christian Boltz
d058b1185f
Accepting request 852662 from home:dimstar:Factory
...
Fix build with new/reworked apache package without breaking compat to previous mode
OBS-URL: https://build.opensuse.org/request/show/852662
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=284
2020-12-02 16:27:43 +00:00
Christian Boltz
7fc9e62410
Accepting request 845532 from home:cboltz
...
- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in
de, id and sv translations (and fix the test) (MR 675)
- add extra-profiles-fix-Pux.diff to fix an inactive profile -
prevents a crash in aa-logprof and aa-genprof when creating a new
profile (MR 676)
OBS-URL: https://build.opensuse.org/request/show/845532
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=282
2020-11-02 19:55:01 +00:00
Christian Boltz
980f095fc4
Accepting request 844157 from home:cboltz
...
- update to AppArmor 3.0.0
- introduce feature abi declaration in profiles to enable use of
new rule types (for openSUSE: dbus and unix rules)
- support xattr attachment conditionals
- experimental support for kill and unconfined profile modes
- rewritten aa-status (in C), including support for new profile modes
- rewritten aa-notify (in python), finally dropping the perl
requirement at runtime
- new tool aa-features-abi for extracting feature abis from the kernel
- update profiles to have profile names and to use 3.0 feature abi
- introduce @{etc_ro} and @{etc_rw} profile variables
- new profile for php-fpm
- several updates to profiles and abstractions (including boo#1166007)
- fully support 'include if exists' in the aa-* tools
- rewrite handling of alias, include, link and variable rules in
the aa-* tools
- rewrite and simplify log handling in the aa-logprof and aa-genprof
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
for the detailed upstream changelog
- patches:
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop upstreamed usr-etc-abstractions-base-nameservice.diff
- drop 2.13-only libapparmor-so-number.diff
- refresh apparmor-enable-profile-cache.diff - partially upstreamed
- update apparmor-samba-include-permissions-for-shares.diff and
apparmor-lessopen-profile.patch - switch to "include if exists"
- apparmor-lessopen-profile.patch: add abi rule to lessopen profile
- refresh apparmor-lessopen-nfs-workaround.diff
- move away very loose apache profile that doesn't even match the
apache2 binary path in openSUSE to avoid confusion (boo#872984)
- move rewritten aa-status from utils to parser subpackage
- add aa-features-abi to parser subpackage
- replace perl and libnotify-tools requires with requiring
python3-notify2 and python3-psutil (needed by the rewritten
aa-notify)
- drop ancient cleanup for /etc/init.d/subdomain from parser %pre
- drop (never enabled) conditionals to build with python2 and to
build the python-apparmor subpackage (upstream dropped python2
support)
- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed
- set PYFLAKES path for utils check
- add precompiled_cache build conditional to allow faster local
builds without using kvm
- remove duplicated BuildRequires: swig
libapparmor:
- update to AppArmor 3.0.0
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
for the detailed upstream changelog
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop 2.13-only patch libapparmor-so-number.diff
OBS-URL: https://build.opensuse.org/request/show/844157
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=281
2020-10-26 20:16:22 +00:00
Christian Boltz
4c6d64a169
Accepting request 842314 from home:cboltz
...
- update to AppArmor 2.13.5
- add missing permissions to several profiles and abstractions
- bugfixes in parser and tools
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
for the detailed upstream changelog
- remove upstream(ed) patches
- changes-since-2.13.4.diff
- abstractions-X-xauth-mr582.diff
- sevdb-caps-mr589.diff
- libvirt-leaseshelper.patch
- cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658 )
libapparmor:
- update to AppArmor 2.13.5
- fix two potential build failures
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
for the detailed upstream changelog
- add libapparmor-so-number.diff to fix libapparmor so version (!658 )
OBS-URL: https://build.opensuse.org/request/show/842314
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=279
2020-10-17 16:56:14 +00:00
Christian Boltz
9c5c1e5926
Accepting request 841766 from home:cboltz
...
- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
cap_checkpoint_restore.diff)
OBS-URL: https://build.opensuse.org/request/show/841766
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=277
2020-10-14 12:23:14 +00:00
Christian Boltz
13d781e542
Accepting request 840334 from home:cboltz
...
