[ubuntu/saucy-proposed] click-apparmor 0.1.10 (Accepted)
Jamie Strandboge
jamie at ubuntu.com
Wed Sep 25 21:52:13 UTC 2013
click-apparmor (0.1.10) saucy; urgency=low
* work around lack of first boot postinst-style code in lxc-android-config
and ship a click-apparmor upstart job. This checks to see if apparmor or
apparmor-easyprof-ubuntu's dpkg md5sums changed, and if so, runs
'aa-clickhook -f'. This allows us to update policy for click packages on
reboot after system-image updates. Note, the click system hooks job is
not enough, because that correctly uses 'aa-clickhook' without arguments.
'aa-clickhook -f' isn't normally needed so this job completes quickly
in typical reboots ('aa-clickhook -f' still only updates the click policy
that is affected). (LP: #1229449)
* don't verify the policy before load. It will error on load which is
equivalent to erroring out before load. This allows us to avoid parsing
policy twice which can save significant time when regenerating lots of
profiles, which is important during first boot after system upgrade
* generated policy should be readable by everyone (the click security
manifests are not private)
* fix default path to apparmor_parser (thus avoiding a needless 'which')
* debian/rules: cleanup .coverage and apparmor/__pycache__
Date: Mon, 23 Sep 2013 14:11:03 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Steve Beattie <steve.beattie at canonical.com>
https://launchpad.net/ubuntu/saucy/+source/click-apparmor/0.1.10
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 23 Sep 2013 14:11:03 -0500
Source: click-apparmor
Binary: click-apparmor python3-apparmor-click
Architecture: source
Version: 0.1.10
Distribution: saucy
Urgency: low
Maintainer: Steve Beattie <steve.beattie at canonical.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description:
click-apparmor - Click manifest to AppArmor easyprof conversion tools
python3-apparmor-click - Click manifest to AppArmor easyprof conversion tools
Launchpad-Bugs-Fixed: 1229449
Changes:
click-apparmor (0.1.10) saucy; urgency=low
.
* work around lack of first boot postinst-style code in lxc-android-config
and ship a click-apparmor upstart job. This checks to see if apparmor or
apparmor-easyprof-ubuntu's dpkg md5sums changed, and if so, runs
'aa-clickhook -f'. This allows us to update policy for click packages on
reboot after system-image updates. Note, the click system hooks job is
not enough, because that correctly uses 'aa-clickhook' without arguments.
'aa-clickhook -f' isn't normally needed so this job completes quickly
in typical reboots ('aa-clickhook -f' still only updates the click policy
that is affected). (LP: #1229449)
* don't verify the policy before load. It will error on load which is
equivalent to erroring out before load. This allows us to avoid parsing
policy twice which can save significant time when regenerating lots of
profiles, which is important during first boot after system upgrade
* generated policy should be readable by everyone (the click security
manifests are not private)
* fix default path to apparmor_parser (thus avoiding a needless 'which')
* debian/rules: cleanup .coverage and apparmor/__pycache__
Checksums-Sha1:
83e3cdbd4f17916bb1607de92ae47c3400442993 1632 click-apparmor_0.1.10.dsc
a35933518f7a656bb7c9a5756f4bf74572115a43 20112 click-apparmor_0.1.10.tar.gz
Checksums-Sha256:
a1fedfbbcababa40d7c5265a9eb2dad34aab63f71b6c12ac2723423228b8ed46 1632 click-apparmor_0.1.10.dsc
3e6e31e49538b7fe7794a25e63d0a5005a2e25b883de966c356a3e851d1ccefa 20112 click-apparmor_0.1.10.tar.gz
Files:
05729a1f166927dcf83fd79ed2657d0c 1632 admin optional click-apparmor_0.1.10.dsc
6cfc1ae6dc4c44740037af1b666fe091 20112 admin optional click-apparmor_0.1.10.tar.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)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=mjes
-----END PGP SIGNATURE-----
More information about the Saucy-changes
mailing list