Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2012-02-02 17:56:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apparmor", Maintainer is "[email protected]" Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2012-01-05 13:51:07.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.apparmor.new/apparmor.changes 2012-02-02 17:56:22.000000000 +0100 @@ -1,0 +2,41 @@ +Tue Jan 31 09:53:06 UTC 2012 - [email protected] + +- Update to AppArmor 2.7.2 (= 2.7 branch / r1894) + - move various permissions from httpd2-prefork profile to + abstractions/apache2-common. Backward-incompatible change: *.htaccess + files are no longer allowed for ^HANDLING_UNTRUSTED_INPUT + - allow access for more /usr/lib*/samba/ files for smbd (bnc#725967#c5) + - allow various .conf files for dovecot (lp#458922) + - disallow wl for *.so in @{HOME}/.pki/nssdb/ in abstractions/private-files + and abstractions/private-files-strict (lp#911847) + - update abstractions/kde, private-files* and ubuntu-browsers.d/user-files + to use ~/.kde4, not only ~/.kde (bnc#741592) + - block write access to ~/.kde{,4}/env in abstractions/private-files + (lp#914190) + - allow write access for personal dictionary etc. in abstractions/aspell + (lp#917859) + - when using genprof for a script, include read access to the script itsself + - automatically include abstractions/python or abstractions/ruby for + python/ruby scripts + - add profile for smbldap-useradd and allow smbd to call it (bnc#738041) + - allow creation of the .config directory in abstractions/enchant (lp#914184) + - allow TFTP read-only access in dnsmasq profile (lp#905412) + - allow capability dac_read_search for syslog-ng (bnc#731876) + - add p11-kit abstraction and include it in abstractions/authentification + (lp#912754, lp#912752) + - add audacity to abstractions/ubuntu-media-players (lp#899963) + - allow software-center, fireclam plugin, [tT]unar, exo-open, kate and + /dev/nvidia* in abstractons/ubuntu-browsers.d/* (lp#662906, lp#562831, + lp#890894, lp#890894, lp#884748) + - fix typo for multiarch gconf-modules in abstractions/base (lp#904548) + - allow avahi to do dbus introspection (lp#769148) + - allow access to ~/.fonts.conf.d in abstractions/fonts (lp#870992) + - allow transmission in abstractions/ubuntu-bittorrent-clients (lp#852062) + - allow reading ~/.cups/client.conf and ~/.cups/lpoptions in + abstractions/cups-client (lp#887992) + - allow read access of /etc/python{2,3}.[0-7]*/sitecustomize.py in + abstractions/python (lp#860856) + - various updates to the sshd profile (lp#817956) + - (and some more changes I already included in the apparmor-2.7-branch.diff) + +------------------------------------------------------------------- Old: ---- apparmor-2.7-branch.diff apparmor-2.7.0.tar.gz New: ---- apparmor-2.7.2.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.tnf8Hu/_old 2012-02-02 17:56:24.000000000 +0100 +++ /var/tmp/diff_new_pack.tnf8Hu/_new 2012-02-02 17:56:24.000000000 +0100 @@ -43,19 +43,17 @@ %if ! %{?distro:1}0 %define distro suse %endif -Version: 2.7.0 -Release: 1 -%define versiondir 2.7.0 +Version: 2.7.2 +Release: 0 +%define versiondir 2.7.2 Summary: AppArmor userlevel parser utility +License: GPL-2.0+ Group: Productivity/Networking/Security Source0: apparmor-%{version}.tar.gz Source1: %{name}-profile-editor.png Source2: %{name}-profile-editor.desktop Source3: update-trans.sh -# upstream changes since the 2.7 release -Patch0: apparmor-2.7-branch.diff - # enable caching of profiles (= massive performance speedup when loading profiles) Patch1: apparmor-enable-profile-cache.diff @@ -79,7 +77,6 @@ # remove after 12.1 release - bnc#720617 #c7 Patch21: apparmor-utils-subdomain-compat -License: GPLv2+ Url: https://launchpad.net/apparmor PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -142,8 +139,8 @@ %endif %package parser -License: GPLv2+ Summary: AppArmor userlevel parser utility +License: GPL-2.0+ Group: Productivity/Networking/Security Obsoletes: subdomain_parser < %{version} Obsoletes: subdomain-parser < %{version} @@ -167,8 +164,8 @@ SubDomain. %package docs -License: GPLv2+ Summary: AppArmor