- %service_del_postun_without_restart only works for Tumbleweed,
keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x
OBS-URL: https://build.opensuse.org/request/show/840334
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=276
2020-10-08 21:20:17 +00:00
Christian Boltz
7de39802e7
Accepting request 835136 from home:fbui:branches:security:apparmor
...
- Make use of %service_del_postun_without_restart
And stop using DISABLE_RESTART_ON_UPDATE as this interface is
obsolete.
OBS-URL: https://build.opensuse.org/request/show/835136
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=274
2020-09-29 19:13:52 +00:00
Christian Boltz
98bfbb94e5
Accepting request 831960 from home:jfehlig:branches:security:apparmor
...
This needs to go upstream but hoping someone here more familiar with
apparmor and its dev processes can do that. If not please let me know
and I can give it a stab.
- libvirt-leaseshelper.patch: add /usr/libexec as a path to the
libvirt leaseshelper script (jsc#SLE-14253)
OBS-URL: https://build.opensuse.org/request/show/831960
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=272
2020-09-06 10:18:31 +00:00
Christian Boltz
a56c5e56bc
Accepting request 824912 from home:cboltz
...
- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON
to severity.db (lp#1890547)
OBS-URL: https://build.opensuse.org/request/show/824912
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=270
2020-08-07 21:09:36 +00:00
Christian Boltz
d925988ada
Accepting request 821970 from home:cboltz
...
- add abstractions-X-xauth-mr582.diff to allow reading the xauth file
from its new sddm location (boo#1174290, boo#1174293)
OBS-URL: https://build.opensuse.org/request/show/821970
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=268
2020-07-20 18:53:52 +00:00
Christian Boltz
15e585724c
Accepting request 807998 from home:cboltz
...
- add changes-since-2.13.4.diff with upstream changes and fixes
since 2.13.4 up to 5f61bd4c:
- add several abstractions related to xdg-open:
dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
kde-open5, xdg-open
- introduce @{run} variable
- update dnsmasq and winbindd profile
- update mdns, mesa and nameservice abstraction
- some bugfixes in the aa-* tools, including a remote bugfix in the
YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-fix-utils-network-test.diff
- make-4.3-network.diff
- abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff
OBS-URL: https://build.opensuse.org/request/show/807998
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=266
2020-05-21 13:33:21 +00:00
Christian Boltz
3d58d48604
Accepting request 792967 from home:goldwynr:branches:security:apparmor
...
bsc1168306 - Add /etc/mdns.allow
OBS-URL: https://build.opensuse.org/request/show/792967
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=264
2020-04-10 16:39:59 +00:00
Christian Boltz
eb47f5e85c
Accepting request 789397 from home:cboltz
...
- fix build with make 4.3 by backporting some commits from upstream
master (boo#1167953):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-network.diff
- make-4.3-fix-utils-network-test.diff
Also fix a wrong patch filename in the previous .changes entry.
The correct message about the refreshed patch is:
- refresh usr-etc-abstractions-base-nameservice.diff
OBS-URL: https://build.opensuse.org/request/show/789397
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=262
2020-03-29 00:17:09 +00:00
Christian Boltz
9e2caf2d7f
Accepting request 784420 from home:cboltz
...
- update to AppArmor 2.13.4
- several abstraction updates (including boo#1153162)
- disallow writing to fontconfig cache in abstractions/fonts
- some bugfixes in the aa-* tools
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
- drop upstreamed patches:
- abstractions-ssl-certbot-paths.diff
- apparmor-krb5-conf-d.diff
- libapparmor-python3.8.diff
- usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-authentification.diff
libapparmor:
- update to AppArmor 2.13.4
- fix log parsing for logs with an embedded newline
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
OBS-URL: https://build.opensuse.org/request/show/784420
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=260
2020-03-12 20:45:35 +00:00
Christian Boltz
469de27df3
Accepting request 767252 from home:cboltz
...
- add usr-etc-abstractions-base-nameservice.diff to adjust
abstractions/base and nameservice for /usr/etc/ (boo#1161756)
OBS-URL: https://build.opensuse.org/request/show/767252
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=258
2020-01-25 19:11:40 +00:00
Christian Boltz
36072d063b
Accepting request 749270 from home:scarabeus_iv:branches:security:apparmor
...
