Revisions of apparmor

Ludwig Nussel's avatar Ludwig Nussel (lnussel) committed (revision 11)
vrev freeze
Ludwig Nussel's avatar Ludwig Nussel (lnussel) committed (revision 10)
vrev bump
Yuchen Lin's avatar Yuchen Lin (maxlin_factory) accepted request 435010 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 9)
- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile
Yuchen Lin's avatar Yuchen Lin (maxlin_factory) accepted request 423557 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 8)
- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests

- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)
Ludwig Nussel's avatar Ludwig Nussel (lnussel_factory) accepted request 394420 from Ludwig Nussel's avatar Ludwig Nussel (lnussel) (revision 7)
Automatic request from openSUSE:Leap:42.1:Update by UpdateCrawler
Adrian Schröter's avatar Adrian Schröter (adrianSuSE) committed (revision 6)
fork from 42.1
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 337048 from Christian Boltz's avatar Christian Boltz (cboltz) (revision 5)
- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)


Note: this is identical with SR 337047 (to Factory).
I'm doing a direct SR from the devel project to reduce delays.
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 333326 from Stephan Kulow's avatar Stephan Kulow (coolo) (revision 4)
Automatic request from openSUSE:Factory by UpdateCrawler
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 331402 from Stephan Kulow's avatar Stephan Kulow (coolo) (revision 3)
- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)
- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)
- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff
- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)

- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
Stephan Kulow's avatar Stephan Kulow (coolo) committed (revision 2)
vrev bump
Stephan Kulow's avatar Stephan Kulow (coolo) committed (revision 1)
osc copypac from project:SUSE:SLE-12:Update package:apparmor.155 revision:4dced6aa36bc4af9be91e767c6c88310, using expand
Displaying all 11 revisions
openSUSE Build Service is sponsored by