Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package apparmor for openSUSE:Factory
checked in at 2025-06-06 22:34:34
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/apparmor (Old)
and /work/SRC/openSUSE:Factory/.apparmor.new.19631 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apparmor"
Fri Jun 6 22:34:34 2025 rev:223 rq:1282447 version:4.1.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2025-05-23
14:27:49.873666271 +0200
+++ /work/SRC/openSUSE:Factory/.apparmor.new.19631/apparmor.changes
2025-06-06 22:34:44.776165574 +0200
@@ -1,0 +2,9 @@
+Tue Jun 3 18:12:39 UTC 2025 - Christian Boltz <suse-b...@cboltz.de>
+
+- replace workaround for boo#853019 with using %restart_on_update -
+ apparmor.service now contains a workaround to survive restart
+ (boo#1237462)
+- get posttrans of profiles and abstractions in sync
+- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)
+
+-------------------------------------------------------------------
New:
----
dovecot24.diff
BETA DEBUG BEGIN:
New:- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)
BETA DEBUG END:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ apparmor.spec ++++++
--- /var/tmp/diff_new_pack.CrKdxG/_old 2025-06-06 22:34:45.476194442 +0200
+++ /var/tmp/diff_new_pack.CrKdxG/_new 2025-06-06 22:34:45.480194607 +0200
@@ -82,6 +82,9 @@
# add path for precompiled cache (only done/applied if precompiled_cache is
enabled)
Patch7: apparmor-enable-precompiled-cache.diff
+# dovecot24: doveconf writes /tmp/doveconf.* (boo#1243008)
+Patch10: dovecot24.diff
+
PreReq: sed
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: autoconf
@@ -350,6 +353,7 @@
%if %{with precompiled_cache}
%patch -P 7
%endif
+%patch -P 10
%build
export SUSE_ASNEEDED=0
@@ -851,10 +855,9 @@
%service_del_postun apparmor.service
%posttrans abstractions
-# workaround for bnc#904620#c8 / lp#1392042
-rm -f /var/cache/apparmor/* 2>/dev/null
-#restart_on_update apparmor - but non-broken (bnc#853019)
-systemctl is-active -q apparmor && systemctl reload apparmor ||:
+# workaround for bnc#904620#c8 / lp#1392042 and bnc#1242553
+apparmor_parser --purge-cache
+%restart_on_update apparmor
%post profiles
# delete old cache (location up to 2.12)
@@ -878,8 +881,7 @@
%posttrans profiles
# workaround for bnc#904620#c8 / lp#1392042 and bnc#1242553
apparmor_parser --purge-cache
-#restart_on_update apparmor - but non-broken (bnc#853019)
-systemctl is-active -q apparmor && systemctl reload apparmor ||:
+%restart_on_update apparmor
%if %{with tomcat}
%post -n tomcat_apparmor -p /sbin/ldconfig
++++++ dovecot24.diff ++++++
Index: profiles/apparmor.d/usr.sbin.dovecot
===================================================================
--- profiles/apparmor.d/usr.sbin.dovecot.orig 2025-04-08 18:20:05.000000000
+0200
+++ profiles/apparmor.d/usr.sbin.dovecot 2025-06-03 20:28:58.853907837
+0200
@@ -46,6 +46,7 @@ profile dovecot /usr/{bin,sbin}/dovecot
@{PROC}/@{pid}/mounts r,
@{PROC}/sys/fs/suid_dumpable r,
@{PROC}/sys/kernel/core_pattern r,
+ owner /tmp/doveconf.* rw,
/usr/bin/doveconf rix,
/usr/lib*/dovecot/anvil mrPx,
/usr/lib*/dovecot/auth mrPx,
