commit apparmor for openSUSE:12.1:Update:Test
Hello community, here is the log from the commit of package apparmor for openSUSE:12.1:Update:Test checked in at 2012-02-10 12:48:16 Comparing /work/SRC/openSUSE:12.1:Update:Test/apparmor (Old) and /work/SRC/openSUSE:12.1:Update:Test/.apparmor.new (New) Package is "apparmor", Maintainer is "mszer...@suse.com" Changes: --- /work/SRC/openSUSE:12.1:Update:Test/apparmor/apparmor.changes 2012-02-07 17:36:38.0 +0100 +++ /work/SRC/openSUSE:12.1:Update:Test/.apparmor.new/apparmor.changes 2012-02-10 12:48:17.0 +0100 @@ -1,0 +2,6 @@ +Thu Feb 9 19:01:07 UTC 2012 - opens...@cboltz.de + +- add 0001-fix-for-lp929531.patch to allow reading + /sys/devices/system/cpu/online in abstractions/base (lp#929531) + +--- New: 0001-fix-for-lp929531.patch Other differences: -- ++ apparmor.spec ++ --- /var/tmp/diff_new_pack.6AnGxD/_old 2012-02-10 12:48:17.0 +0100 +++ /var/tmp/diff_new_pack.6AnGxD/_new 2012-02-10 12:48:17.0 +0100 @@ -15,6 +15,7 @@ # Please submit bugfixes or comments via http://bugs.opensuse.org/ # + %bcond_with tomcat %bcond_without pam %bcond_without apache @@ -53,6 +54,9 @@ Source2:%{name}-profile-editor.desktop Source3:update-trans.sh +# add "/sys/devices/system/cpu/online r" to abstractions/base. Will be included in upstream > 2.7.2 +Patch: 0001-fix-for-lp929531.patch + # enable caching of profiles (= massive performance speedup when loading profiles) Patch1: apparmor-enable-profile-cache.diff @@ -400,6 +404,7 @@ %prep %setup -q -n %{name}-%{versiondir} +%patch -p1 %patch1 -p1 %patch2 -p0 %patch5 -p1 ++ 0001-fix-for-lp929531.patch ++ Author: Jamie Strandboge Description: glibc's __get_nprocs() now checks /sys/devices/system/cpu/online in addition to /proc/stat for the number of processors. This is used in the _SC_NPROCESSORS_ONLN implementation, a part of sysconf. This was introduced in upstream glibc commit: http://repo.or.cz/w/glibc.git/patch/84e2a551a72c79b020694bb327e33b6d71b09b63 Bug-Ubuntu: https://launchpad.net/bugs/929531 Index: apparmor-2.7.0/profiles/apparmor.d/abstractions/base === --- apparmor-2.7.0.orig/profiles/apparmor.d/abstractions/base 2012-02-09 07:57:35.0 -0600 +++ apparmor-2.7.0/profiles/apparmor.d/abstractions/base2012-02-09 08:01:13.0 -0600 @@ -86,6 +86,7 @@ @{PROC}/meminfor, @{PROC}/stat r, @{PROC}/cpuinfor, + /sys/devices/system/cpu/online r, # glibc's *printf protections read the maps file @{PROC}/*/maps r, -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit apparmor for openSUSE:12.1:Update:Test
Hello community, here is the log from the commit of package apparmor for openSUSE:12.1:Update:Test checked in at 2012-02-07 17:36:33 Comparing /work/SRC/openSUSE:12.1:Update:Test/apparmor (Old) and /work/SRC/openSUSE:12.1:Update:Test/.apparmor.new (New) Package is "apparmor", Maintainer is "mszer...@suse.com" Changes: --- /work/SRC/openSUSE:12.1:Update:Test/apparmor/apparmor.changes 2012-02-07 17:36:37.0 +0100 +++ /work/SRC/openSUSE:12.1:Update:Test/.apparmor.new/apparmor.changes 2012-02-07 17:36:38.0 +0100 @@ -1,0 +2,79 @@ +Tue Jan 31 09:53:06 UTC 2012 - opens...