Hello community, here is the log from the commit of package apparmor.1259 for openSUSE:12.2:Update checked in at 2013-02-04 13:54:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.2:Update/apparmor.1259 (Old) and /work/SRC/openSUSE:12.2:Update/.apparmor.1259.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apparmor.1259", Maintainer is "" Changes: -------- New Changes file: --- /dev/null 2013-01-09 19:40:42.352580873 +0100 +++ /work/SRC/openSUSE:12.2:Update/.apparmor.1259.new/apparmor.changes 2013-02-04 13:54:24.000000000 +0100 @@ -0,0 +1,507 @@ +------------------------------------------------------------------- +Sun Jan 13 13:46:01 UTC 2013 - [email protected] + +- update abstractions/mysql with correct paths and add MariaDB paths + (bnc#798183) + +------------------------------------------------------------------- +Thu Jan 10 10:57:40 UTC 2013 - [email protected] + +- update to AppArmor 2.8.1 (=2.8 branch r2069) + Bugfix release, http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_1 + Most important changes are: + - add various missing parts to profiles and abstractions + - fix a possible x conflict with hats or child profiles in + apparmor_parser + - fix and speedup stdin handling in aa-decode + - various other bugfixes + - add pkgconfig support to libapparmor +- remove upstream(ed) patches + +------------------------------------------------------------------- +Mon Dec 3 20:58:04 UTC 2012 - [email protected] + +- verify tarball with gpg-offline + +------------------------------------------------------------------- +Tue Sep 25 13:55:56 UTC 2012 - [email protected] + +- fix directory flags for /etc/apparmor.d to be in sync between + -parser and -profiles subpackage + +------------------------------------------------------------------- +Fri Sep 21 19:58:32 UTC 2012 - [email protected] + +- remove %stop_on_removal for no longer existing aaeventd (bnc#781564) +- don't hide TeX output when building the parser and techdoc + +------------------------------------------------------------------- +Thu Aug 9 23:31:26 UTC 2012 - [email protected] + +- clear and update inconsistent profile cache (bnc#774529) + +------------------------------------------------------------------- +Sun Aug 5 16:05:44 UTC 2012 - [email protected] + +- abstractions/bash: update /bin/ls to also match /usr/bin/ls (usrMerge) + +------------------------------------------------------------------- +Mon Jul 30 08:17:01 UTC 2012 - [email protected] + +- Add required fonts for new TeXLive 2012 + +------------------------------------------------------------------- +Fri Jul 6 22:33:39 UTC 2012 - [email protected] + +- update /bin/ping profile to also match /usr/bin/ping (usrMerge) + +------------------------------------------------------------------- +Sat Jun 2 19:55:14 UTC 2012 - [email protected] + +- update to AppArmor 2.8.0 (= r2047) + - new utility aa-easyprof - templated profile generation tool (the resulting + profile may be less strict than profiles generated with genprof/logprof) + - various small bugfixes +- removed upstreamed patches + +------------------------------------------------------------------- +Tue May 8 19:30:23 UTC 2012 - [email protected] + +- add apparmor-techdoc.patch to remove traces of the build time in PDF files + +------------------------------------------------------------------- +Sat May 5 20:25:49 UTC 2012 - [email protected] + +- update to