7823513103
- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff OBS-URL: https://build.opensuse.org/request/show/560016 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=194
26 lines
783 B
Desktop File
26 lines
783 B
Desktop File
[Unit]
|
|
Description=Load AppArmor profiles
|
|
DefaultDependencies=no
|
|
Before=sysinit.target
|
|
After=systemd-journald-audit.socket
|
|
After=var.mount var-lib.mount
|
|
ConditionSecurity=apparmor
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=/lib/apparmor/apparmor.systemd reload
|
|
ExecReload=/lib/apparmor/apparmor.systemd reload
|
|
|
|
# systemd maps 'restart' to 'stop; start' which means removing AppArmor confinement
|
|
# from running processes (and not being able to re-apply it later).
|
|
# Upstream systemd developers refused to implement an option that allows overriding
|
|
# this behaviour, therefore we have to make ExecStop a no-op to error out on the
|
|
# safe side.
|
|
#
|
|
# If you really want to unload all AppArmor profiles, run aa-teardown
|
|
ExecStop=/bin/true
|
|
RemainAfterExit=yes
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|