pool/apparmor
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
81 Commits 2 Branches 0 Tags 11 MiB
95b82b4e5d
Commit Graph

81 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Christian Boltz
95b82b4e5d Maually merge SR 243200 by dimstar 
Descr: Rename rpmlintrc as per pkg guideline to %{name}-rpmlintrc

Also add upstream commit revisions for the perl-apparmor* patches

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=91
 2014-08-02 10:53:38 +00:00
Christian Boltz
0525bb6f3c Accepting request 243065 from home:jeff_mahoney:branches:security:apparmor 
- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)

OBS-URL: https://build.opensuse.org/request/show/243065
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=90
 2014-08-02 10:37:10 +00:00
Christian Boltz
432d74349e Manual merge of SR 239282 by computersalat, with the exception of 
adding /srv/maildirs/ to tunables/dovecot.

Also update upstream commits in apparmor.spec patch notes.



- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include <tunables/dovecot>
      /usr/lib/dovecot/managesieve {
       #include <abstractions/base>
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,

- add #include <abstractions/wutmp> to usr.lib.dovecot.auth

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=88
 2014-07-15 22:04:34 +00:00
Christian Boltz
06f70bd7e3 Accepting request 239579 from home:dmdiss:bnc885317_clustered_samba_apparmor 
- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)

OBS-URL: https://build.opensuse.org/request/show/239579
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=87
 2014-07-15 21:37:38 +00:00
Tomáš Chvátal
e40d86fad0 Accepting request 228512 from home:lmuelle:branches:security:apparmor 
- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/

- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/

OBS-URL: https://build.opensuse.org/request/show/228512
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=85
 2014-04-18 11:18:39 +00:00
Christian Boltz
72703fa08c Accepting request 226903 from home:cboltz 
- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)

OBS-URL: https://build.opensuse.org/request/show/226903
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=83
 2014-03-20 20:01:40 +00:00
Christian Boltz
ee26b871db Accepting request 222645 from home:cboltz 
ok

OBS-URL: https://build.opensuse.org/request/show/222645
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=81
 2014-02-17 22:00:53 +00:00
Christian Boltz
00e523d4b1 Accepting request 222637 from home:cboltz 
- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and 
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff

OBS-URL: https://build.opensuse.org/request/show/222637
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=80
 2014-02-17 21:27:57 +00:00
Christian Boltz
3552b148f2 Accepting request 220542 from home:coolo:branches:openSUSE:Factory 
- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1

OBS-URL: https://build.opensuse.org/request/show/220542
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=78
 2014-02-01 12:26:11 +00:00
Christian Boltz
3d6d7c5943 Accepting request 214721 from home:develop7:branches:security:apparmor 
Fixes broken NetworkManager dnsmasq dns plugin by allowing dnsmasq access its' 
pid file and supplemental config directory.

This time it's really fixed

OBS-URL: https://build.opensuse.org/request/show/214721
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=76
 2014-01-26 15:24:46 +00:00
Christian Boltz
ddc41a170f - update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file 
and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql 
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=75
 2014-01-26 15:18:37 +00:00
Christian Boltz
25eca62b0a Accepting request 214398 from home:cboltz 
- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*, 
  /{var/,}run/dovecot/mounts, deny capability block_suspend)

OBS-URL: https://build.opensuse.org/request/show/214398
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=73
 2014-01-19 14:56:57 +00:00
Christian Boltz
645ce4a678 Accepting request 214262 from home:develop7:branches:security:apparmor 
Fixes broken dnsmasq dns plugin in NetworkManager

OBS-URL: https://build.opensuse.org/request/show/214262
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=72
 2014-01-17 17:13:27 +00:00
Christian Boltz
5d66f079f8 Accepting request 212802 from home:cboltz 
- add permissions for kerberos replay cache to usr.lib.dovecot.auth
- add permissions for /proc/*/mounts and /var/run/dovecot/mounts to
  usr.lib.dovecot.dovecot-lda
- update changelog to mention apparmor-profiles-dovecot-bnc851984.diff
  and usr.lib.dovecot.*

OBS-URL: https://build.opensuse.org/request/show/212802
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=70
 2014-01-04 12:09:34 +00:00
Christian Boltz
07a11c242d Accepting request 212635 from home:cboltz 
- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)

- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.

- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time. 
  Run aa-status to get a list of processes you need to restart, or reboot 
  your computer.
- reload profiles in %post of the apparmor-profiles package

OBS-URL: https://build.opensuse.org/request/show/212635
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=69
 2014-01-02 13:01:50 +00:00
Christian Boltz
1f745b649e Accepting request 208366 from home:cboltz 
- add apparmor-abstractions-ssl_certs.diff to allow access to 
  certificates in /var/lib/ca-certificates/ (bnc#852018)

OBS-URL: https://build.opensuse.org/request/show/208366
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=67
 2013-11-25 23:58:28 +00:00
Christian Boltz
31be6e635f Accepting request 206954 from home:cboltz 
- add apparmor-profiles-ntpd-r2103.diff with updated driftfile
  location for ntpd (bnc#850374)

OBS-URL: https://build.opensuse.org/request/show/206954
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=65
 2013-11-14 20:59:22 +00:00
Christian Boltz
ca1171db19 Accepting request 205615 from home:cboltz 
fix wrong bug number in .changes

OBS-URL: https://build.opensuse.org/request/show/205615
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=63
 2013-11-02 19:05:50 +00:00
Christian Boltz
58f1803dff Accepting request 205608 from home:cboltz 
- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846054#c12 and #c15)

Please include this change in 13.1.

OBS-URL: https://build.opensuse.org/request/show/205608
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=62
 2013-11-02 16:11:42 +00:00
Christian Boltz
af1a622b04 replace apparmor-profiles-dnsmasq.diff with upstreamed patch 
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=60
 2013-10-30 20:47:57 +00:00
Christian Boltz
d171a3c620 - add apparmor-profiles-dnsmasq.diff - add missing permissions for 
libvirt-generated files to dnsmasq profile (bnc#848215)

OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=59
 2013-10-30 11:36:14 +00:00
Christian Boltz
70d6af76c0 Accepting request 204031 from home:cboltz 
whitespace fix in patch

OBS-URL: https://build.opensuse.org/request/show/204031
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=57
 2013-10-20 14:39:56 +00:00
Christian Boltz
dfbaa33afd Accepting request 204015 from home:cboltz 
- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)

Please also include this change in 13.1

OBS-URL: https://build.opensuse.org/request/show/204015
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=56
 2013-10-20 12:05:07 +00:00
Christian Boltz
9e1473f092 Accepting request 203441 from home:cboltz 
smbd profile:
+  /{,var/}run/samba/ncalrpc/** rw,

OBS-URL: https://build.opensuse.org/request/show/203441
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=54
 2013-10-15 22:16:03 +00:00
Christian Boltz
a4facc5105 Accepting request 203431 from home:cboltz 
- add apparmor-profiles-samba4.diff - various profile additions for 
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)

OBS-URL: https://build.opensuse.org/request/show/203431
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=53
 2013-10-15 21:44:56 +00:00
Christian Boltz
359d038285 Accepting request 201622 from home:cboltz 
- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py

OBS-URL: https://build.opensuse.org/request/show/201622
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=51
 2013-10-01 15:59:24 +00:00
Christian Boltz
568a5c7083 Accepting request 199886 from home:cboltz 
- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages 
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages

Please also forward those fixes to 13.1

OBS-URL: https://build.opensuse.org/request/show/199886
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=49
 2013-09-20 20:54:16 +00:00
Christian Boltz
7800cf233b Accepting request 199335 from home:cboltz 
- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations

OBS-URL: https://build.opensuse.org/request/show/199335
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=47
 2013-09-16 22:11:37 +00:00
Christian Boltz
3350370468 Accepting request 199292 from home:seife:branches:security:apparmor 
fix ntp by allowing read access to openssl.cnf (see comment in patch)