AppArmor 2.8 beta5 (= 2.7.103 / r2031) + - new utility aa-exec to confine a program with the specified AppArmor profile + - add support for mount rules + - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8 for full upstream + changelog +- removed upstreamed and backported patches +- remove outdated autobuild and "disable repo" patches that were disabled since + the AppArmor 2.7 package +- create the Immunix::SubDomain compat perl module only for openSUSE <= 12.1 + (bnc#720617 #c7) + +------------------------------------------------------------------- +Mon Apr 16 21:16:41 UTC 2012 - [email protected] + +- replace patch for dnsmasq profile with upstream patch (bnc#738905) + +------------------------------------------------------------------- +Fri Apr 13 22:22:27 UTC 2012 - [email protected] + +- add apparmor-r2022-log-parser-network-bnc755923.patch - logprof didn't + create network rules because of changed log format (bnc#755923, lp#800826) +- add profile for samba winbindd (bnc#748499) + +------------------------------------------------------------------- +Fri Apr 6 13:38:11 CEST 2012 - [email protected] + +- fix dnsmasq profile (bnc#738905) + +------------------------------------------------------------------- +Thu Feb 9 19:01:07 UTC 2012 - [email protected] + +- add 0001-fix-for-lp929531.patch to allow reading + /sys/devices/system/cpu/online in abstractions/base (lp#929531) + +------------------------------------------------------------------- +Tue Jan 31 09:53:06 UTC 2012 - [email protected] + +- Update to AppArmor 2.7.2 (= 2.7 branch / r1894) + - move various permissions from httpd2-prefork profile to + abstractions/apache2-common. Backward-incompatible change: *.htaccess + files are no longer allowed for ^HANDLING_UNTRUSTED_INPUT + - allow access for more /usr/lib*/samba/ files for smbd (bnc#725967#c5) + - allow various .conf files for dovecot (lp#458922) + - disallow wl for *.so in @{HOME}/.pki/nssdb/ in abstractions/private-files + and abstractions/private-files-strict (lp#911847) + - update abstractions/kde, private-files* and ubuntu-browsers.d/user-files + to use ~/.kde4, not only ~/.kde (bnc#741592) + - block write access to ~/.kde{,4}/env in abstractions/private-files + (lp#914190) + - allow write access for personal dictionary etc. in abstractions/aspell + (lp#917859) + - when using genprof for a script, include read access to the script itsself + - automatically include abstractions/python or abstractions/ruby for + python/ruby scripts + - add profile for smbldap-useradd and allow smbd to call it (bnc#738041) + - allow creation of the .config directory in abstractions/enchant (lp#914184) + - allow TFTP read-only access in dnsmasq profile (lp#905412) + - allow capability dac_read_search for syslog-ng (bnc#731876) + - add p11-kit abstraction and include it in abstractions/authentification + (lp#912754, lp#912752) + - add audacity to abstractions/ubuntu-media-players (lp#899963) + - allow software-center, fireclam plugin, [tT]unar, exo-open, kate and + /dev/nvidia* in abstractons/ubuntu-browsers.d/* (lp#662906, lp#562831, + lp#890894, lp#890894, lp#884748) + - fix typo for multiarch gconf-modules in abstractions/base (lp#904548) + - allow avahi to do dbus introspection (lp#769148) + - allow access to ~/.fonts.conf.d in abstractions/fonts (lp#870992) + - allow transmission in abstractions/ubuntu-bittorrent-clients (lp#852062) + - allow reading ~/.cups/client.conf and ~/.cups/lpoptions in + abstractions/cups-client (lp#887992) + - allow read access of /etc/python{2,3}.