@cboltz.de + +- Update to AppArmor 2.7.2 (= 2.7 branch / r1894) + - move various permissions from httpd2-prefork profile to +abstractions/apache2-common. Backward-incompatible change: *.htaccess +files are no longer allowed for ^HANDLING_UNTRUSTED_INPUT + - allow access for more /usr/lib*/samba/ files for smbd (bnc#725967#c5) + - allow various .conf files for dovecot (lp#458922) + - disallow wl for *.so in @{HOME}/.pki/nssdb/ in abstractions/private-files +and abstractions/private-files-strict (lp#911847) + - update abstractions/kde, private-files* and ubuntu-browsers.d/user-files +to use ~/.kde4, not only ~/.kde (bnc#741592) + - block write access to ~/.kde{,4}/env in abstractions/private-files +(lp#914190) + - allow write access for personal dictionary etc. in abstractions/aspell +(lp#917859) + - when using genprof for a script, include read access to the script itsself + - automatically include abstractions/python or abstractions/ruby for +python/ruby scripts + - add profile for smbldap-useradd and allow smbd to call it (bnc#738041) + - allow creation of the .config directory in abstractions/enchant (lp#914184) + - allow TFTP read-only access in dnsmasq profile (lp#905412) + - allow capability dac_read_search for syslog-ng (bnc#731876) + - add p11-kit abstraction and include it in abstractions/authentification +(lp#912754, lp#912752) + - add audacity to abstractions/ubuntu-media-players (lp#899963) + - allow software-center, fireclam plugin, [tT]unar, exo-open, kate and +/dev/nvidia* in abstractons/ubuntu-browsers.d/* (lp#662906, lp#562831, +lp#890894, lp#890894, lp#884748) + - fix typo for multiarch gconf-modules in abstractions/base (lp#904548) + - allow avahi to do dbus introspection (lp#769148) + - allow access to ~/.fonts.conf.d in abstractions/fonts (lp#870992) + - allow transmission in abstractions/ubuntu-bittorrent-clients (lp#852062) + - allow reading ~/.cups/client.conf and ~/.cups/lpoptions in +abstractions/cups-client (lp#887992) + - allow read access of /etc/python{2,3}.[0-7]*/sitecustomize.py in +abstractions/python (lp#860856) + - various updates to the sshd profile (lp#817956) + - (and some more changes I already included in the apparmor-2.7-branch.diff) + +--- +Tue Jan 3 23:52:38 UTC 2012 - opens...@cboltz.de + +- Update to AppArmor 2.7.0 (= r1858) + - make traceroute6 work (bnc#733312) + - allow access to pyconfig.h in abstractions/python (lp#840734) + - fix logprof/genprof for hex-encoded program filenames (= filenames +containing space etc.) +- add apparmor-2.7-branch.diff with some upstreamed fixes: + - usr.sbin.smbd needs read access for /etc/netgroup (bnc#738041) + - create /etc/apparmor.d/tunables/multiarch.d as directory, not as file + - fix syntax error in abstractons/python + +--- +Tue Nov 29 18:34:54 CET 2011 - meiss...@suse.de + +- changed a $ -> % (typo) + +--- +Sat Nov 26 21:52:31 UTC 2011 - opens...@cboltz.de + +- make Provides for perl-libapparmor versioned to avoid self-Obsoletes + +--- +Thu Nov 10 20:16:24 UTC 2011 - opens...