[ubuntu/saucy-proposed] apparmor-easyprof-ubuntu 1.0.35 (Accepted)

[Jamie Strandboge]

apparmor-easyprof-ubuntu (1.0.35) saucy; urgency=low

  * apparmor-easyprof-ubuntu.install: install data/hardware/*, thus allowing
    porters, OEMs, etc to ship their own policy without having to modify this
    package (LP: #1197133)
  * add data/hardware/graphics.d/* and data/hardware/audio.d/*, namespaced to
    this package. We will move these out to lxc-android-config later
  * tests/test-data.py: adjust to test data/hardware/*
  * accounts: move to reserved status until LP: 1230091 is fixed
  * calendar: remove workaround rule for gio DBus path (LP: #1227295)
  * add usermetrics policy group so apps can update the infographic
  * ubuntu-* templates:
    - allow StartServiceByName on the system bus too. This is needed by the
      new usermetrics policy group and we will presumably have more going
      forward (eg location)
    - account for /org/freedesktop/dbus object path. This seems to be used by
      the python DBus bindings (eg, friends)
    - move hardware specific accesses out of the templates into
      hardware/graphics.d/ in preparation of the move to shipping these in
      lxc-android-config (note, this doesn't change apparmor policy in any
      way)
    - add 'r' to dbus system bus socket (LP: #1208988)
    - add ixr access to thumbnailer helper (LP: #1234543)
    - finetune HUD access
    - don't use ibus abstraction but instead use 'r' access for
      owner @{HOME}/.config/ibus/**
    - don't use freedesktop.org abstraction but instead add read accesses
      for /usr/share/icons and various mime files
    - updates for new gstreamer
      - move in gstreamer accesses from audio policy groupd due to hybris
  * ubuntu-sdk template:
    - remove workaround paths now that ubuntu-ui-toolkit is using
      QCoreApplication::applicationName based on MainView's applicationName
      (LP: #1197056, #1197051, #1224126, LP: #1231863)
  * ubuntu-webapp template:
    - allow read access to /usr/share/unity-webapps/userscripts/**
    - allow rix to gst-plugin-scanner
  * add reserved friends policy group (reserved because it needs integration
    with trust-store to be used by untrusted apps)
  * remove peer from receive DBus rules in the ubuntu-* templates and the
    contacts, history, and location policy groups (LP: #1233895)
  * audio:
    - move gstreamer stuff out to templates since hybris pulls it in for all
      apps
    - include hardware/audio.d for hardware specific accesses

Date: Mon, 07 Oct 2013 13:18:27 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
https://launchpad.net/ubuntu/saucy/+source/apparmor-easyprof-ubuntu/1.0.35
-------------- next part --------------
Format: 1.8
Date: Mon, 07 Oct 2013 13:18:27 -0500
Source: apparmor-easyprof-ubuntu
Binary: apparmor-easyprof-ubuntu
Architecture: source
Version: 1.0.35
Distribution: saucy
Urgency: low
Maintainer: Jamie Strandboge <jamie at ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 apparmor-easyprof-ubuntu - AppArmor easyprof templates for Ubuntu
Launchpad-Bugs-Fixed: 1197051 1197056 1197133 1208988 1224126 1227295 1231863 1233895 1234543
Changes: 
 apparmor-easyprof-ubuntu (1.0.35) saucy; urgency=low
 .
   * apparmor-easyprof-ubuntu.install: install data/hardware/*, thus allowing
     porters, OEMs, etc to ship their own policy without having to modify this
     package (LP: #1197133)
   * add data/hardware/graphics.d/* and data/hardware/audio.d/*, namespaced to
     this package. We will move these out to lxc-android-config later
   * tests/test-data.py: adjust to test data/hardware/*
   * accounts: move to reserved status until LP: 1230091 is fixed
   * calendar: remove workaround rule for gio DBus path (LP: #1227295)
   * add usermetrics policy group so apps can update the infographic
   * ubuntu-* templates:
     - allow StartServiceByName on the system bus too. This is needed by the
       new usermetrics policy group and we will presumably have more going
       forward (eg location)
     - account for /org/freedesktop/dbus object path. This seems to be used by
       the python DBus bindings (eg, friends)
     - move hardware specific accesses out of the templates into
       hardware/graphics.d/ in preparation of the move to shipping these in
       lxc-android-config (note, this doesn't change apparmor policy in any
       way)
     - add 'r' to dbus system bus socket (LP: #1208988)
     - add ixr access to thumbnailer helper (LP: #1234543)
     - finetune HUD access
     - don't use ibus abstraction but instead use 'r' access for
       owner @{HOME}/.config/ibus/**
     - don't use freedesktop.org abstraction but instead add read accesses
       for /usr/share/icons and various mime files
     - updates for new gstreamer
       - move in gstreamer accesses from audio policy groupd due to hybris
   * ubuntu-sdk template:
     - remove workaround paths now that ubuntu-ui-toolkit is using
       QCoreApplication::applicationName based on MainView's applicationName
       (LP: #1197056, #1197051, #1224126, LP: #1231863)
   * ubuntu-webapp template:
     - allow read access to /usr/share/unity-webapps/userscripts/**
     - allow rix to gst-plugin-scanner
   * add reserved friends policy group (reserved because it needs integration
     with trust-store to be used by untrusted apps)
   * remove peer from receive DBus rules in the ubuntu-* templates and the
     contacts, history, and location policy groups (LP: #1233895)
   * audio:
     - move gstreamer stuff out to templates since hybris pulls it in for all
       apps
     - include hardware/audio.d for hardware specific accesses
Checksums-Sha1: 
 ecbc88ea548983f1509a15fc345ce9603cfbb6a5 1510 apparmor-easyprof-ubuntu_1.0.35.dsc
 68fc622136899b530e512da5eb2d86cefc1b6683 18005 apparmor-easyprof-ubuntu_1.0.35.tar.gz
Checksums-Sha256: 
 b6ff42b9a42760938ea1ac85c6658a3b4f3913545ff2802c946ce0f6535c1a54 1510 apparmor-easyprof-ubuntu_1.0.35.dsc
 d417b69176556dc8a7d56b0d9ddec92aa510a6a6da8afab85e5da9c644e9276d 18005 apparmor-easyprof-ubuntu_1.0.35.tar.gz
Files: 
 6e44f1c720cd08615e90326aa7993dbd 1510 admin optional apparmor-easyprof-ubuntu_1.0.35.dsc
 90b4438536dfd8ed67459b9fb3e3a821 18005 admin optional apparmor-easyprof-ubuntu_1.0.35.tar.gz