[0-7]*/sitecustomize.py in + abstractions/python (lp#860856) + - various updates to the sshd profile (lp#817956) + - (and some more changes I already included in the apparmor-2.7-branch.diff) + +------------------------------------------------------------------- +Tue Jan 3 23:52:38 UTC 2012 - [email protected] + +- Update to AppArmor 2.7.0 (= r1858) + - make traceroute6 work (bnc#733312) + - allow access to pyconfig.h in abstractions/python (lp#840734) + - fix logprof/genprof for hex-encoded program filenames (= filenames + containing space etc.) +- add apparmor-2.7-branch.diff with some upstreamed fixes: + - usr.sbin.smbd needs read access for /etc/netgroup (bnc#738041) + - create /etc/apparmor.d/tunables/multiarch.d as directory, not as file + - fix syntax error in abstractons/python + +------------------------------------------------------------------- +Tue Nov 29 18:34:54 CET 2011 - [email protected] + +- changed a $ -> % (typo) + +------------------------------------------------------------------- +Sat Nov 26 21:52:31 UTC 2011 - [email protected] + +- package subdomain.conf only in -parser, not in -utils package +- package libapparmor.so and libimmunix.so only in libapparmor-devel, + not in libapparmor1 +- make Provides for perl-libapparmor versioned to avoid self-Obsoletes +- move libapparmor.a and libimmunix.a from libapparmor1 to + libapparmor-devel package + +------------------------------------------------------------------- +Thu Nov 10 20:16:24 UTC 2011 - [email protected] + +- update to AppArmor 2.7.0 rc2 + Most of the changes since rc1 were already included as patches. + Additional changes: + - fix logprof/genprof to recognize "mknod" in audit.log + - fix libapparmor python bindings to compile with python 3 + - fix wrong status message in initscript if apparmor-utils are not installed + - parser/Makefile: fix some warnings, always respect CXX and LDFLAGS + - fix some warnings in utils/Makefile +- remove 4 upstreamed patches +- remove mkdir /etc/apparmor.d/disable - that's done by upstream Makefile now +- update line numbers in 2 patches + +------------------------------------------------------------------- +Tue Nov 1 17:39:29 UTC 2011 - [email protected] + +- make abstractions/winbind working on 64bit systems +- allow loading the libraries for samba "vfs objects" also on 32bit ++++ 310 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:12.2:Update/.apparmor.1259.new/apparmor.changes New: ---- apparmor-2.5.1-edirectory-profile apparmor-2.8.1.tar.gz apparmor-2.8.1.tar.gz.asc apparmor-abstractions-mysql-path.diff apparmor-enable-profile-cache.diff apparmor-profile-editor.desktop apparmor-profile-editor.png apparmor-samba-include-permissions-for-shares.diff apparmor-utils-string-split apparmor-utils-subdomain-compat apparmor.changes apparmor.keyring apparmor.spec baselibs.conf rpmlintrc update-trans.sh usr.sbin.winbindd ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ ++++ 824 lines (skipped) ++++++ apparmor-2.5.1-edirectory-profile ++++++ From: Jeff Mahoney <[email protected]> Subject: apparmor-profiles: Add support for eDirectory calls from nscd References: bnc#621394 eDirectory hooks into nscd and provides its own libraries. In order for this to operate properly with AppArmor, it needs