@cboltz.de + +- update to AppArmor 2.7.0 rc2 + Most of the changes since rc1 were already included as patches. + Additional changes: + - fix logprof/genprof to recognize "mknod" in audit.log + - fix libapparmor python bindings to compile with python 3 + - fix wrong status message in initscript if apparmor-utils are not installed + - parser/Makefile: fix some warnings, always respect CXX and LDFLAGS + - fix some warnings in utils/Makefile +- remove 4 upstreamed patches +- remove mkdir /etc/apparmor.d/disable - that's done by upstream Makefile now +- update line numbers in 2 patches + +--- Old: apparmor-2.5.1-ldapclient-profile apparmor-2.7.0rc1-aa-notify-better-error-message.diff apparmor-2.7.rc1.tar.gz apparmor-abstractions-winbind-64bit.diff apparmor-samba-vfs-objects.diff New:
commit apparmor for openSUSE:12.1
Hello community, here is the log from the commit of package apparmor for openSUSE:12.1 checked in at 2011-11-02 11:44:03 Comparing /work/SRC/openSUSE:12.1/apparmor (Old) and /work/SRC/openSUSE:12.1/.apparmor.new (New) Package is "apparmor", Maintainer is "" Changes: --- /work/SRC/openSUSE:12.1/apparmor/apparmor.changes 2011-10-28 15:35:51.0 +0200 +++ /work/SRC/openSUSE:12.1/.apparmor.new/apparmor.changes 2011-11-02 11:44:05.0 +0100 @@ -1,0 +2,7 @@ +Tue Nov 1 17:39:29 UTC 2011 - opens...@cboltz.de + +- make abstractions/winbind working on 64bit systems +- allow loading the libraries for samba "vfs objects" also on 32bit + systems (bnc#725967) + +--- New: apparmor-abstractions-winbind-64bit.diff Other differences: -- ++ apparmor.spec ++ --- /var/tmp/diff_new_pack.icUyQ4/_old 2011-11-02 11:44:05.0 +0100 +++ /var/tmp/diff_new_pack.icUyQ4/_new 2011-11-02 11:44:05.0 +0100 @@ -53,7 +53,7 @@ Source2:%{name}-profile-editor.desktop Source3:update-trans.sh -# more helpful error message for "aa-notify -p" if the user is not in the configured group. Patch pending upstream. +# more helpful error message for "aa-notify -p" if the user is not in the configured group. Commited upstream after 2.7rc1. Patch: apparmor-2.7.0rc1-aa-notify-better-error-message.diff # enable caching of profiles (= massive performance speedup when loading profiles) @@ -62,9 +62,12 @@ # include autogenerated profile sniplet for samba shares (bnc#688040) Patch2: apparmor-samba-include-permissions-for-shares.diff -# allow samba "vfs objects" (bnc#725967) +# allow samba "vfs objects" (bnc#725967). Commited upstream after 2.7rc1. Patch3: apparmor-samba-vfs-objects.diff +# make abstractions/winbind working on 64bit systems. Commited upstream after 2.7rc1. +Patch4: apparmor-abstractions-winbind-64bit.diff + # split a long string in AppArmor.pm. Not accepted upstream because they want a solution without hardcoded width. Patch5: apparmor-utils-string-split @@ -75,7 +78,7 @@ # Add support for eDirectory calls in abstractions/nameservice. Not accepted upstream (yet) because of open questions Patch12:apparmor-2.5.1-edirectory-profile -# split ldap related things from abstractions/nameservice to abstractions/ldapclient and add sasl support. TODO: send upstream +# split ldap related things from abstractions/nameservice to abstractions/ldapclient and add sasl support. Commited upstream after 2.7rc1. Patch13:apparmor-2.5.1-ldapclient-profile # obsolete, upstream implemented this in another way @@ -413,6 +416,7 @@ %patch1 -p1 %patch2 -p0 %patch3 -p0 +%patch4 -p0 %patch5 -p1 #%patch10 -p1 # disabled, see above #%patch11 -p1 # disabled, see above ++ apparmor-abstractions-winbind-64bit.diff ++ Make abstractions/winbind working on 64bit systems - valid.dat etc. are in /usr/lib64/samba/ there Signed-Off-by: Christian Boltz Acked-By: Steve Beattie === modified file 'profiles/apparmor.d/abstractions/winbind' --- profiles/apparmor.d/abstractions/winbind2010-12-20 20:29:10 + +++ profiles/apparmor.d/abstractions/winbind2011-11-01 15:56:49 + @@ -13,7 +13,7 @@ /tmp/.winbindd/pipe rw, /var/{lib,run}/samba/winbindd_privileged/pipe rw, /etc/samba/smb.conf r, - /usr/lib/samba/valid.datr, - /usr/lib/samba/upcase.dat r, - /usr/lib/samba/lowcase.dat r, + /usr/lib*/samba/valid.dat r, + /usr/lib*/samba/upcase.dat r, + /usr/lib*/samba/lowcase.dat r, ++ apparmor-samba-vfs-objects.diff ++ --- /var/tmp/diff_new_pack.icUyQ4/_old 2011-11-02 11:44:05.0 +0100 +++ /var/tmp/diff_new_pack.icUyQ4/_new 2011-11-02 11:44:05.0 +0100 @@ -12,7 +12,7 @@ /etc/printcap r, /proc/*/mounts r, /proc/sys/kernel/core_pattern r, -+ /usr/lib64/samba/vfs/*.so mr, ++ /usr/lib*/samba/vfs/*.so mr, /usr/sbin/smbd mr, /etc/samba/* rwk, /var/cache/samba/** rwk, -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit apparmor for openSUSE:12.1
Hello community, here is the log from the commit of package apparmor for openSUSE:12.1 checked in at 2011-10-27 11:03:10 Comparing /work/SRC/openSUSE:12.1/apparmor (Old) and /work/SRC/openSUSE:12.1/.apparmor.new (New) Package is "apparmor", Maintainer is "" Changes: --- /work/SRC/openSUSE:12.1/apparmor/apparmor.changes 2011-10-24 12:27:34.0 +0200 +++ /work/SRC/openSUSE:12.1/.apparmor.new/apparmor.changes 2011-10-28 15:35:51.0 +0200 @@ -1,0 +2,5 @@ +Wed Oct 26 20:48:16 UTC 2011 - opens...@cboltz.de + +- allow loading the libraries for samba "vfs objects" (bnc#725967) + +--- New: apparmor-samba-vfs-objects.diff Other differences: -- ++ apparmor.spec ++ --- /var/tmp/diff_new_pack.TEVPUU/_old 2011-10-28 15:35:51.0 +0200 +++ /var/tmp/diff_new_pack.TEVPUU/_new 2011-10-28 15:35:51.0 +0200 @@ -62,6 +62,9 @@ # include autogenerated profile sniplet for samba shares (bnc#688040) Patch2: apparmor-samba-include-permissions-for-shares.diff +# allow samba "vfs objects" (bnc#725967) +Patch3: apparmor-samba-vfs-objects.diff + # split a long string in AppArmor.pm. Not accepted upstream because they want a solution without hardcoded width. Patch5: apparmor-utils-string-split @@ -409,6 +412,7 @@ %patch -p0 %patch1 -p1 %patch2 -p0 +%patch3 -p0 %patch5 -p1 #%patch10 -p1 # disabled, see above #%patch11 -p1 # disabled, see above ++ apparmor-samba-vfs-objects.diff ++ Allow loading the libraries used for Samba "vfs objects = ..." References: https://bugzilla.novell.com/show_bug.cgi?id=725967 Signed-off-by: Christian Boltz === modified file 'profiles/apparmor.d/usr.sbin.smbd' --- profiles/apparmor.d/usr.sbin.smbd 2011-08-27 18:50:42 + +++ profiles/apparmor.d/usr.sbin.smbd 2011-10-26 20:43:13 + @@ -24,6 +24,7 @@ /etc/printcap r, /proc/*/mounts r, /proc/sys/kernel/core_pattern r, + /usr/lib64/samba/vfs/*.so mr, /usr/sbin/smbd mr, /etc/samba/* rwk, /var/cache/samba/** rwk, -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org