[ubuntu/groovy-proposed] apparmor 3.0.0~beta1-0ubuntu5 (Accepted)

Alex Murray alex.murray at canonical.com
Mon Sep 21 15:13:13 UTC 2020


apparmor (3.0.0~beta1-0ubuntu5) groovy; urgency=medium

  [ John Johansen ]
  * d/p/fix-parser-to-emit-proc-attr-access-for-all-situations.patch:
    fix-automatic-adding-of-rule-for-change-hat-iface.patch fixed the
    parser to emit rules needed for change_hat in the hat profiles but
    broke the rule being emitted for the parent profile, this fixes it for
    both so that it is emitted for any profile that is a hat or that
    contains a hat.
  * d/p/fix-change-profile-stack-abstraction.patch: fix the change_profile
    abstraction so that it allows access to the apparmor attribute paths
    under LSM stacking.

apparmor (3.0.0~beta1-0ubuntu2) groovy; urgency=medium

  [ John Johansen ]
  * d/p/fix-automatic-adding-of-rule-for-change-hat-iface.patch: fix
    parser not adding a rule to profiles if they are a hat or contain hats
    granting write access to the kernel interfaces.

apparmor (3.0.0~beta1-0ubuntu1) groovy; urgency=medium

  [ John Johansen ]
  * New upstream release (LP: #1895060, LP: #1887577, LP: #1880841)
  * Drop all patches backported from upstream: applied in 3.0
  * d/p/policy-provide-example-and-base-abi-to-pin-pre-3.0-p.patch: provide
    example and base abi to pin pre 3.0 policy
  * d/p/ubuntu/enable-pinning-of-pre-AppArmor-3.x-poli.patch: enable pinning
    of pre AppArmor 3.x policy
  * drop d/p/debian/dont-include-site-local-with-dovecot.patch: no longer
    needed with upstream 'include if exists'

  [ Steve Beattie ]
  * d/p/parser-fix_cap_match.patch: fix cap match to work correctly, important
    now that groovy has a 5.8 kernel.
  * d/apparmor-profiles.install:
    + adjust for renamed postfix profiles
    + add usr.bin.dumpcap and usr.bin.mlmmj-receive to extra-profiles
    + remove usr.sbin.nmbd and usr.sbin.smbd from extra-profiles (already in
      apparmor-profiles)
  * d/apparmor.install: include abi/ directory and tunables/etc.
  * d/apparmor.manpages: add apparmor_xattrs.7 manpage
  * d/control:
    + apparmor-utils: no more shipped perl tools, drop perl dependency
    + apparmor-notify: aa-notify was converted to python3 from perl; adjust
      -notify dependencies to compensate
  * d/p/fix-tests-regression-apparmor-prologue-inc-settest.patch:
    fix sed expression in settest()

  [ Emilia Torino ]
  * Removing Ubuntu specific chromium-browser profile. This is safe to do
    since groovy's chromium-browser deb installs the snap. If apparmor3
    is backported to 18.04 or earlier, the profile will need to be taken
    into consideration
    - d/profiles/chromium-browser: remove chromium-browser profile
    - d/apparmor-profiles.postinst: remove postinst script as it only
      contains chromium-browser related functionallity.
    - d/apparmor-profiles.postrm: remove postrm script as it only
      contains chromium-browser related functionallity.
    - d/apparmor-profiles.install: remove ubuntu-specific
      chromium-browser abstraction and profile
    - d/apparmor-profiles.lintian-overrides: remove chromium-browser
      profile lintian overrides
    - d/p/ubuntu/add-chromium-browser.patch: remove patch which added
      chrome-browser

  [ Alex Murray ]
  * d/p/policy-provide-example-and-base-abi-to-pin-pre-3.0-p.patch: refresh
    this patch with the official upstream version
  * d/p/ubuntu/enable-pinning-of-pre-AppArmor-3.x-poli.patch: refresh this
    patch to match the above
  * d/p/parser-add-abi-warning-flags.patch: enable parser warnings
    to be silenced or to be treated as errors

