Your message dated Sun, 27 Jan 2019 18:04:28 +0000 with message-id <e1gnone-000hdu...@fasolo.debian.org> and subject line Bug#919775: fixed in apparmor 2.13.2-4 has caused the Debian Bug report #919775, regarding apparmor: AppArmor denies new mesa-related paths to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 919775: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919775 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: apparmor Version: 2.13.2-3 Severity: normal Tags: upstream patch Dear Maintainer, After recent Mesa updates on Sid, new denies are produced by some applicaitons: ``` type=AVC msg=audit(1547905564.212:523): apparmor="DENIED" operation="open" profile="supertuxkart" name="/usr/share/drirc.d/" pid=15740 comm="supertuxkart" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 ``` ``` type=AVC msg=audit(1547905896.307:548): apparmor="DENIED" operation="open" profile="supertuxkart" name="/usr/share/drirc.d/00-mesa-defaults.conf" pid=15963 c omm="supertuxkart" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 ``` MR is prepared: https://gitlab.com/apparmor/apparmor/merge_requests/308 I hope this gets into Buster. I guess these kind of fixes are allowd until final freeze, or even later? -- System Information: Debian Release: buster/sid APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.19.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=lt_LT.UTF-8, LC_CTYPE=lt_LT.UTF-8 (charmap=UTF-8), LANGUAGE=lt (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages apparmor depends on: ii debconf [debconf-2.0] 1.5.70 ii libc6 2.28-5 ii lsb-base 10.2018112800 ii python3 3.7.2-1 apparmor recommends no packages. Versions of packages apparmor suggests: ii apparmor-profiles-extra 1.24 ii apparmor-utils 2.13.2-3 -- Configuration Files: /etc/apparmor.d/abstractions/audio changed [not included] /etc/apparmor.d/abstractions/fonts changed [not included] /etc/apparmor.d/abstractions/kde changed [not included] /etc/apparmor.d/abstractions/mesa changed [not included] /etc/apparmor.d/abstractions/ubuntu-email changed [not included] /etc/apparmor.d/tunables/kernelvars changed [not included] /etc/apparmor.d/tunables/securityfs changed [not included] /etc/apparmor.d/tunables/sys changed [not included] -- debconf information excluded
--- End Message ---
--- Begin Message ---Source: apparmor Source-Version: 2.13.2-4 We believe that the bug you reported is fixed in the latest version of apparmor, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 919...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. intrigeri <intrig...@debian.org> (supplier of updated apparmor package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Jan 2019 17:07:34 +0000 Source: apparmor Architecture: source Version: 2.13.2-4 Distribution: unstable Urgency: medium Maintainer: Debian AppArmor Team <pkg-apparmor-t...@lists.alioth.debian.org> Changed-By: intrigeri <intrig...@debian.org> Closes: 919705 919775 Changes: apparmor (2.13.2-4) unstable; urgency=medium . * Move libapparmor.so unversioned symlink to /lib/<triplet> (Closes: #919705). * New patches, cherry-picked from upstream: - Make tunables/share play well with aliases. - Fix access to /usr/share/drirc.d.conf (Closes: #919775). - Fix access to the default paths used by dehydrated in Debian. - Support new font configuration paths. - Support libvirt named profile. - Fix access to /etc/alsa/conf.d/. * autopkgtests: test compiling more profiles shipped by other packages. * Patch the dnsmasq profile to fix ptrace and signal communication with libvirtd. Checksums-Sha1: f0cc1f6cfb733467f6cc2870ef7f18d16cfdbff4 3258 apparmor_2.13.2-4.dsc 36dfe22c9e0ae31142882543b52e831ed926a739 95876 apparmor_2.13.2-4.debian.tar.xz 94e6495972c00b7c59677195da4ed88bffd3dd86 12631 apparmor_2.13.2-4_amd64.buildinfo Checksums-Sha256: dab08b67dc9cfee9e37e385c6867bd71cb2c5f4881665ae6cefd53e756a2918a 3258 apparmor_2.13.2-4.dsc 194b93a15e0be99f684092616c79e3028b7f777c2740c508e5773f3434a5e6e5 95876 apparmor_2.13.2-4.debian.tar.xz c2c1f795be71cedaa2b44b24585467483e58851e8837596adbc866633889b41e 12631 apparmor_2.13.2-4_amd64.buildinfo Files: fef2dcc1c7428e3f1eb3cd2f22c8c22c 3258 admin optional apparmor_2.13.2-4.dsc c9f058b75cc7ea8bd95090b8bd0b0505 95876 admin optional apparmor_2.13.2-4.debian.tar.xz 38d2a236cce6843e4fc011322d2d6853 12631 admin optional apparmor_2.13.2-4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcMAxqZeuB0p8dimNy2kI2AAOzf4FAlxN8cwACgkQy2kI2AAO zf6V8Q//b/v0oblhxCahCI/eLbiQZZVUX8z9ioKYloyM0Jf6hdIJAbsJi0is1OFT DuHVVtnxso3fxZqxWXc4JOIUrA5f54QmdPPQXsPZ2cXTE2o2l/m9ihGlqYmmgxAN mmDaSWr1kx4zRqWylfa4OVEyS+0+DxHb5mqk8Xu+2L7tr9xtbd3FW2gJZxkLX4I2 ODUbkuA7jGIHS8RQbBNFhu22V6Et2ipA8/lZJH5VXJMfc03/I8Et4HF9z6o8g5HC ggU39Axu8YsbeC1hrRi8y3RQEzWg5+bOa1cmcLgvRVljIz3Ayusu7mutw+p/v4Fr Z+WkcLLC7cY827sFQg263ydqJROfWques1Q92QZL7G9he7juzP+9SZcSM73A+CUu ZNIRm57aSnk+p+ny9GGRjgpqp618D2uOhDkMKNL4++300fmqgd549h3SL8hRcSOR L9TKb0Gzn73xyzelypZfiSXXUwHkn+c1HxdLcZii+zVqjN+p3jXxhdKIGyninjBh BtR9kwbC2tuJhjljWpGGxX7gK7weOtSBlr0GFmyNWHa1R98xPTWeNUnBr/8vqSqg boSNXdJDLOHXSVftZ2YxRH6oOwmksdKZ9bZrGtdc4VpvzCEIzSJciVUwIr6iZpXS T7l9vTuKcAs4P/vV+uNW8eNEnKK/IQOF0UgqyQbRZOXANfBjgIk= =1xGM -----END PGP SIGNATURE-----
--- End Message ---
