[ubuntu/plucky-proposed] apparmor 4.1.0~beta5-0ubuntu14.1 (Accepted)

[Ryan Lee]

apparmor (4.1.0~beta5-0ubuntu14.1) plucky; urgency=medium

  * This is an SRU from Questing to Plucky, tracked in LP: #2110236
  * Add patch to allow unprivileged_userns access to root dir
    (LP: #2110616):
    - d/p/u/unprivileged_userns_rootdir.patch
  * Add patch to fix lsblk accesses on IBM System Z systems (LP: #2107402)
    and execution from a confined context (LP: #2107455):
    - d/p/u/lsblk-s390-fixes.patch
  * Add patch to fix execution of various commands from confined contexts
    (LP: #2110628):
    - d/p/u/profiles_ensure_access_to_attach_path.patch
  * Add patch to include new QtWebEngineProcess execution path in
    plasmashell profile (LP: #2107723):
    - d/p/u/plasmashell-QtWebEngineProcess-new-path.patch
  * Add patch to allow /cvmfs fusermounts (LP: #2110624):
    - d/p/u/fusermount3_cvmfs.patch
  * Add patch to grant OpenVPN DNS accesses (LP: #2107596, LP: #2109029):
    - d/p/u/openvpn_dnsfix.patch
  * Add patch to expand allowed fusermount3 flags for fuse_overlayfs and
    sshfs via fstab (LP: #2110626, LP: #2111807):
    - d/p/u/fusermount3_allow_more_flags.patch
  * Add patch to fix permission denials for iotop-c (LP: #2107727):
    - d/p/u/profiles-give-iotop-c-additional-accesses.patch
  * Add patch to fix parser handling of norelatime mount flag
    (LP: #2110688):
    - d/p/u/parser-fix-handling-of-norelatime-mount-rule-flag.patch
  * Add patch to fix incorrect mount rule documentation in the apparmor.d
    man page (LP: #2110630):
    - d/p/u/fix-incorrect-mount-flag-apparmor.d-docs.patch
  * Add patch to add regression tests for the above two patches:
    - d/p/u/regression-verify-documented-mount-flag-behavior.patch
  * d/p/u/remmina_mr_1348.patch, d/p/u/remmina-dbus-describeall.patch:
    move the remmina profile to profiles/apparmor/profiles/extras to
    disable it by default (LP: #2102033)
  * debian/apparmor.install: remove the remmina profile entry
  * debian/apparmor-profiles.install: add an entry for the remmina profile
  * debian/apparmor.maintscript: remove the remmina profile upon upgrade

Date: Wed, 27 May 2025 11:29:02 -0700
Changed-By: Ryan Lee <ryan.lee at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/apparmor/4.1.0~beta5-0ubuntu14.1
-------------- next part --------------
Format: 1.8
Date: Wed, 27 May 2025 11:29:02 -0700
Source: apparmor
Built-For-Profiles: noudeb
Architecture: source
Version: 4.1.0~beta5-0ubuntu14.1
Distribution: plucky
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Ryan Lee <ryan.lee at canonical.com>
Launchpad-Bugs-Fixed: 2102033 2107402 2107455 2107596 2107723 2107727 2109029 2110236 2110616 2110624 2110626 2110628 2110630 2110688 2111807
Changes:
 apparmor (4.1.0~beta5-0ubuntu14.1) plucky; urgency=medium
 .
   * This is an SRU from Questing to Plucky, tracked in LP: #2110236
   * Add patch to allow unprivileged_userns access to root dir
     (LP: #2110616):
     - d/p/u/unprivileged_userns_rootdir.patch
   * Add patch to fix lsblk accesses on IBM System Z systems (LP: #2107402)
     and execution from a confined context (LP: #2107455):
     - d/p/u/lsblk-s390-fixes.patch
   * Add patch to fix execution of various commands from confined contexts
     (LP: #2110628):
     - d/p/u/profiles_ensure_access_to_attach_path.patch
   * Add patch to include new QtWebEngineProcess execution path in
     plasmashell profile (LP: #2107723):
     - d/p/u/plasmashell-QtWebEngineProcess-new-path.patch
   * Add patch to allow /cvmfs fusermounts (LP: #2110624):
     - d/p/u/fusermount3_cvmfs.patch
   * Add patch to grant OpenVPN DNS accesses (LP: #2107596, LP: #2109029):
     - d/p/u/openvpn_dnsfix.patch
   * Add patch to expand allowed fusermount3 flags for fuse_overlayfs and
     sshfs via fstab (LP: #2110626, LP: #2111807):
     - d/p/u/fusermount3_allow_more_flags.patch
   * Add patch to fix permission denials for iotop-c (LP: #2107727):
     - d/p/u/profiles-give-iotop-c-additional-accesses.patch
   * Add patch to fix parser handling of norelatime mount flag
     (LP: #2110688):
     - d/p/u/parser-fix-handling-of-norelatime-mount-rule-flag.patch
   * Add patch to fix incorrect mount rule documentation in the apparmor.d
     man page (LP: #2110630):
     - d/p/u/fix-incorrect-mount-flag-apparmor.d-docs.patch
   * Add patch to add regression tests for the above two patches:
     - d/p/u/regression-verify-documented-mount-flag-behavior.patch
   * d/p/u/remmina_mr_1348.patch, d/p/u/remmina-dbus-describeall.patch:
     move the remmina profile to profiles/apparmor/profiles/extras to
     disable it by default (LP: #2102033)
   * debian/apparmor.install: remove the remmina profile entry
   * debian/apparmor-profiles.install: add an entry for the remmina profile
   * debian/apparmor.maintscript: remove the remmina profile upon upgrade
Checksums-Sha1:
 e9e184d49e7c636a9984218de522902ea1780cf4 3770 apparmor_4.1.0~beta5-0ubuntu14.1.dsc
 a8da0ea6fc984bdabd98d6c788d1484576a3d5cc 135256 apparmor_4.1.0~beta5-0ubuntu14.1.debian.tar.xz
 e0b0bd5f2715065fe94626b9c599625bfff28e1a 9606 apparmor_4.1.0~beta5-0ubuntu14.1_source.buildinfo
Checksums-Sha256:
 ce62afa75a47ac3eb6ed396b0826baea0b0d1a71820ebb310fbf129fc150c719 3770 apparmor_4.1.0~beta5-0ubuntu14.1.dsc
 777ad72756a7c285eb8ffcf2d6d543fc6ddb49a5a9387fc31b32f06d87ab2fc3 135256 apparmor_4.1.0~beta5-0ubuntu14.1.debian.tar.xz
 25bf34f49085421c4547a604713484b8a339a4f6bfb1417a9183313d45c7685e 9606 apparmor_4.1.0~beta5-0ubuntu14.1_source.buildinfo
Files:
 21022b72ac78bbab3dade09029b55ac3 3770 admin optional apparmor_4.1.0~beta5-0ubuntu14.1.dsc
 97eb3280e70f8992645393d01dfe2a6c 135256 admin optional apparmor_4.1.0~beta5-0ubuntu14.1.debian.tar.xz
 643b600e56f6167a6a82890378d8eb66 9606 admin optional apparmor_4.1.0~beta5-0ubuntu14.1_source.buildinfo
Original-Maintainer: Debian AppArmor Team <pkg-apparmor-team at lists.alioth.debian.org>