Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2025-07-20 15:28:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new.8875 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apparmor" Sun Jul 20 15:28:19 2025 rev:227 rq:1294456 version:4.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2025-07-16 17:35:35.861065705 +0200 +++ /work/SRC/openSUSE:Factory/.apparmor.new.8875/apparmor.changes 2025-07-20 15:28:43.719216895 +0200 @@ -1,0 +2,12 @@ +Fri Jul 18 21:15:55 UTC 2025 - Christian Boltz <suse-b...@cboltz.de> + +- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/ + via abstractions/X (boo#1246743) + +------------------------------------------------------------------- +Fri Jul 18 11:50:04 UTC 2025 - Christian Boltz <suse-b...@cboltz.de> + +- add kerberosclient-usrmerge.diff to allow reading + /usr/etc/krb5.conf (boo#1246689) + +------------------------------------------------------------------- New: ---- kerberosclient-usrmerge.diff xkeyboard.diff ----------(New B)---------- New: - add kerberosclient-usrmerge.diff to allow reading /usr/etc/krb5.conf (boo#1246689) New: - add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/ via abstractions/X (boo#1246743) ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.CeNiER/_old 2025-07-20 15:28:44.451247187 +0200 +++ /var/tmp/diff_new_pack.CeNiER/_new 2025-07-20 15:28:44.455247353 +0200 @@ -86,6 +86,12 @@ # taken from https://gitlab.com/apparmor/apparmor/-/merge_requests/1733 (merged 2025-07-15 to master, 4.1 and 4.0 branch) Patch10: dovecot24.diff +# /usr/etc/krb5.conf - boo#1246689 - not submitted upstream yet since https://github.com/krb5/krb5/pull/1437/ is still open +Patch11: kerberosclient-usrmerge.diff + +# abstractions/X: allow reading /usr/share/xkeyboard-config-2/ - submitted upstream 2025-07-18 https://gitlab.com/apparmor/apparmor/-/merge_requests/1741 +Patch12: xkeyboard.diff + PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: autoconf @@ -355,6 +361,8 @@ %patch -P 7 %endif %patch -P 10 -p1 +%patch -P 11 -p1 +%patch -P 12 -p1 %build export SUSE_ASNEEDED=0 ++++++ kerberosclient-usrmerge.diff ++++++ diff --git a/profiles/apparmor.d/abstractions/kerberosclient b/profiles/apparmor.d/abstractions/kerberosclient index e5f3a934f..d01bfe804 100644 --- a/profiles/apparmor.d/abstractions/kerberosclient +++ b/profiles/apparmor.d/abstractions/kerberosclient @@ -28,9 +28,9 @@ /usr/lib/@{multiarch}/krb5/plugins/authdata/* mr, /etc/krb5.keytab rk, - /etc/krb5.conf r, - /etc/krb5.conf.d/ r, - /etc/krb5.conf.d/* r, + @{etc_ro}/krb5.conf r, + @{etc_ro}/krb5.conf.d/ r, + @{etc_ro}/krb5.conf.d/* r, # config files found via strings on libs /etc/krb.conf r, ++++++ xkeyboard.diff ++++++ commit 238221f3795e0664a67e955443ac6d5e2f5b1a03 Author: Christian Boltz <appar...@cboltz.de> Date: Fri Jul 18 23:00:42 2025 +0200 abstractions/X: allow reading /usr/share/xkeyboard-config-*/ /usr/share/X11/xkb/ was moved to /usr/share/xkeyboard-config-2/ in xkeyboard-config 2.45, see https://gitlab.freedesktop.org/xkeyboard-config/xkeyboard-config/-/blob/master/ChangeLog.md?ref_type=heads#breaking-changes-2 The old location was covered by the /usr/share/X11/** rule. Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1246743 diff --git a/profiles/apparmor.d/abstractions/X b/profiles/apparmor.d/abstractions/X index 48a5a5cbe..32aac7bd7 100644 --- a/profiles/apparmor.d/abstractions/X +++ b/profiles/apparmor.d/abstractions/X @@ -48,6 +48,8 @@ /usr/share/X11/** r, /usr/X11R6/**.so* mr, + /usr/share/xkeyboard-config-[2-9]/** r, + # EGL /usr/lib/@{multiarch}/egl/*.so* mr,
