openSUSE Build Service

Overview Details Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo (Revision f1d6888266a2ce9a842b18e4604c60bd)

Currently displaying revision f1d6888266a2ce9a842b18e4604c60bd , Show latest

<patchinfo incident="6331">
  <issue id="1009964" tracker="bnc">ntpd uses dgram with AF_UNSPEC</issue>
  <issue id="1017260" tracker="bnc">apparmor.service missing in Leap</issue>
  <issue id="980596" tracker="bnc">Please allow ipv6 raw sockets for 'ping'</issue>
  <issue id="1000201" tracker="bnc">mlmmj apparmor profiles need fixing</issue>
  <issue id="990006" tracker="bnc">apparmor errors for winbind</issue>
  <issue id="1014463" tracker="bnc">apparmor prevents nscd from working with libvirt-nss</issue>
  <issue id="1016259" tracker="bnc">apparmor seems to start too early causing some failures when /usr is on a separate partition</issue>
  <issue id="1015249" tracker="bnc">libapparmor[1093]: Can't create cache directory '/etc/apparmor.d/cache': File exists</issue>
  <issue id="980081" tracker="bnc">Apparmor cache not available because /var/cache gets mounted too late</issue>
  <issue id="987607" tracker="bnc">No module named '_LibAppArmor'</issue>
  <category>recommended</category>
  <rating>low</rating>
  <packager>cboltz</packager>
  <description>
This update for apparmor fixes the following issues:

- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles

- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.

- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, boo#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net

- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff

- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)

- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile

- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests

- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)

- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles

- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.

- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)
</description>
  <summary>Recommended update for apparmor</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo (Revision f1d6888266a2ce9a842b18e4604c60bd)

Places