Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2022-03-28 17:00:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new.1900 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apparmor" Mon Mar 28 17:00:35 2022 rev:165 rq:964948 version:3.0.4 Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2022-02-11 23:06:49.090507312 +0100 +++ /work/SRC/openSUSE:Factory/.apparmor.new.1900/apparmor.changes 2022-03-28 17:01:27.101041960 +0200 @@ -1,0 +2,8 @@ +Thu Mar 24 14:09:58 UTC 2022 - Noel Power <[email protected]> + +- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on + /proc/{pid}/fd for samba-bgqd (bnc#1196850). +- Add update-usr-sbin-smbd.diff to add new rule to allow reading of + openssl.cnf (bnc#1195463). + +------------------------------------------------------------------- New: ---- update-samba-bgqd.diff update-usr-sbin-smbd.diff ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.XS6QVk/_old 2022-03-28 17:01:27.709042786 +0200 +++ /var/tmp/diff_new_pack.XS6QVk/_new 2022-03-28 17:01:27.713042791 +0200 @@ -77,6 +77,14 @@ # make <apache2.d> include in apache extra profile optional to make openQA happy (boo#1178527) Patch6: apache-extra-profile-include-if-exists.diff +# bsc#1196850 add rule to deal with 'DENIED' open of /proc/{pid}/fd +# see (https://gitlab.com/apparmor/apparmor/-/merge_requests/860) +# bsc#1195463 add rule to allow reading of openssl.cnf +# see (https://gitlab.com/apparmor/apparmor/-/merge_requests/862) +Patch7: update-samba-bgqd.diff +# bsc#1195463 add rule to allow reading of openssl.cnf +# see (https://gitlab.com/apparmor/apparmor/-/merge_requests/862) +Patch8: update-usr-sbin-smbd.diff PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -340,6 +348,8 @@ %patch3 -p1 %patch4 %patch5 +%patch7 -p1 +%patch8 -p1 %build %define _lto_cflags %{nil} ++++++ update-samba-bgqd.diff ++++++ Index: apparmor-3.0.4/profiles/apparmor.d/samba-bgqd =================================================================== --- apparmor-3.0.4.orig/profiles/apparmor.d/samba-bgqd +++ apparmor-3.0.4/profiles/apparmor.d/samba-bgqd @@ -6,11 +6,14 @@ profile samba-bgqd /usr/lib*/samba/samba include <abstractions/base> include <abstractions/cups-client> include <abstractions/nameservice> + include <abstractions/openssl> include <abstractions/samba> signal receive set=term peer=smbd, @{PROC}/sys/kernel/core_pattern r, + owner @{PROC}/@{pid}/fd/ r, + @{run}/samba/samba-bgqd.pid wk, /usr/lib*/samba/samba-bgqd m, ++++++ update-usr-sbin-smbd.diff ++++++ Index: apparmor-3.0.4/profiles/apparmor.d/usr.sbin.smbd =================================================================== --- apparmor-3.0.4.orig/profiles/apparmor.d/usr.sbin.smbd +++ apparmor-3.0.4/profiles/apparmor.d/usr.sbin.smbd @@ -8,6 +8,7 @@ profile smbd /usr/{bin,sbin}/smbd { include <abstractions/consoles> include <abstractions/cups-client> include <abstractions/nameservice> + include <abstractions/openssl> include <abstractions/samba> include <abstractions/user-tmp> include <abstractions/wutmp>