- Properly pull in full python3 interpreter
OBS-URL: https://build.opensuse.org/request/show/749270
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=256
2019-11-18 11:15:04 +00:00
Christian Boltz
90a7b9f915
Accepting request 746669 from home:cboltz
...
- add libapparmor-python3.8.diff to fix building the libapparmor python
bindings (deb#943657)
OBS-URL: https://build.opensuse.org/request/show/746669
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=254
2019-11-08 17:42:53 +00:00
Christian Boltz
5a3f92eb01
Accepting request 735944 from home:cboltz
...
- add usr-etc-abstractions-authentification.diff to allow reading
/usr/etc/pam.d/* and some other authentification-related files (boo#1153162)
OBS-URL: https://build.opensuse.org/request/show/735944
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=252
2019-10-07 20:19:22 +00:00
Christian Boltz
433977903f
Accepting request 733857 from home:cboltz
...
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
abstractions/ssl_certs and abstractions/ssl_keys
OBS-URL: https://build.opensuse.org/request/show/733857
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=250
2019-09-28 15:36:36 +00:00
Christian Boltz
34919fc720
Accepting request 733763 from home:luizluca:branches:security:apparmor
...
- add apparmor-krb5-conf-d.diff for kerberos client
Since https://build.opensuse.org/package/rdiff/network/krb5?linkrev=base&rev=204 , it is possible to use configuration snippets for krb5.conf. However, any service under apparmor will not be able to read it.
As /etc/krb5.conf.d is default for SUSE but not for upstream apparmor, the patch might not be accepted upstream.
LEAP15(.1) should also get this fix.
OBS-URL: https://build.opensuse.org/request/show/733763
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=249
2019-09-28 15:13:31 +00:00
Christian Boltz
c2744d57c4
Accepting request 710682 from home:cboltz
...
- re-number remaining patches
OBS-URL: https://build.opensuse.org/request/show/710682
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=247
2019-06-18 22:47:39 +00:00
Christian Boltz
040db79da2
Accepting request 710679 from home:cboltz
...
- update to 2.13.3
- profile updates for dnsmasq, dovecot, identd, syslog-ng
- new "lsb_release" profile (only used when using "Px -> lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
libapparmor:
- update to AppArmor 2.13.1
- some fixes in cache handling
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
OBS-URL: https://build.opensuse.org/request/show/710679
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=246
2019-06-18 22:31:34 +00:00
Christian Boltz
81e6e09dde
Accepting request 707832 from home:cboltz
...
- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751)
OBS-URL: https://build.opensuse.org/request/show/707832
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=244
2019-06-05 12:14:49 +00:00
Christian Boltz
bdfa577764
Accepting request 697748 from home:marxin:branches:security:apparmor
...
- Disable LTO (boo#1133091).
OBS-URL: https://build.opensuse.org/request/show/697748
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=242
2019-04-25 08:20:14 +00:00
Christian Boltz
901b8032a7
Accepting request 694059 from home:cboltz
...
- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)
OBS-URL: https://build.opensuse.org/request/show/694059
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=240
2019-04-14 15:15:50 +00:00
Christian Boltz
ef40d07d30
Accepting request 682453 from home:cboltz
...
- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877)
OBS-URL: https://build.opensuse.org/request/show/682453
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=238
2019-03-07 12:45:58 +00:00
Christian Boltz
4a792e8754
Accepting request 679944 from home:cboltz
...
update dnsmasq-revert-alternation.diff from upstream merge request
OBS-URL: https://build.opensuse.org/request/show/679944
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=236
2019-02-27 19:30:05 +00:00
Christian Boltz
854f9b32a9
Accepting request 679592 from home:cboltz
...
- add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile to avoid breaking libvirtd (boo#1127073)
OBS-URL: https://build.opensuse.org/request/show/679592
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=235
2019-02-26 20:52:01 +00:00
Christian Boltz
c0b44a6d8f
add patch name to changelog
...
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=233
2019-01-25 00:14:02 +00:00