Documentation package +License: GPL-2.0+ Group: Documentation/Other BuildArch: noarch @@ -181,8 +178,8 @@ %if %{with apache} %package -n apache2-mod_apparmor -License: GPLv2+ Summary: AppArmor module for apache2 +License: GPL-2.0+ Group: Productivity/Security %description -n apache2-mod_apparmor @@ -198,8 +195,8 @@ %endif %package -n libapparmor1 -License: LGPLv2.1+ Summary: Utility library for AppArmor +License: LGPL-2.1+ Group: Development/Libraries/C and C++ %ifarch ppc64 Obsoletes: libapparmor-64bit < %{version} @@ -216,8 +213,8 @@ well as functions to parse AppArmor log messages. %package -n libapparmor-devel -License: LGPLv2.1+ Summary: Development headers and libraries for libapparmor +License: LGPL-2.1+ Group: Development/Libraries/C and C++ Requires: libapparmor1 = %{version} Provides: libapparmor:/usr/include/sys/apparmor.h @@ -227,8 +224,8 @@ AppArmor API. %package -n perl-apparmor -License: GPLv2 ; LGPLv2.1+ Summary: Perl interface for libapparmor functions +License: GPL-2.0 ; LGPL-2.1+ Group: Development/Libraries/Perl Requires: libapparmor1 = %{version} Requires: perl = %{perl_version} @@ -248,8 +245,8 @@ %if %{with python} %package -n python-apparmor -License: GPLv2 ; LGPLv2.1+ Summary: Python interface for libapparmor functions +License: GPL-2.0 ; LGPL-2.1+ Group: Development/Libraries/Python BuildRequires: python Requires: libapparmor1 = %{version} @@ -266,8 +263,8 @@ %if %{with ruby} %package -n ruby-apparmor -License: GPLv2 ; LGPLv2.1+ Summary: Ruby interface for libapparmor functions +License: GPL-2.0 ; LGPL-2.1+ Group: Development/Libraries/Ruby Requires: libapparmor1 = %{version} Requires: ruby = %{ruby_version} @@ -281,8 +278,8 @@ %endif %package profiles -License: GPLv2 ; LGPLv2.1+ Summary: AppArmor profiles that are loaded into the apparmor kernel module +License: GPL-2.0 ; LGPL-2.1+ Group: Productivity/Security Requires: apparmor-parser(CAP_SYSLOG) Obsoletes: subdomain-profiles < %{version} @@ -299,8 +296,8 @@ SubDomain. %package utils -License: GPLv2 ; LGPLv2.1+ Summary: AppArmor User-Level Utilities Useful for Creating AppArmor Profiles +License: GPL-2.0 ; LGPL-2.1+ Group: Productivity/Security Requires: libapparmor1 = %{version} Requires: perl = %{perl_version} @@ -316,8 +313,8 @@ %if %{with tomcat} %package -n tomcat_apparmor -License: GPLv2 ; LGPLv2.1+ Summary: Tomcat 6 plugin for AppArmor change_hat +License: GPL-2.0 ; LGPL-2.1+ Group: System/Libraries Requires: libapparmor1 = %{version} Requires: tomcat6 @@ -334,8 +331,8 @@ %if %{with pam} %package -n pam_apparmor -License: GPLv2 ; LGPLv2.1+ Summary: PAM module for AppArmor change_hat +License: GPL-2.0 ; LGPL-2.1+ Group: Productivity/Security BuildRequires: pam-devel PreReq: pam @@ -354,8 +351,8 @@ %if %{with dbus} %package dbus -License: GPLv2 ; LGPLv2.1+ Summary: Audit dispatcher for sending AppArmor events over DBUS +License: GPL-2.0 ; LGPL-2.1+ Group: System/Monitoring %description dbus @@ -367,8 +364,8 @@ %if %{with editor} %package profile-editor -License: GPLv2 ; LGPLv2.1+ Summary: AppArmor profile editor +License: GPL-2.0 ; LGPL-2.1+ Group: Productivity/Editors/Other %description profile-editor @@ -379,8 +376,8 @@ %if %{with gnome} %package -n apparmorapplet-gnome -License: GPLv2 ; LGPLv2.1+ Summary: An AppArmor event notification applet for GNOME +License: GPL-2.0 ; LGPL-2.1+ Group: System/GUI/GNOME %description -n apparmorapplet-gnome @@ -404,7 +401,6 @@ %prep %setup -q -n %{name}-%{versiondir} -%patch0 -p0 %patch1 -p1 %patch2 -p0 %patch5 -p1 ++++++ apparmor-2.7.0.tar.gz -> apparmor-2.7.2.tar.gz ++++++ ++++ 3408 lines of diff (skipped) ++++++ apparmor-samba-include-permissions-for-shares.diff ++++++ --- /var/tmp/diff_new_pack.tnf8Hu/_old 2012-02-02 17:56:24.000000000 +0100 +++ /var/tmp/diff_new_pack.tnf8Hu/_new 2012-02-02 17:56:24.000000000 +0100 @@ -20,7 +20,7 @@ === modified file 'profiles/apparmor.d/usr.sbin.smbd' --- profiles/apparmor.d/usr.sbin.smbd 2011-08-27 18:50:42 +0000 +++ profiles/apparmor.d/usr.sbin.smbd 2011-10-19 09:37:04 +0000 -@@ -42,6 +42,10 @@ +@@ -46,6 +46,10 @@ @{HOMEDIRS}/** lrwk, -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