OBS-URL: https://build.opensuse.org/request/show/199292
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=46
 2013-09-16 20:26:54 +00:00
Christian Boltz
b950fbc28a Accepting request 198933 from home:cboltz 
- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC

OBS-URL: https://build.opensuse.org/request/show/198933
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=44
 2013-09-13 11:53:29 +00:00
Christian Boltz
cdba64057c Accepting request 196152 from home:cboltz 
- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires

OBS-URL: https://build.opensuse.org/request/show/196152
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=42
 2013-08-23 22:02:24 +00:00
Christian Boltz
644c700c5c Accepting request 195617 from home:cboltz 
- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
    - various additions to abstractions/fonts
    - move poppler's cMaps from gnome to fonts; gnome includes fonts
    - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
    - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
      (bnc#824577)
    - update pulseaudio directory and cookie file paths
    - add missing permissions to the nscd profile (bnc#807104)
    - deny capability block_suspend to nscd (bnc#807104)
    - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff

- swig for python3 is broken on openSUSE 12.2 - build python-apparmor 
  (for python2) instead on 12.2

OBS-URL: https://build.opensuse.org/request/show/195617
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=41
 2013-08-19 16:02:10 +00:00
Christian Boltz
4da2ecce1b Accepting request 188225 from home:cboltz 
- add python3-apparmor subpackage (currently py2 OR py3 package can be 
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues

- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)

- enable python and ruby subpackages (using %bcond_without)
- update/fix paths in %files for python and ruby subpackages

OBS-URL: https://build.opensuse.org/request/show/188225
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=40
 2013-08-15 12:10:13 +00:00
Christian Boltz
77f186fe2c package /etc/apparmor.d/disable again (was lost in Coolo's SR) 
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=38
 2013-05-13 23:04:07 +00:00
Christian Boltz
2ea42efed0 Accepting request 175273 from home:coolo:branches:openSUSE:Factory 
- do not package directories as %config - especially not as noreplace

OBS-URL: https://build.opensuse.org/request/show/175273
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=37
 2013-05-13 23:00:39 +00:00
Christian Boltz
a516810243 Accepting request 162270 from home:cboltz 
- add Requires: insserv to parser package (needed by initscript)

OBS-URL: https://build.opensuse.org/request/show/162270
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=36
 2013-04-02 20:03:24 +00:00
Christian Boltz
27e7628744 Accepting request 157429 from home:cboltz 
This time with better paperwork ;-)

- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104, apparmor-profiles-nscd.diff)

Please also add this patch to openSUSE 12.3

The patch only adds permissions, which means it can't break anything.
Even "deny capability block_suspend" doesn't take away any permissions
(everything that is not allowed is denied by default). The deny rule
just disables the logging for capability block_suspend.

OBS-URL: https://build.opensuse.org/request/show/157429
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=34
 2013-03-05 21:19:30 +00:00
Christian Boltz
fb230fe709 Accepting request 157409 from home:cboltz 
- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104)

Please also add this patch to openSUSE 12.3

The patch only adds permissions, which means it can't break anything.
Even "deny capability block_suspend" doesn't take away any permissions 
(everything that is not allowed is denied by default). The deny rule
just disables the logging for capability block_suspend.

OBS-URL: https://build.opensuse.org/request/show/157409
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=33
 2013-03-05 18:19:50 +00:00
Christian Boltz
5c998ab082 Accepting request 155632 from home:jengelh:branches:security:apparmor 
- Add missing files to SRPM (bnc#777471)

OBS-URL: https://build.opensuse.org/request/show/155632
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=31
 2013-02-17 15:48:15 +00:00
Christian Boltz
a8c35deb1a Accepting request 148267 from home:cboltz 
- update abstractions/mysql with correct paths and add MariaDB paths
  (bnc#798183)

