Overview

Request 390301 accepted

Update to the AppArmor 2.9.3 maintenance release.

This includes lots of profile updates and fixes in various areas.
The most important and urgent part are the Samba profile updates,
which are needed for the 'badlock'-updated Samba 4.2.x.

---------------------------------------------------------------------

Full changelog:

- update to AppArmor 2.9.3 (2.9 branch r3005) bugfix release
- aa-complain, aa-enforce, aa-audit: change flags of hats, not only
the main profile (+ some bugfixes)
- aa-notify: also display notifications for complain mode events
- add python to the "no Px rule" list in logprof.conf
- several bugfixes in the aa-* tools (including boo#954104 and several
bugs on lp)
- parser: set cache file timestamp to mtime of most recent policy file
timestamp (lp#1460152)
- add permissions in several profiles (including boo#948584,
boo#948753, boo#939568, boo#954959, boo#954958, boo#940749,
boo#971790, boo#945592, boo#964971, boo#921098, boo#923201 and
boo#921098#c15)
- and much more - see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_3
- remove upstreamed patch samba-4.2-profiles.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-2.5.1-edirectory-profile
- apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR

- systemd-rpm-macros and %systemd_requires were at the wrong place,
move them to the parser package (boo#931792)

- update to AppArmor 2.9.2 (2.9 branch r2911)
- lots of bugfixes in the parser and the aa-* tools (including
boo#918787)
- update dovecot and dnsmasq profiles and several abstractions
(including boo#911001)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
https://launchpad.net/apparmor/+announcement/13404

- make sure %service_del_postun doesn't call systemctl try-restart
(boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
profiles for samba 4.2 (boo#921098, boo#923201)

- only install apparmor.service for openSUSE > 13.2
[Note: openSUSE 13.2 never contained the apparmor.service file]

- Add a native systemd unit which *at the moment* only
wraps/masks the early boot script.

- add apparmor-fix-stl-ostream.diff which fixes odd uses of
std::ostream which are not valid. Fixes build with GCC 5

- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)

- add Requires: python3 to python3-apparmor package - readline isn't
part of python3-base (boo#917577)

Request History
Christian Boltz's avatar

cboltz created request

Update to the AppArmor 2.9.3 maintenance release.

This includes lots of profile updates and fixes in various areas.
The most important and urgent part are the Samba profile updates,
which are needed for the 'badlock'-updated Samba 4.2.x.

---------------------------------------------------------------------

Full changelog:

- update to AppArmor 2.9.3 (2.9 branch r3005) bugfix release
- aa-complain, aa-enforce, aa-audit: change flags of hats, not only
the main profile (+ some bugfixes)
- aa-notify: also display notifications for complain mode events
- add python to the "no Px rule" list in logprof.conf
- several bugfixes in the aa-* tools (including boo#954104 and several
bugs on lp)
- parser: set cache file timestamp to mtime of most recent policy file
timestamp (lp#1460152)
- add permissions in several profiles (including boo#948584,
boo#948753, boo#939568, boo#954959, boo#954958, boo#940749,
boo#971790, boo#945592, boo#964971, boo#921098, boo#923201 and
boo#921098#c15)
- and much more - see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_3
- remove upstreamed patch samba-4.2-profiles.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-2.5.1-edirectory-profile
- apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR

- systemd-rpm-macros and %systemd_requires were at the wrong place,
move them to the parser package (boo#931792)

- update to AppArmor 2.9.2 (2.9 branch r2911)
- lots of bugfixes in the parser and the aa-* tools (including
boo#918787)
- update dovecot and dnsmasq profiles and several abstractions
(including boo#911001)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
https://launchpad.net/apparmor/+announcement/13404

- make sure %service_del_postun doesn't call systemctl try-restart
(boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
profiles for samba 4.2 (boo#921098, boo#923201)

- only install apparmor.service for openSUSE > 13.2
[Note: openSUSE 13.2 never contained the apparmor.service file]

- Add a native systemd unit which *at the moment* only
wraps/masks the early boot script.

- add apparmor-fix-stl-ostream.diff which fixes odd uses of
std::ostream which are not valid. Fixes build with GCC 5

- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)

- add Requires: python3 to python3-apparmor package - readline isn't
part of python3-base (boo#917577)


Maintenance Bot's avatar

maintbot accepted review

accepted


Maintenance Bot's avatar

maintbot approved review

accepted


Andreas Stieger's avatar

AndreasStieger moved maintenance target to openSUSE:Maintenance:4972


Andreas Stieger's avatar

AndreasStieger accepted request

ok

openSUSE Build Service is sponsored by