[ubuntu/saucy-proposed] apparmor 2.8.0-0ubuntu25 (Accepted)
Tyler Hicks
tyhicks at canonical.com
Tue Aug 27 19:53:15 UTC 2013
apparmor (2.8.0-0ubuntu25) saucy; urgency=low
[ Tyler Hicks ]
* Add support for mediation of D-Bus messages and services. AppArmor D-Bus
rules are described in the apparmor.d(5) man page. dbus-daemon will use
libapparmor to perform queries against the AppArmor policies to determine
if a connection should be able to send messages to another connection, if
a connection should be able to receive messages from another connection,
and if a connection should be able to bind to a well-known name.
- 0042-Fix-mount-rule-preprocessor-output.patch,
0043-libapparmor-Safeguard-aa_getpeercon-buffer-reallocat.patch,
0044-libapparmor-fix-return-value-of-aa_getpeercon_raw.patch,
0045-libapparmor-Move-mode-parsing-into-separate-function.patch,
0046-libapparmor-Parse-mode-from-confinement-string-in-ge.patch,
0047-libapparmor-Make-aa_getpeercon_raw-similar-to-aa_get.patch,
0048-libapparmor-Update-aa_getcon-man-page-to-reflect-get.patch:
Backport parser and libapparmor pre-requisites for D-Bus mediation
- 0049-parser-Update-man-page-for-DBus-rules.patch: Update apparmor.d man
page
- 0050-parser-Add-support-for-DBus-rules.patch,
0051-parser-Regression-tests-for-DBus-rules.patch,
0052-parser-Binary-profile-equality-tests-for-DBus-rules.patch: Add
apparmor_parser support for D-Bus mediation rules
- 0053-libapparmor-Export-a-label-based-query-interface.patch,
debian/libapparmor1.symbols: Provide the libapparmor interface necessary
for trusted helpers to make security decisions based upon AppArmor
policy
- 0054-libaalogparse-Parse-dbus-daemon-audit-messages.patch,
0055-libaalogparse-Regression-tests-for-dbus-daemon-audit.patch: Allow
applications to parse denials, generated by dbus-daemon, using
libaalogparse and add a set of regression tests
- 0056-tests-Add-an-optional-final-check-to-checktestfg.patch,
0057-tests-Add-required-features-check.patch,
0058-tests-Add-regression-tests-for-dbus.patch: Add regression tests
which start their own dbus-daemon, load profiles containing D-Bus rules,
and confine simple D-Bus service and client applications
- 0059-dbus-rules-for-dbus-abstractions.patch: Add bus-specific, but
otherwise permissive, D-Bus rules to the dbus and dbus-session
abstractions. Confined applications that use D-Bus should already be
including these abstractions in their profiles so this should be a
seamless transition for those profiles.
* 0060-utils-make_clean_fixup.patch: Clean up the Python cache in the
AppArmor tests directory
* 0061-profiles-dnsmasq-needs-dbus-abstraction.patch: Dnsmasq uses the
system D-Bus when it is started with --enable-dbus, so its AppArmor
profile needs to include the system bus abstraction
* 0062-fix-clone-test-on-arm.patch: Fix compiler error when building
regression tests on ARM
* 0063-utils-ignore-unsupported-rules.patch: Utilities that use the
Immunix::AppArmor perl module, such as aa-logprof and aa-genprof, error
out when they encounter rules unsupported by the perl module. This patch
ignores unsupported rules.
[ Jamie Strandboge ]
* debian/control: don't have easyprof Depends on apparmor-easyprof-ubuntu
Date: Mon, 26 Aug 2013 15:32:12 -0700
Changed-By: Tyler Hicks <tyhicks at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Jamie Strandboge <jamie at ubuntu.com>
https://launchpad.net/ubuntu/saucy/+source/apparmor/2.8.0-0ubuntu25
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 26 Aug 2013 15:32:12 -0700
Source: apparmor
Binary: apparmor apparmor-utils apparmor-profiles apparmor-docs libapparmor-dev libapparmor1 libapparmor-perl libapache2-mod-apparmor libpam-apparmor apparmor-notify python-libapparmor python3-libapparmor dh-apparmor apparmor-easyprof
Architecture: source
Version: 2.8.0-0ubuntu25
Distribution: saucy
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Tyler Hicks <tyhicks at canonical.com>
Description:
apparmor - User-space parser utility for AppArmor
apparmor-docs - Documentation for AppArmor
apparmor-easyprof - AppArmor easyprof profiling tool
apparmor-notify - AppArmor notification system
apparmor-profiles - Profiles for AppArmor Security policies
apparmor-utils - Utilities for controlling AppArmor
dh-apparmor - AppArmor debhelper routines
libapache2-mod-apparmor - changehat AppArmor library as an Apache module
libapparmor-dev - AppArmor development libraries and header files
libapparmor-perl - AppArmor library Perl bindings
libapparmor1 - changehat AppArmor library
libpam-apparmor - changehat AppArmor library as a PAM module
python-libapparmor - AppArmor library Python bindings
python3-libapparmor - AppArmor library Python3 bindings
Changes:
apparmor (2.8.0-0ubuntu25) saucy; urgency=low
.
