Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2020-10-15 13:44:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new.3486 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apparmor" Thu Oct 15 13:44:02 2020 rev:143 rq:841767 version:2.13.4 Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2020-10-03 18:53:50.237370739 +0200 +++ /work/SRC/openSUSE:Factory/.apparmor.new.3486/apparmor.changes 2020-10-15 13:44:14.613149314 +0200 @@ -1,0 +2,12 @@ +Wed Oct 14 12:16:52 UTC 2020 - Christian Boltz <[email protected]> + +- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, + cap_checkpoint_restore.diff) + +------------------------------------------------------------------- +Thu Oct 8 20:56:45 UTC 2020 - Christian Boltz <[email protected]> + +- %service_del_postun_without_restart only works for Tumbleweed, + keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x + +------------------------------------------------------------------- New: ---- cap_checkpoint_restore.diff ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.XGrL3e/_old 2020-10-15 13:44:16.289149968 +0200 +++ /var/tmp/diff_new_pack.XGrL3e/_new 2020-10-15 13:44:16.293149970 +0200 @@ -81,6 +81,9 @@ # needs to go upstream Patch13: libvirt-leaseshelper.patch +# add CAP_CHECKPOINT_RESTORE to severity.db (https://gitlab.com/apparmor/apparmor/-/merge_requests/656, submitted upstream 2020-10-14 for 2.10..master) +Patch14: cap_checkpoint_restore.diff + PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build %define apparmor_bin_prefix /lib/apparmor @@ -379,6 +382,7 @@ %patch11 -p1 %patch12 -p1 %patch13 -p1 +%patch14 -p1 %build %define _lto_cflags %{nil} @@ -762,7 +766,12 @@ %postun parser # don't call try-restart, see bnc#853019 +%if 0%{?suse_version} <= 1500 +export DISABLE_RESTART_ON_UPDATE="yes" +%service_del_postun apparmor.service +%else %service_del_postun_without_restart apparmor.service +%endif %post abstractions # workaround for bnc#904620#c8 / lp#1392042 ++++++ cap_checkpoint_restore.diff ++++++ commit 2c2dbdc3a3012ce06371edc1e9be6f58711d8565 Author: Christian Boltz <[email protected]> Date: Wed Oct 14 14:01:55 2020 +0200 Add CAP_CHECKPOINT_RESTORE to severity.db diff --git a/utils/severity.db b/utils/severity.db index 3e07d44e..85b1d5de 100644 --- a/utils/severity.db +++ b/utils/severity.db @@ -30,6 +30,7 @@ CAP_SETUID 9 CAP_FOWNER 9 CAP_BPF 9 + CAP_CHECKPOINT_RESTORE 9 # Denial of service, bypass audit controls, information leak CAP_SYS_TIME 8 CAP_NET_ADMIN 8
