[ubuntu/wily-proposed] ubuntu-core-security 15.10.1 (Accepted)

[Jamie Strandboge]

ubuntu-core-security (15.10.1) wily; urgency=medium

  * seccomp/network-*: add comment on socketcall (but continue to disallow it)
  * seccomp/default:
    - continue to disallow but add comments for: fanotify_init, fanotify_mark,
      ioprio_set, mq_*, and nice
    - remove nonexistent 'wait' syscall (there is only 'wait4', which we
      already have)
    - allow the following: get_mempolicy, get_thread_area, inotify_*, llseek,
      mbind, prlimit64, set_mempolicy, ustat, syncfs, oldwait4, writev
    - continue to allow sched_setscheduler but add comment that we should do
      syscall arg filtering when LP: 1446748 is implemented
  * apparmor/default:
    - allow exec of logger (we already allow writing to /dev/log)
    - add attach_disconnected for default policy in preparation of new /tmp
      handling
  * add 'debian/make-new-version.sh 15.04 15.10' and update autopkgtests
  * sc-filtergen: handle float stripping off trailing 0 when loading/dumping
    yaml floats

Date: Thu, 21 May 2015 16:26:42 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Security <security at ubuntu.com>
https://launchpad.net/ubuntu/+source/ubuntu-core-security/15.10.1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 21 May 2015 16:26:42 -0500
Source: ubuntu-core-security
Binary: ubuntu-core-security-apparmor ubuntu-core-security-seccomp ubuntu-core-security-utils
Architecture: source
Version: 15.10.1
Distribution: wily
Urgency: medium
Maintainer: Ubuntu Security <security at ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description:
 ubuntu-core-security-apparmor - AppArmor easyprof templates for Ubuntu Core
 ubuntu-core-security-seccomp - Seccomp templates for Ubuntu Core
 ubuntu-core-security-utils - Security utilities for Ubuntu Core
Changes:
 ubuntu-core-security (15.10.1) wily; urgency=medium
 .
   * seccomp/network-*: add comment on socketcall (but continue to disallow it)
   * seccomp/default:
     - continue to disallow but add comments for: fanotify_init, fanotify_mark,
       ioprio_set, mq_*, and nice
     - remove nonexistent 'wait' syscall (there is only 'wait4', which we
       already have)
     - allow the following: get_mempolicy, get_thread_area, inotify_*, llseek,
       mbind, prlimit64, set_mempolicy, ustat, syncfs, oldwait4, writev
     - continue to allow sched_setscheduler but add comment that we should do
       syscall arg filtering when LP: 1446748 is implemented
   * apparmor/default:
     - allow exec of logger (we already allow writing to /dev/log)
     - add attach_disconnected for default policy in preparation of new /tmp
       handling
   * add 'debian/make-new-version.sh 15.04 15.10' and update autopkgtests
   * sc-filtergen: handle float stripping off trailing 0 when loading/dumping
     yaml floats
Checksums-Sha1:
 1f08d08b9d1104b9647a83054fca4631f328b5fd 1922 ubuntu-core-security_15.10.1.dsc
 00f30c4397e5ee93f9c89af5a65a2817c10d05bc 19452 ubuntu-core-security_15.10.1.tar.xz
Checksums-Sha256:
 8afbba51cc403e5f7b267921c41d3a398a2d913ed2b75d2a62cefdcdb103c778 1922 ubuntu-core-security_15.10.1.dsc
 b408ae1f854db5192438a6056736014c28127b0df13ffd7e680241bf540cdf6d 19452 ubuntu-core-security_15.10.1.tar.xz
Files:
 4ec8a662e39abff6eac2a177a045f032 1922 admin optional ubuntu-core-security_15.10.1.dsc
 d506095ad6359b6b1c8d44fc6d09e9c3 19452 admin optional ubuntu-core-security_15.10.1.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=GNhc
-----END PGP SIGNATURE-----