[ubuntu/natty] evince 2.32.0-0ubuntu10 (Accepted)

[Jamie Strandboge]

evince (2.32.0-0ubuntu10) natty; urgency=low

  * debian/apparmor-profile.abstraction: allow read of @{PROC}/[0-9]*/status
  * debian/apparmor*: more strictly confine the thumbnailer, in particular
    with regard to networking (LP: #720961)
    - move a bunch of abstractions from the evince abstraction into the
      evince and evince-previewer profiles
    - move yelp and bug-buddy execs to evince and evince-previewer profiles
    - deny reads to /etc/passwd and /etc/nsswitch.conf. These are caused by
      calls to getuid() and geteuid() from gnome libraries, but the
      thumbnailer doesn't actually need them

Date: Thu, 17 Feb 2011 17:34:12 -0600
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/natty/+source/evince/2.32.0-0ubuntu10
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 17 Feb 2011 17:34:12 -0600
Source: evince
Binary: evince evince-dbg evince-gtk libevview-dev libevview3 libevdocument-dev libevdocument3 evince-common gir1.2-evince-2.32
Architecture: source
Version: 2.32.0-0ubuntu10
Distribution: natty
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 evince     - Document (postscript, pdf) viewer
 evince-common - Document (postscript, pdf) viewer - common files
 evince-dbg - Document (postscript, pdf) viewer - debugging symbols
 evince-gtk - Document (postscript, pdf) viewer (GTK+ version)
 gir1.2-evince-2.32 - GObject introspection data for the libevince library
 libevdocument-dev - GNOME document viewer backend library - development headers
 libevdocument3 - GNOME document viewer backend library
 libevview-dev - GNOME document viewer view library - development headers
 libevview3 - GNOME document viewer view library
Launchpad-Bugs-Fixed: 720961
Changes: 
 evince (2.32.0-0ubuntu10) natty; urgency=low
 .
   * debian/apparmor-profile.abstraction: allow read of @{PROC}/[0-9]*/status
   * debian/apparmor*: more strictly confine the thumbnailer, in particular
     with regard to networking (LP: #720961)
     - move a bunch of abstractions from the evince abstraction into the
       evince and evince-previewer profiles
     - move yelp and bug-buddy execs to evince and evince-previewer profiles
     - deny reads to /etc/passwd and /etc/nsswitch.conf. These are caused by
       calls to getuid() and geteuid() from gnome libraries, but the
       thumbnailer doesn't actually need them
Checksums-Sha1: 
 040516dce59c6258306cb276d772e9bf10a8f09f 2827 evince_2.32.0-0ubuntu10.dsc
 c38dff64730fc1f16b2c6700780e31c5b5c8a31a 31538 evince_2.32.0-0ubuntu10.debian.tar.gz
Checksums-Sha256: 
 366127bf4d296a2d5d19fc17eaacf6c5b5b21f6e9c7572452105ed0ed83e7298 2827 evince_2.32.0-0ubuntu10.dsc
 ec1ca3a828147d6ab27542c812ab513518065fd6e55bf2ecce9bf572c7dddb0f 31538 evince_2.32.0-0ubuntu10.debian.tar.gz
Files: 
 0642484d33648506527284a696ecbf54 2827 gnome optional evince_2.32.0-0ubuntu10.dsc
 c49ce63a6e7b23c04806587dd6d3d8fc 31538 gnome optional evince_2.32.0-0ubuntu10.debian.tar.gz
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=/f7b
-----END PGP SIGNATURE-----