Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2014-10-06 12:06:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apparmor" Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2014-09-10 07:27:35.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.apparmor.new/apparmor.changes 2014-10-06 12:06:17.000000000 +0200 @@ -1,0 +2,18 @@ +Sun Oct 5 18:53:43 UTC 2014 - [email protected] + +- update to AppArmor 2.8.97 (aka 2.9 beta3 aka r2721) + - several bugfixes in python and C tools + - rename "__unused" to "unused" in apparmor_parser to fix compilation + on openSUSE <= 13.1 x86_64 (bnc#895495) + - usr.lib.dovecot.auth profile: allow access to auth-token-secret.dat + - various small profile improvements + - update and add several testcases +- drop upstreamed patch apparmor-profiles-dnsmasq-iface-mtu.patch +- re-number remaining patches + +------------------------------------------------------------------- +Sun Sep 28 19:25:32 UTC 2014 - [email protected] + +- split apparmor-profiles package into -profiles and -abstractions + +------------------------------------------------------------------- Old: ---- apparmor-2.8.96.tar.gz apparmor-2.8.96.tar.gz.asc apparmor-profiles-dnsmasq-iface-mtu.patch New: ---- apparmor-2.8.97.tar.gz apparmor-2.8.97.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.RB3Uu2/_old 2014-10-06 12:06:18.000000000 +0200 +++ /var/tmp/diff_new_pack.RB3Uu2/_new 2014-10-06 12:06:18.000000000 +0200 @@ -60,7 +60,7 @@ %if ! %{?distro:1}0 %define distro suse %endif -Version: 2.8.96 +Version: 2.8.97 Release: 0 Summary: AppArmor userlevel parser utility License: GPL-2.0+ @@ -80,16 +80,13 @@ Patch2: apparmor-samba-include-permissions-for-shares.diff # split a long string in AppArmor.pm. Not accepted upstream because they want a solution without hardcoded width. -Patch5: apparmor-utils-string-split +Patch3: apparmor-utils-string-split # Add support for eDirectory calls in abstractions/nameservice. Not accepted upstream (yet) because of open questions -Patch12: apparmor-2.5.1-edirectory-profile +Patch4: apparmor-2.5.1-edirectory-profile # Ruby 2.0 mkmf prefixes everything with $(DESTDIR), bnc#822277, [email protected] -Patch22: ruby-2_0-mkmf-destdir.patch - -# allow dnsmasq to read access to IPv6 config (bnc#892374) (commited upstream trunk r2657, 2.8 branch r2140) -Patch28: apparmor-profiles-dnsmasq-iface-mtu.patch +Patch5: ruby-2_0-mkmf-destdir.patch Url: https://launchpad.net/apparmor PreReq: sed @@ -304,10 +301,30 @@ %endif +%package abstractions +Summary: AppArmor abstractions and directory structure +License: GPL-2.0 and LGPL-2.1+ +Group: Productivity/Security +Requires: apparmor-parser(CAP_SYSLOG) +BuildArch: noarch + +%description abstractions +AppArmor abstractions (common parts used in various profiles) and +the /etc/apparmor.d/ directory structure. + +AppArmor is a file and network mandatory access control mechanism. +AppArmor confines processes to the resources allowed by the systems +administrator and can constrain the scope of potential security +vulnerabilities. + +This package is part of a suite of tools that used to be named +SubDomain. + %package profiles Summary: AppArmor profiles that are loaded into the apparmor kernel module License: GPL-2.0 and LGPL-2.1+ Group: Productivity/Security +Requires: apparmor-abstractions >= %{version} Requires: apparmor-parser(CAP_SYSLOG) Obsoletes: subdomain-profiles < %{version} Provides: subdomain-profiles = %{version} @@ -402,16 +419,14 @@ %setup -q %patch1 -p1 %patch2 -%patch5 -p1 -%patch12 +%patch3 -p1 +%patch4 # Ruby 2.0 mkmf prefixes every path with $(DESTDIR) %if 0%{?suse_version} > 1230 -%patch22 -p1 +%patch5 -p1 %endif -%patch28 -p1 - %build echo _libdir: %{_libdir} ruby: %{rb_sitearch} python: %{python3_sitearch} # test if _libdir breaks it or if it's broken by default on <= 12.1 @@ -628,22 +643,24 @@ %{_includedir}/sys/apparmor.h %{_includedir}/aalogparse/* -%files profiles +%files abstractions %defattr(644,root,root,755) %dir %{_sysconfdir}/apparmor.d/ %dir %{_sysconfdir}/apparmor.d/abstractions %config(noreplace) %{_sysconfdir}/apparmor.d/abstractions/* -%dir %{_sysconfdir}/apparmor.d/apache2.d %dir %{_sysconfdir}/apparmor.d/disable +%dir %{_sysconfdir}/apparmor.d/local +%dir %{_sysconfdir}/apparmor.d/tunables +%config(noreplace) %{_sysconfdir}/apparmor.d/tunables/* + +%files profiles +%defattr(644,root,root,755) +%dir %{_sysconfdir}/apparmor.d/apache2.d %config(noreplace) %{_sysconfdir}/apparmor.d/apache2.d/phpsysinfo %config(noreplace) %{_sysconfdir}/apparmor.d/bin.* %config(noreplace) %{_sysconfdir}/apparmor.d/sbin.* %config(noreplace) %{_sysconfdir}/apparmor.d/usr.* -%dir %{_sysconfdir}/apparmor.d/local %config(noreplace) %{_sysconfdir}/apparmor.d/local/* -%dir %{_sysconfdir}/apparmor.d/tunables -%config(noreplace) %{_sysconfdir}/apparmor.d/tunables/* -%dir %{_sysconfdir}/apparmor/ /usr/share/apparmor/extra-profiles/ %files utils @@ -814,6 +831,19 @@ %{insserv_cleanup} || true %endif +%post abstractions +%if %{distro} == "suse" + #restart_on_update boot.apparmor - but non-broken (bnc#853019) + # (copy&paste from parser postun script) + test -n "$FIRST_ARG" || FIRST_ARG=$1 + if test "$FIRST_ARG" -ge 1 ; then + if test "$YAST_IS_RUNNING" != "instsys" -a "$DISABLE_RESTART_ON_UPDATE" != yes ; then + test -x /bin/systemctl && /bin/systemctl daemon-reload >/dev/null 2>&1 || : + /etc/init.d/boot.apparmor status >/dev/null && /etc/init.d/boot.apparmor reload || : + fi + fi +%endif + %post profiles %if %{distro} == "suse" #restart_on_update boot.apparmor - but non-broken (bnc#853019) ++++++ apparmor-2.8.96.tar.gz -> apparmor-2.8.97.tar.gz ++++++ ++++ 66841 lines of diff (skipped) -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