  [ Jamie Strandboge ]
  * d/p/adjust-for-ibus-1.5.22.patch: update ibus abstract path for ibus
    1.5.22. This can be dropped with AppArmor 3.0 final.
  * d/p/parser-add-abi-warning-flags.patch: refresh to avoid lintian warnings
  * d/p/ubuntu/lp1891338.patch: adjust ubuntu-integration to use
    abstractions/exo-open (LP: #1891338)
  * d/p/ubuntu/lp1889699.patch: adjust to support brave in ubuntu
    abstractions. Patch thanks to Fran├žois Marier (LP: #1889699)
  * d/p/ubuntu/lp1881357.patch: adjust for new ICEauthority path in /run
    (LP: #1881357)

Date: Fri, 18 Sep 2020 11:58:59 +0930
Changed-By: Alex Murray <alex.murray at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Jamie Strandboge <jamie at ubuntu.com>
https://launchpad.net/ubuntu/+source/apparmor/3.0.0~beta1-0ubuntu5
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 18 Sep 2020 11:58:59 +0930
Source: apparmor
Architecture: source
Version: 3.0.0~beta1-0ubuntu5
Distribution: groovy
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Alex Murray <alex.murray at canonical.com>
Launchpad-Bugs-Fixed: 1880841 1881357 1887577 1889699 1891338 1895060
Changes:
 apparmor (3.0.0~beta1-0ubuntu5) groovy; urgency=medium
 .
   [ John Johansen ]
   * d/p/fix-parser-to-emit-proc-attr-access-for-all-situations.patch:
     fix-automatic-adding-of-rule-for-change-hat-iface.patch fixed the
     parser to emit rules needed for change_hat in the hat profiles but
     broke the rule being emitted for the parent profile, this fixes it for
     both so that it is emitted for any profile that is a hat or that
     contains a hat.
   * d/p/fix-change-profile-stack-abstraction.patch: fix the change_profile
     abstraction so that it allows access to the apparmor attribute paths
     under LSM stacking.
 .
 apparmor (3.0.0~beta1-0ubuntu2) groovy; urgency=medium
 .
   [ John Johansen ]
   * d/p/fix-automatic-adding-of-rule-for-change-hat-iface.patch: fix
     parser not adding a rule to profiles if they are a hat or contain hats
     granting write access to the kernel interfaces.
 .
 apparmor (3.0.0~beta1-0ubuntu1) groovy; urgency=medium
 .
   [ John Johansen ]
   * New upstream release (LP: #1895060, LP: #1887577, LP: #1880841)
   * Drop all patches backported from upstream: applied in 3.0
   * d/p/policy-provide-example-and-base-abi-to-pin-pre-3.0-p.patch: provide
     example and base abi to pin pre 3.0 policy
   * d/p/ubuntu/enable-pinning-of-pre-AppArmor-3.x-poli.patch: enable pinning
     of pre AppArmor 3.x policy
   * drop d/p/debian/dont-include-site-local-with-dovecot.patch: no longer
     needed with upstream 'include if exists'
 .
   [ Steve Beattie ]
   * d/p/parser-fix_cap_match.patch: fix cap match to work correctly, important
     now that groovy has a 5.8 kernel.
   * d/apparmor-profiles.install:
     + adjust for renamed postfix profiles
     + add usr.bin.dumpcap and usr.bin.mlmmj-receive to extra-profiles
     + remove usr.sbin.nmbd and usr.sbin.smbd from extra-profiles (already in
       apparmor-profiles)
   * d/apparmor.install: include abi/ directory and tunables/etc.
   * d/apparmor.manpages: add apparmor_xattrs.7 manpage
   * d/control:
     + apparmor-utils: no more shipped perl tools, drop perl dependency
     + apparmor-notify: aa-notify was converted to python3 from perl; adjust
       -notify dependencies to compensate
