Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2016-05-25 21:22:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apparmor" Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2016-04-28 16:51:58.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.apparmor.new/apparmor.changes 2016-05-25 21:22:17.000000000 +0200 @@ -1,0 +2,5 @@ +Tue May 24 12:15:19 UTC 2016 - [email protected] + +- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) + +------------------------------------------------------------------- New: ---- profiles-ping-inet6-r3449.diff ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.hsZ2E7/_old 2016-05-25 21:22:18.000000000 +0200 +++ /var/tmp/diff_new_pack.hsZ2E7/_new 2016-05-25 21:22:18.000000000 +0200 @@ -92,6 +92,9 @@ # bug 906858 - confine lessopen.sh (submitted upstream 2014-12-21) Patch7: apparmor-lessopen-profile.patch +# boo#980596 - latest ping includes IPv6 (commited upstream trunk r3449 / 2.10 branch r3331 / 2.9 branch r3009) +Patch8: profiles-ping-inet6-r3449.diff + Url: https://launchpad.net/apparmor PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -439,6 +442,7 @@ %patch6 %patch7 -p1 +%patch8 # search for left-over multiline rules test -z "$(grep -r '^\s*\(unix\|dbus\)[^,]\(([^)]*)\)*[^,]*$' profiles/apparmor.d/)" ++++++ profiles-ping-inet6-r3449.diff ++++++ ------------------------------------------------------------ revno: trunk r3449 / 2.10 branch r3331 / 2.9 branch r3009 committer: Christian Boltz <[email protected]> branch nick: apparmor timestamp: Wed 2016-05-18 21:18:10 +0200 message: allow inet6 in ping profile The latest iputils merged ping and ping6 into a single binary that does both IPv4 and IPv6 pings (by default, it really does both). This means we need to allow network inet6 raw in the ping profile. References: https://bugzilla.opensuse.org/show_bug.cgi?id=980596 (contains more details and example output) Acked-by: Steve Beattie <[email protected]> for trunk, 2.10 and 2.9 === modified file 'profiles/apparmor.d/bin.ping' --- profiles/apparmor.d/bin.ping 2015-10-20 21:12:35 +0000 +++ profiles/apparmor.d/bin.ping 2016-05-18 19:18:10 +0000 @@ -18,6 +18,7 @@ capability net_raw, capability setuid, network inet raw, + network inet6 raw, /{,usr/}bin/ping mixr, /etc/modules.conf r, vim:ft=diff