[ Tyler Hicks ]
* Add support for mediation of D-Bus messages and services. AppArmor D-Bus
rules are described in the apparmor.d(5) man page. dbus-daemon will use
libapparmor to perform queries against the AppArmor policies to determine
if a connection should be able to send messages to another connection, if
a connection should be able to receive messages from another connection,
and if a connection should be able to bind to a well-known name.
- 0042-Fix-mount-rule-preprocessor-output.patch,
0043-libapparmor-Safeguard-aa_getpeercon-buffer-reallocat.patch,
0044-libapparmor-fix-return-value-of-aa_getpeercon_raw.patch,
0045-libapparmor-Move-mode-parsing-into-separate-function.patch,
0046-libapparmor-Parse-mode-from-confinement-string-in-ge.patch,
0047-libapparmor-Make-aa_getpeercon_raw-similar-to-aa_get.patch,
0048-libapparmor-Update-aa_getcon-man-page-to-reflect-get.patch:
Backport parser and libapparmor pre-requisites for D-Bus mediation
- 0049-parser-Update-man-page-for-DBus-rules.patch: Update apparmor.d man
page
- 0050-parser-Add-support-for-DBus-rules.patch,
0051-parser-Regression-tests-for-DBus-rules.patch,
0052-parser-Binary-profile-equality-tests-for-DBus-rules.patch: Add
apparmor_parser support for D-Bus mediation rules
- 0053-libapparmor-Export-a-label-based-query-interface.patch,
debian/libapparmor1.symbols: Provide the libapparmor interface necessary
for trusted helpers to make security decisions based upon AppArmor
policy
- 0054-libaalogparse-Parse-dbus-daemon-audit-messages.patch,
0055-libaalogparse-Regression-tests-for-dbus-daemon-audit.patch: Allow
applications to parse denials, generated by dbus-daemon, using
libaalogparse and add a set of regression tests
- 0056-tests-Add-an-optional-final-check-to-checktestfg.patch,
0057-tests-Add-required-features-check.patch,
0058-tests-Add-regression-tests-for-dbus.patch: Add regression tests
which start their own dbus-daemon, load profiles containing D-Bus rules,
and confine simple D-Bus service and client applications
- 0059-dbus-rules-for-dbus-abstractions.patch: Add bus-specific, but
otherwise permissive, D-Bus rules to the dbus and dbus-session
abstractions. Confined applications that use D-Bus should already be
including these abstractions in their profiles so this should be a
seamless transition for those profiles.
* 0060-utils-make_clean_fixup.patch: Clean up the Python cache in the
AppArmor tests directory
* 0061-profiles-dnsmasq-needs-dbus-abstraction.patch: Dnsmasq uses the
system D-Bus when it is started with --enable-dbus, so its AppArmor
profile needs to include the system bus abstraction
* 0062-fix-clone-test-on-arm.patch: Fix compiler error when building
regression tests on ARM
* 0063-utils-ignore-unsupported-rules.patch: Utilities that use the
Immunix::AppArmor perl module, such as aa-logprof and aa-genprof, error
out when they encounter rules unsupported by the perl module. This patch
ignores unsupported rules.
.
[ Jamie Strandboge ]
* debian/control: don't have easyprof Depends on apparmor-easyprof-ubuntu
Checksums-Sha1:
f13c8d41dacada21b400046d7f1be043281e3b9e 2835 apparmor_2.8.0-0ubuntu25.dsc
0be399084c99b7bf0ebf05f0c06c7b0ad76d1bbb 152849 apparmor_2.8.0-0ubuntu25.debian.tar.gz
Checksums-Sha256:
ffc8c66916c0820dd8045963362879189f1b5f15626c8e5df4bcf7e7cf9d0e80 2835 apparmor_2.8.0-0ubuntu25.dsc
4cdb802827108d2eb1c16b4ef006c9abaefae19103f7cc0dadd3bf15543d2a46 152849 apparmor_2.8.0-0ubuntu25.debian.tar.gz
Files:
af7ef3be125023ad158acdff6c58bb2b 2835 admin extra apparmor_2.8.0-0ubuntu25.dsc
28acc8571838d3144fe10582343e3a81 152849 admin extra apparmor_2.8.0-0ubuntu25.debian.tar.gz
Original-Maintainer: Kees Cook <kees at debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)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=phck
-----END PGP SIGNATURE-----
More information about the Saucy-changes
mailing list