   * d/p/fix-tests-regression-apparmor-prologue-inc-settest.patch:
     fix sed expression in settest()
 .
   [ Emilia Torino ]
   * Removing Ubuntu specific chromium-browser profile. This is safe to do
     since groovy's chromium-browser deb installs the snap. If apparmor3
     is backported to 18.04 or earlier, the profile will need to be taken
     into consideration
     - d/profiles/chromium-browser: remove chromium-browser profile
     - d/apparmor-profiles.postinst: remove postinst script as it only
       contains chromium-browser related functionallity.
     - d/apparmor-profiles.postrm: remove postrm script as it only
       contains chromium-browser related functionallity.
     - d/apparmor-profiles.install: remove ubuntu-specific
       chromium-browser abstraction and profile
     - d/apparmor-profiles.lintian-overrides: remove chromium-browser
       profile lintian overrides
     - d/p/ubuntu/add-chromium-browser.patch: remove patch which added
       chrome-browser
 .
   [ Alex Murray ]
   * d/p/policy-provide-example-and-base-abi-to-pin-pre-3.0-p.patch: refresh
     this patch with the official upstream version
   * d/p/ubuntu/enable-pinning-of-pre-AppArmor-3.x-poli.patch: refresh this
     patch to match the above
   * d/p/parser-add-abi-warning-flags.patch: enable parser warnings
     to be silenced or to be treated as errors
 .
   [ Jamie Strandboge ]
   * d/p/adjust-for-ibus-1.5.22.patch: update ibus abstract path for ibus
     1.5.22. This can be dropped with AppArmor 3.0 final.
   * d/p/parser-add-abi-warning-flags.patch: refresh to avoid lintian warnings
   * d/p/ubuntu/lp1891338.patch: adjust ubuntu-integration to use
     abstractions/exo-open (LP: #1891338)
   * d/p/ubuntu/lp1889699.patch: adjust to support brave in ubuntu
     abstractions. Patch thanks to Fran├žois Marier (LP: #1889699)
   * d/p/ubuntu/lp1881357.patch: adjust for new ICEauthority path in /run
     (LP: #1881357)
Checksums-Sha1:
 610af1a3126e46c10de266ff55cad82203da0abb 3346 apparmor_3.0.0~beta1-0ubuntu5.dsc
 80f0db9c0ae993a5d0dec34a119d32b7428a8f49 7789867 apparmor_3.0.0~beta1.orig.tar.gz
 6a3d4c38ff9c933265b3148354411cc79ff16831 99748 apparmor_3.0.0~beta1-0ubuntu5.debian.tar.xz
 3c38983fc0b5efa36534633bd7f76328c6968069 8546 apparmor_3.0.0~beta1-0ubuntu5_source.buildinfo
Checksums-Sha256:
 466d8fa688bfcd5168183a648f92bde30d1b751853b7c9a14c5daff34a3cba69 3346 apparmor_3.0.0~beta1-0ubuntu5.dsc
 4d4b3c5f4c14f513fa0f7be83c38140b7e3aecf80d38e72f572dbe5f7de4af86 7789867 apparmor_3.0.0~beta1.orig.tar.gz
 a1a050b7c94c59e63bacab699a551e12e11e8535f3ed3d03adb6de2d9300b27b 99748 apparmor_3.0.0~beta1-0ubuntu5.debian.tar.xz
 27fd5466f45f157a5b977cc97345836719f45eb1df0dbb5304215b565c7c38df 8546 apparmor_3.0.0~beta1-0ubuntu5_source.buildinfo
Files:
 8e2e0607429d6c502d176abc99fb2857 3346 admin optional apparmor_3.0.0~beta1-0ubuntu5.dsc
 e8836e789fd45946753a29ba8572df9a 7789867 admin optional apparmor_3.0.0~beta1.orig.tar.gz
 c1490b1dac13f130165fec9a7b5dab4b 99748 admin optional apparmor_3.0.0~beta1-0ubuntu5.debian.tar.xz
 7981981deda3229eb3a8d6d8bf6ceaa5 8546 admin optional apparmor_3.0.0~beta1-0ubuntu5_source.buildinfo
Original-Maintainer: Debian AppArmor Team <pkg-apparmor-team at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
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=scZP
-----END PGP SIGNATURE-----


More information about the Groovy-changes mailing list