OBS-URL: https://build.opensuse.org/request/show/148267
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=29
 2013-01-13 14:11:59 +00:00
Christian Boltz
c33e50b1a0 Accepting request 147965 from home:cboltz 
- update to AppArmor 2.8.1 (=2.8 branch r2069)
  Bugfix release, http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_1
  Most important changes are:
  - add various missing parts to profiles and abstractions
  - fix a possible x conflict with hats or child profiles in 
    apparmor_parser
  - fix and speedup stdin handling in aa-decode
  - various other bugfixes
  - add pkgconfig support to libapparmor
- remove upstream(ed) patches

OBS-URL: https://build.opensuse.org/request/show/147965
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=27
 2013-01-10 19:32:25 +00:00
Christian Boltz
76780104ab Accepting request 144621 from home:cboltz 
- verify tarball with gpg-offline

OBS-URL: https://build.opensuse.org/request/show/144621
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=25
 2012-12-07 16:18:41 +00:00
Christian Boltz
1b9e252479 Accepting request 135892 from home:coolo:branches:openSUSE:Factory 
- fix directory flags for /etc/apparmor.d to be in sync between
  -parser and -profiles subpackage

OBS-URL: https://build.opensuse.org/request/show/135892
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=23
 2012-09-26 20:23:10 +00:00
Christian Boltz
323716627e Accepting request 135294 from home:cboltz 
- remove %stop_on_removal for no longer existing aaeventd (bnc#781564)
- don't hide TeX output when building the parser and techdoc

OBS-URL: https://build.opensuse.org/request/show/135294
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=22
 2012-09-21 20:10:44 +00:00
Christian Boltz
af841ad5b9 Accepting request 130597 from home:cboltz 
- clear and update inconsistent profile cache (bnc#774529)
- fix wording in two older .changes entries (usrMove -> usrMerge)

OBS-URL: https://build.opensuse.org/request/show/130597
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=20
 2012-08-10 10:37:26 +00:00
Christian Boltz
6fcab6dcf9 Accepting request 130008 from home:cboltz 
- abstractions/bash: update /bin/ls to also match /usr/bin/ls (usrMove)

OBS-URL: https://build.opensuse.org/request/show/130008
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=18
 2012-08-05 16:14:12 +00:00
Christian Boltz
de0f7c1685 Accepting request 129259 from home:WernerFink:branches:security:apparmor 
- Add required fonts for new TeXLive 2012

OBS-URL: https://build.opensuse.org/request/show/129259
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=16
 2012-07-30 10:20:33 +00:00
Christian Boltz
b13b1cb7a0 Accepting request 127334 from home:cboltz 
- update /bin/ping profile to also match /usr/bin/ping (usrMove)

OBS-URL: https://build.opensuse.org/request/show/127334
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=14
 2012-07-06 22:51:54 +00:00
Christian Boltz
142cd0f4ac Accepting request 123313 from home:cboltz 
- update to AppArmor 2.8.0 (= r2047)
  - new utility aa-easyprof - templated profile generation tool (the resulting
    profile may be less strict than profiles generated with genprof/logprof)
  - various small bugfixes
- removed upstreamed patches

OBS-URL: https://build.opensuse.org/request/show/123313
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=12
 2012-06-02 21:50:07 +00:00
Christian Boltz
0237c25017 Accepting request 116784 from home:cboltz 
- add apparmor-techdoc.patch to remove traces of the build time in PDF files

- update to AppArmor 2.8 beta5 (= 2.7.103 / r2031)
  - new utility aa-exec to confine a program with the specified AppArmor profile
  - add support for mount rules
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8 for full upstream
    changelog
- removed upstreamed and backported patches
- remove outdated autobuild and "disable repo" patches that were disabled since
  the AppArmor 2.7 package
- create the Immunix::SubDomain compat perl module only for openSUSE <= 12.1
  (bnc#720617 #c7)

OBS-URL: https://build.opensuse.org/request/show/116784
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=10
 2012-05-08 20:39:34 +00:00