to be told about these libraries. This patch adds a new abstract profile and includes it in the nameservice profile. Signed-off-by: Jeff Mahoney <[email protected]> --- profiles/apparmor.d/abstractions/nameservice | 3 +++ profiles/apparmor.d/abstractions/novell-edirectory | 13 +++++++++++++ 2 files changed, 16 insertions(+) --- a/profiles/apparmor.d/abstractions/nameservice +++ b/profiles/apparmor.d/abstractions/nameservice @@ -70,6 +70,9 @@ # kerberos #include <abstractions/kerberosclient> + # Novell eDirectory + #include <abstractions/novell-edirectory> + # TCP/UDP network access network inet stream, network inet6 stream, --- /dev/null +++ b/profiles/apparmor.d/abstractions/novell-edirectory @@ -0,0 +1,13 @@ +# $Id$ +# ------------------------------------------------------------------ +# +# Copyright (C) 2010 Novell/SUSE +# +# This program is free software; you can redistribute it and/or +# modify it under the terms of version 2 of the GNU General Public +# License published by the Free Software Foundation. +# +# ------------------------------------------------------------------ + + /opt/novell/eDirectory/lib/lib*so* r, + /opt/novell/eDirectory/lib64/lib*so* r, ++++++ apparmor-abstractions-mysql-path.diff ++++++ === modified file 'profiles/apparmor.d/abstractions/mysql' --- profiles/apparmor.d/abstractions/mysql 2010-12-20 20:29:10 +0000 +++ profiles/apparmor.d/abstractions/mysql 2013-01-11 21:50:19 +0000 @@ -1,6 +1,7 @@ # ------------------------------------------------------------------ # # Copyright (C) 2002-2006 Novell/SUSE +# Copyright (C) 2013 Christian Boltz # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public @@ -9,5 +10,6 @@ # ------------------------------------------------------------------ /var/lib/mysql/mysql.sock rw, - /usr/share/mysql/charsets/ r, - /usr/share/mysql/charsets/*.xml r, + /{var/,}run/mysql/mysql.sock rw, + /usr/share/{mysql,mysql-community-server,mariadb}/charsets/ r, + /usr/share/{mysql,mysql-community-server,mariadb}/charsets/*.xml r, ++++++ apparmor-enable-profile-cache.diff ++++++ Enable caching of profiles. This speeds up loading the (unchanged) profiles about 20 times. Upstream doesn't enable caching because the cache directory is not writeable at the time profiles are loaded in Ubuntu. See also bnc#689458 Signed-off by: Christian Boltz <[email protected]> --- a/parser/parser.conf_ORIG 2011-10-09 20:59:31.000000000 +0200 +++ b/parser/parser.conf 2011-10-09 21:00:15.000000000 +0200 @@ -28,7 +28,7 @@ # match-string "pattern=aadfa audit perms=crwxamlk/ user::other" ## Turn creating/updating of the cache on by default -#write-cache +write-cache ## Show cache hits #show-cache ++++++ apparmor-profile-editor.desktop ++++++ [Desktop Entry] Encoding=UTF-8 Name=AppArmor Profile Editor Comment=Edit AppArmor profiles Exec=profileeditor %f Terminal=false Type=Application Icon=apparmor-profile-editor Categories=Utility;TextEditor; X-KDE-SubstituteUID=true ++++++ apparmor-samba-include-permissions-for-shares.diff ++++++ Samba generates a profile sniplet with permissions for all shares at start using the update-apparmor-samba-profile script. This patch includes the autogenerated profile sniplet it in the smbd profile. It also creates a dummy profile sniplet to avoid "file not found" errors when AppArmor is started before samba was started. References: https://bugzilla.novell.com/show_bug.cgi?id=688040 Signed-off-by: