Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2026-06-16 13:46:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new.1981 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apparmor" Tue Jun 16 13:46:43 2026 rev:238 rq:1359559 version:5.0.1 Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2026-06-13 18:45:12.080106638 +0200 +++ /work/SRC/openSUSE:Factory/.apparmor.new.1981/apparmor.changes 2026-06-16 13:48:01.691711726 +0200 @@ -1,0 +2,15 @@ +Sun Jun 14 18:44:18 UTC 2026 - Christian Boltz <[email protected]> + +- update to AppArmor 5.0.1 + - several fixes (including boo#1267425) + - new profiles: glycin.bwrap and glycin.loaders + - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_5.0.1 + for the upstream changelog +- remove upstream(ed) patches: + - changes-since-v5.0.0.diff + - curl.diff + - who.diff +- remove revert-plasmashell.diff, profile was fixed upstream +- add lsblk-mr2147.diff: fix FSTYPE and UUID in lsblk (boo#1267853) + +------------------------------------------------------------------- Old: ---- apparmor-v5.0.0.tar.bz2 apparmor-v5.0.0.tar.bz2.asc changes-since-v5.0.0.diff curl.diff revert-plasmashell.diff who.diff New: ---- apparmor-v5.0.1.tar.bz2 apparmor-v5.0.1.tar.bz2.asc lsblk-mr2147.diff ----------(Old B)---------- Old:- remove upstream(ed) patches: - changes-since-v5.0.0.diff - curl.diff Old: - changes-since-v5.0.0.diff - curl.diff - who.diff Old: - who.diff - remove revert-plasmashell.diff, profile was fixed upstream - add lsblk-mr2147.diff: fix FSTYPE and UUID in lsblk (boo#1267853) Old: - curl.diff - who.diff - remove revert-plasmashell.diff, profile was fixed upstream ----------(Old E)---------- ----------(New B)---------- New:- remove revert-plasmashell.diff, profile was fixed upstream - add lsblk-mr2147.diff: fix FSTYPE and UUID in lsblk (boo#1267853) ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.rhAEFS/_old 2026-06-16 13:48:03.779798875 +0200 +++ /var/tmp/diff_new_pack.rhAEFS/_new 2026-06-16 13:48:03.783799041 +0200 @@ -51,11 +51,11 @@ %define CATALINA_HOME /usr/share/tomcat6 %define JAR_FILE changeHatValve.jar -%define tarversion v5.0.0 -%define pyeggversion 5.0.0 +%define tarversion v5.0.1 +%define pyeggversion 5.0.1 Name: apparmor -Version: 5.0.0 +Version: 5.0.1 Release: 0 Summary: AppArmor userlevel parser utility License: GPL-2.0-or-later @@ -86,21 +86,12 @@ # /usr/etc/krb5.conf - boo#1246689 - not submitted upstream yet since https://github.com/krb5/krb5/pull/1437/ is still open Patch11: kerberosclient-usrmerge.diff -# upstream changes in the 5.0 branch since 5.0.0 release -Patch12: changes-since-v5.0.0.diff +# lsblk: fix FSTYPE and UUID - submitted upstream https://gitlab.com/apparmor/apparmor/-/merge_requests/2147 +Patch12: lsblk-mr2147.diff # fix wg-quick profile - boo#1265394 - submitted upstream https://gitlab.com/apparmor/apparmor/-/merge_requests/2123 Patch13: wg-quick.diff -# fix curl profile for usage with rpmdevtools - boo#1266273 - submitted upstream https://gitlab.com/apparmor/apparmor/-/merge_requests/2125 -Patch14: curl.diff - -# fix who profile - boo#1265860 - https://gitlab.com/apparmor/apparmor/-/merge_requests/2109 merged into master, not picked into 5.0 branch yet -Patch15: who.diff - -# revert plasmashell changes - causes strange errors in openQA (to be debugged) -Patch16: revert-plasmashell.diff - PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: autoconf @@ -373,9 +364,6 @@ %patch -P 11 -p1 %patch -P 12 -p1 %patch -P 13 -p1 -%patch -P 14 -p1 -%patch -P 15 -p1 -%patch -P 16 -p1 %build export SUSE_ASNEEDED=0 @@ -650,6 +638,8 @@ %config(noreplace) %{_sysconfdir}/apparmor.d/free %config(noreplace) %{_sysconfdir}/apparmor.d/fusermount3 %config(noreplace) %{_sysconfdir}/apparmor.d/gs +%config(noreplace) %{_sysconfdir}/apparmor.d/glycin.bwrap +%config(noreplace) %{_sysconfdir}/apparmor.d/glycin.loaders %config(noreplace) %{_sysconfdir}/apparmor.d/hostname %config(noreplace) %{_sysconfdir}/apparmor.d/iotop-c %config(noreplace) %{_sysconfdir}/apparmor.d/isisd ++++++ libapparmor.spec ++++++ --- /var/tmp/diff_new_pack.rhAEFS/_old 2026-06-16 13:48:03.839801379 +0200 +++ /var/tmp/diff_new_pack.rhAEFS/_new 2026-06-16 13:48:03.843801546 +0200 @@ -17,10 +17,10 @@ # -%define tarversion v5.0.0 +%define tarversion v5.0.1 Name: libapparmor -Version: 5.0.0 +Version: 5.0.1 Release: 0 Summary: Utility library for AppArmor License: LGPL-2.1-or-later ++++++ apparmor-v5.0.0.tar.bz2 -> apparmor-v5.0.1.tar.bz2 ++++++ ++++ 4676 lines of diff (skipped) ++++++ lsblk-mr2147.diff ++++++ commit 0655df94d6ebcf5685bb70ce5221b2b407270aad Author: Christian Boltz <[email protected]> Date: Sun Jun 14 17:38:24 2026 +0200 lsblk: allow reading / to fix FSTYPE and UUID listing Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1267853 The bugreport contains some strace output showing what's going on, and why this is needed. diff --git a/profiles/apparmor.d/lsblk b/profiles/apparmor.d/lsblk index d5ac7f155..a0fef19ea 100644 --- a/profiles/apparmor.d/lsblk +++ b/profiles/apparmor.d/lsblk @@ -28,7 +28,7 @@ profile lsblk /usr/bin/lsblk { @{sys}/devices/platform/** r, # needed for --fs (show filesystem information) - deny / r, # no idea why this would be needed (only seen for --fs) + / r, # needed for FSTYPE and UUID, see https://bugzilla.opensuse.org/show_bug.cgi?id=1267853 /dev/nvme* r, /dev/dm-* r, /dev/sd* r,