Christian Boltz <[email protected]> === added file 'profiles/apparmor.d/local/usr.sbin.smbd-shares' --- profiles/apparmor.d/local/usr.sbin.smbd-shares 1970-01-01 00:00:00 +0000 +++ profiles/apparmor.d/local/usr.sbin.smbd-shares 2011-10-19 09:40:05 +0000 @@ -0,0 +1,2 @@ +# This file will be replaced by rules for all samba shares at samba start. +# Do not edit! === modified file 'profiles/apparmor.d/usr.sbin.smbd' --- profiles/apparmor.d/usr.sbin.smbd 2011-08-27 18:50:42 +0000 +++ profiles/apparmor.d/usr.sbin.smbd 2011-10-19 09:37:04 +0000 @@ -46,6 +46,10 @@ @{HOMEDIRS}/** lrwk, + # permissions for all configured shares + # autogenerated by update-apparmor-samba-profile at samba start + #include <local/usr.sbin.smbd-shares> + # Site-specific additions and overrides. See local/README for details. #include <local/usr.sbin.smbd> } ++++++ apparmor-utils-string-split ++++++ From: Jeff Mahoney <[email protected]> Subject: AppArmor.pm: Split long string The string split here ends up not displaying well in yast. --- utils/Immunix/AppArmor.pm | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) --- a/utils/Immunix/AppArmor.pm +++ b/utils/Immunix/AppArmor.pm @@ -6300,7 +6300,12 @@ sub check_qualifiers($) { if ($cfg->{qualifiers}{$program}) { unless($cfg->{qualifiers}{$program} =~ /p/) { - fatal_error(sprintf(gettext("\%s is currently marked as a program that should not have it's own profile. Usually, programs are marked this way if creating a profile for them is likely to break the rest of the system. If you know what you're doing and are certain you want to create a profile for this program, edit the corresponding entry in the [qualifiers] section in /etc/apparmor/logprof.conf."), $program)); + fatal_error(sprintf(gettext( +"\%s is currently marked as a program that should not have its own\n". +"profile. Usually, programs are marked this way if creating a profile for \n". +"them is likely to break the rest of the system. If you know what you're\n". +"doing and are certain you want to create a profile for this program, edit\n". +"the corresponding entry in the [qualifiers] section in /etc/apparmor/logprof.conf."), $program)); } } } ++++++ apparmor-utils-subdomain-compat ++++++ From: Jeff Mahoney <[email protected]> Subject: apparmor-utils: Add Immunix::SubDomain alias This patch adds an alias so that 'use Immunix::SubDomain;' works with older code. Acked-by: Jeff Mahoney <[email protected]> Also patch utils/Makefile to actually install SubDomain.pm The SubDomain compat module is only needed by openSUSE, therefore this patch will not be upstreamed. Signed-off-by: Christian Boltz <[email protected]> --- utils/Immunix/SubDomain.pm | 5 +++++ 1 file changed, 5 insertions(+) --- /dev/null +++ b/utils/Immunix/SubDomain.pm @@ -0,0 +1,5 @@ +# Use of Immunix::SubDomain is deprecated. +# Use Immunix::AppArmor directly instead. +use Immunix::AppArmor; +*Immunix::SubDomain:: = *Immunix::AppArmor::; +1; --- a/utils/Makefile 2011-05-27 21:08:50.000000000 +0200 +++ b/utils/Makefile 2011-09-10 17:57:55.000000000 +0200 @@ -31,7 +31,7 @@ PERLTOOLS = aa-genprof aa-logprof aa-aut aa-unconfined aa-notify aa-disable aa-exec TOOLS = ${PERLTOOLS} aa-decode aa-status MODULES = ${MODDIR}/AppArmor.pm ${MODDIR}/Repository.pm \ - ${MODDIR}/Config.pm ${MODDIR}/Severity.pm + ${MODDIR}/Config.pm ${MODDIR}/Severity.pm ${MODDIR}/SubDomain.pm PYTOOLS = aa-easyprof PYSETUP = python-tools-setup.py ++++++ apparmor.keyring ++++++ pub 1024D/AC931271 2006-02-13 [expires: 2014-02-15] uid AppArmor Development Team (AppArmor signing key) <[email protected]> uid AppArmor Development Team (AppArmor signing key) <[email protected]> sub 4096g/79C0E55B 2006-02-13 [expires: 2011-02-12] -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2.0.19 (GNU/Linux) mQGiBEPw2O4RBAD8PZ+0NfCEIBjuDXQjdb6vi642wRIrN7v67GTfNQ+uggGKESRe grFumlArz5MbJVLinyIsCqigwyBpspXeyP6cMrzTudmmwQJJN9caejoAu5029wjX WTrfwsPbqavwcQSfZlVJOKjLplUCzOcb808UOMYISz5mZmFGzfJpPLTMtwCg4CH+ e9ZoyqMz1GrkPqjWeOVHgjMD/1D/PW8c1DzBar6zaxNXtQOLtlWn5eqLwWJX7XhG DM2YPD0vWyPYnx/5agg6YyouO6xiNi4lPDvEUu8+PqHHZz7Cl9Iu36ruAuhc87vQ U10frmHHcdNoko/aetFfNSrXwD+mEhhrob0kIEEIe4K+KfTPKC+aQuUVwciuDiM1 +7ukA/46YWHIwkqFCUzjhJwu5hb4kGeYS1bcMrD5xCMcVzUdJPFcmz1AVclwAZ61 PYRRUs4xOJ5QeQty/1n4L5ylOJ8mfzXartC4ZY0OqDrXgLg/HhxPfvLfKvZ9xvBq AIIJeqGmN2Dq/+Q70kA/5Ck4hUABBoTMQZABWQkCh3POwMCwhbRMQXBwQXJtb3Ig RGV2ZWxvcG1lbnQgVGVhbSAoQXBwQXJtb3Igc2lnbmluZyBrZXkpIDxhcHBhcm1v ckBsaXN0cy51YnVudHUuY29tPohqBBMRCgAqAhsDAh4BAheAAhkBBQsJCAcDBRUK CQgLBRYCAwEABQJNXEDoBQkPDwJtAAoJEIE3mLmskxJxVFgAnjSeh2O03PKF0UJz T13Fn1yK1IvaAJ9bQ3EuAw03b/RkIQUx5SQSXyDDdLRQQXBwQXJtb3IgRGV2ZWxv cG1lbnQgVGVhbSAoQXBwQXJtb3Igc2lnbmluZyBrZXkpIDxhcHBhcm1vci1kZXZA Zm9yZ2Uubm92ZWxsLmNvbT6IZwQTEQIAJwIbAwIeAQIXgAULCQgHAwUVCgkICwUW AgMBAAUCTVxBAwUJDw8CbQAKCRCBN5i5rJMScQA9AJ9S5QhjNyhTMenrFysAVe8C qziLRgCfVwP9EU7hWMZVHB4I56YG26Z66NG5BA0EQ/DbBhAQAIGpFSylXH+UNf/z 71UcvcRGIy62qNu3jq49/Tv0RapP03sdh/XZrWQKTeXlw6OHJFog673lvICqd8C5 O8/2QeE8+c4HjO1QdwUlY5ziYkxOEs3+HgA0RNpWH7tZCAYFf+LB1J8FxTG9uUYf ZOBN+2UQPo6aui+9cbRpqhzfTkFCqI8/U0Q3sJ8183Toj4iUTSx8SMeVNixZnMMe 9nb0yAynQPIvdZ5aOCNFQTjL/LCJFbvtY54n3xuI3DKBs2RinO9ARvGXF4GZ2IfM IwsW+pfbf4g+ZVW0bRiT7aJ41H3OIvgDEYT5W9q4AwaTJUtkMT5tNWnGtgZFtbuI wM3NfjQVJRUsUNYVC1Zphp+FYAeYLhQeK29a7i1jFJDn1GVBRotPGQ96nhKo62Ka vkOSAIZ35cVjVSDsZ7xwZW0awOUUxwZsvZJ+iUGcYGClYk5PH46a9+w8m/THC/uM savn8nWFANLCyUnoP7zapu7UtyrQbDfbyoj04rU9X2/gwM9FYJVf+CZOh+FVjzY2 iUWHaofK2UnXEF1FCY0mWQx021IezmuZd97D32mq7tc3z7oXI3nCV97a0tWZI319 ewlJjLf1syHj+ODDm7ZLbCXal9C2hrIDEjj/zsI6+d5x3NctTmRS/0nDujByZ2A2 Vc9N5lvVR8wfGWC3QPgUgVIgR+0vAAQND/43Jbw/cnJbQDzVphv6toJlvATi3GmJ o34g2f7FooNcNgN8qIJSBg195ddCtZWlyI0LQzt68pV2cNsf3wWrJQITm0LGmq13 D4nWLqN4da0F08vtMLIaTFPe1dR+l0FQyiZbxGo8kuo9D4nY0tT78V42hdMA+vL6 VybHyuvZrYSITNXEBaC5VI8+Bs57XzqoUFrduDCJPstykQoc1jdtV1x2wbaBYZRT MFOkqNLYBgoMFV2aJtYzXWZ4XIcv9RJNsLF8bHXehV/NJ+0RjSeSKh8NnxO5PLDe gBrmsX9xQ1UiTjG+AKcR/O5Oww1sQbkUbpXrvXzRziodyJzsbAB28MtZY4NgQFp5 eV502aXM2o5DtDLsR6l+uFrAWK3zAdnbaco8ehqZQ3ILi+vfaVblrNIjKulbOLIC WkeOuJ7NVn1MJCstq4grawy8JzZXQjkULVKHVcfcJJqfBuzs4QEWwzhuromsI5FQ DKxaz9brdu6izrP/N/zygjCf4kNYf3rHyVqmpcVT718EJeQOZ8u0KVsexuHMi8cn fFb8LFPOxzJ5/G7oQ4/0AC7GQgLWrhqjPcNRkWN351XDSgpaA4KAcv8xpqRUgDKO DmW4+MvlZ7de+TFkNyh1cWJMG7I82WIA2FjDgTvAZVeNcUnPLKljPF5u/hFM27JO oYJCqg/kdmEr3ohPBBgRAgAPBQJD8NsGAhsMBQkJZgGAAAoJEIE3mLmskxJx04gA oK91aD8BBVjrm7gTPHI/+3xlrZjdAJwKmYhHdKq+HotT//yKq6SYn/EiOA== =Cn3y -----END PGP PUBLIC KEY BLOCK----- ++++++ baselibs.conf ++++++ pam_apparmor supplements "packageand(pam_apparmor:pam-<targettype>)" libapparmor1 obsoletes "libapparmor-<targettype> <= <version>" provides "libapparmor-<targettype> = <version>" ++++++ rpmlintrc ++++++ addFilter("devel-file-in-non-devel-package.*/usr/lib64/libJNIChangeHat.so") addFilter("devel-file-in-non-devel-package.*/usr/lib/libJNIChangeHat.so") addFilter("shlib-policy-name-error.*libJNIChangeHat0") ++++++ update-trans.sh ++++++ CFILES=" deprecated/management/applets/apparmorapplet-gnome/src/apparmor-applet.c deprecated/management/applets/apparmorapplet-gnome/src/preferences_dialog.c deprecated/management/applets/apparmorapplet-gnome/src/reject_list.c parser/parser_alias.c parser/parser_include.c parser/parser_interface.c parser/parser_lex.l parser/parser_main.c parser/parser_merge.c parser/parser_misc.c parser/parser_policy.c parser/parser_regex.c parser/parser_symtab.c parser/parser_variable.c parser/parser_yacc.y " CPPFILES=" deprecated/management/profile-editor/src/AboutDialog.cpp deprecated/management/profile-editor/src/AboutDialog.h deprecated/management/profile-editor/src/Configuration.cpp deprecated/management/profile-editor/src/Preferences.cpp deprecated/management/profile-editor/src/Preferences.h deprecated/management/profile-editor/src/profileeditor.cpp deprecated/management/profile-editor/src/SearchAllProfiles.cpp deprecated/management/profile-editor/src/SearchAllProfiles.h parser/libapparmor_re/regexp.yy " PERLFILES=" utils/aa-repo.pl utils/audit utils/autodep utils/complain utils/enforce utils/genprof utils/logprof utils/Reports.pm utils/SubDomain.pm utils/unconfined " ARGS="--keyword=_ --keyword=N_ -n --force-po" xgettext $ARGS --output=apparmor-C.pot -L C $CFILES xgettext $ARGS --output=apparmor-CPP.pot -L C++ $CPPFILES xgettext $ARGS --output=apparmor-PERL.pot -L Perl $PERLFILES msgcat apparmor-*.pot > apparmor.pot sed \ -e 's/Project-Id-Version: PACKAGE VERSION/Project-Id-Version: apparmor/g' \ -e 's/PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE/PO-Revision-Date: 2009-02-05 13:38/' \ -e 's/Report-Msgid-Bugs-To: /Report-Msgid-Bugs-To: [email protected]/' \ -e 's/Last-Translator: FULL NAME <EMAIL@ADDRESS>/Last-Translator: Novell Language <[email protected]>/' \ -e 's/Language-Team: LANGUAGE <[email protected]>/Language-Team: Novell Language <[email protected]>/' \ -e 's/Content-Type: text\/plain; charset=CHARSET/Content-Type: text\/plain; charset=UTF-8/' \ < apparmor.pot > apparmor.pot.new mv apparmor.pot.new apparmor.pot for file in $(find . -name '*.po'); do f=$(basename $file) msgmerge -U apparmor.pot $file if [ -e "po/$f" ]; then msgcat $file po/$f > $f mv $f po/$f else cp $file po/$f fi done ++++++ usr.sbin.winbindd ++++++ # Last Modified: Mon Mar 26 20:28:18 2012 #include <tunables/global> /usr/sbin/winbindd { #include <abstractions/base> #include <abstractions/nameservice> /etc/samba/dhcp.conf r, /etc/samba/passdb.tdb rwk, /etc/samba/secrets.tdb rwk, /proc/sys/kernel/core_pattern r, /tmp/.winbindd/ w, /usr/lib*/samba/idmap/*.so mr, /usr/lib*/samba/nss_info/*.so mr, /usr/sbin/winbindd mr, /var/lib/samba/account_policy.tdb rwk, /var/lib/samba/gencache.tdb rwk, /var/lib/samba/gencache_notrans.tdb rwk, /var/lib/samba/group_mapping.tdb rwk, /var/lib/samba/messages.tdb rwk, /var/lib/samba/netsamlogon_cache.tdb rwk, /var/lib/samba/serverid.tdb rwk, /var/lib/samba/winbindd_cache.tdb rwk, /var/lib/samba/winbindd_privileged/pipe w, /var/log/samba/cores/ rw, /var/log/samba/cores/winbindd/ rw, /var/log/samba/cores/winbindd/** rw, /var/log/samba/log.wb-* w, /var/log/samba/log.winbindd rw, /{var/,}run/samba/winbindd.pid rwk, # Site-specific additions and overrides. See local/README for details. #include <local/usr.sbin.winbindd> } -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
