commit apparmor for openSUSE:12.1:Update:Test
Hello community,
here is the log from the commit of package apparmor for
openSUSE:12.1:Update:Test checked in at 2012-02-10 12:48:16
Comparing /work/SRC/openSUSE:12.1:Update:Test/apparmor (Old)
and /work/SRC/openSUSE:12.1:Update:Test/.apparmor.new (New)
Package is apparmor, Maintainer is mszer...@suse.com
Changes:
--- /work/SRC/openSUSE:12.1:Update:Test/apparmor/apparmor.changes
2012-02-07 17:36:38.0 +0100
+++ /work/SRC/openSUSE:12.1:Update:Test/.apparmor.new/apparmor.changes
2012-02-10 12:48:17.0 +0100
@@ -1,0 +2,6 @@
+Thu Feb 9 19:01:07 UTC 2012 - opens...@cboltz.de
+
+- add 0001-fix-for-lp929531.patch to allow reading
+ /sys/devices/system/cpu/online in abstractions/base (lp#929531)
+
+---
New:
0001-fix-for-lp929531.patch
Other differences:
--
++ apparmor.spec ++
--- /var/tmp/diff_new_pack.6AnGxD/_old 2012-02-10 12:48:17.0 +0100
+++ /var/tmp/diff_new_pack.6AnGxD/_new 2012-02-10 12:48:17.0 +0100
@@ -15,6 +15,7 @@
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
+
%bcond_with tomcat
%bcond_without pam
%bcond_without apache
@@ -53,6 +54,9 @@
Source2:%{name}-profile-editor.desktop
Source3:update-trans.sh
+# add /sys/devices/system/cpu/online r to abstractions/base. Will be
included in upstream 2.7.2
+Patch: 0001-fix-for-lp929531.patch
+
# enable caching of profiles (= massive performance speedup when loading
profiles)
Patch1: apparmor-enable-profile-cache.diff
@@ -400,6 +404,7 @@
%prep
%setup -q -n %{name}-%{versiondir}
+%patch -p1
%patch1 -p1
%patch2 -p0
%patch5 -p1
++ 0001-fix-for-lp929531.patch ++
Author: Jamie Strandboge ja...@canonical.com
Description: glibc's __get_nprocs() now checks /sys/devices/system/cpu/online
in addition to /proc/stat for the number of processors. This is used in the
_SC_NPROCESSORS_ONLN implementation, a part of sysconf. This was introduced in
upstream glibc commit:
http://repo.or.cz/w/glibc.git/patch/84e2a551a72c79b020694bb327e33b6d71b09b63
Bug-Ubuntu: https://launchpad.net/bugs/929531
Index: apparmor-2.7.0/profiles/apparmor.d/abstractions/base
===
--- apparmor-2.7.0.orig/profiles/apparmor.d/abstractions/base 2012-02-09
07:57:35.0 -0600
+++ apparmor-2.7.0/profiles/apparmor.d/abstractions/base2012-02-09
08:01:13.0 -0600
@@ -86,6 +86,7 @@
@{PROC}/meminfor,
@{PROC}/stat r,
@{PROC}/cpuinfor,
+ /sys/devices/system/cpu/online r,
# glibc's *printf protections read the maps file
@{PROC}/*/maps r,
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit apparmor for openSUSE:12.1:Update:Test
Hello community,
here is the log from the commit of package apparmor for
openSUSE:12.1:Update:Test checked in at 2012-02-07 17:36:33
Comparing /work/SRC/openSUSE:12.1:Update:Test/apparmor (Old)
and /work/SRC/openSUSE:12.1:Update:Test/.apparmor.new (New)
Package is apparmor, Maintainer is mszer...@suse.com
Changes:
--- /work/SRC/openSUSE:12.1:Update:Test/apparmor/apparmor.changes
2012-02-07 17:36:37.0 +0100
+++ /work/SRC/openSUSE:12.1:Update:Test/.apparmor.new/apparmor.changes
2012-02-07 17:36:38.0 +0100
@@ -1,0 +2,79 @@
+Tue Jan 31 09:53:06 UTC 2012 - opens...@cboltz.de
+
+- Update to AppArmor 2.7.2 (= 2.7 branch / r1894)
+ - move various permissions from httpd2-prefork profile to
+abstractions/apache2-common. Backward-incompatible change: *.htaccess
+files are no longer allowed for ^HANDLING_UNTRUSTED_INPUT
+ - allow access for more /usr/lib*/samba/ files for smbd (bnc#725967#c5)
+ - allow various .conf files for dovecot (lp#458922)
+ - disallow wl for *.so in @{HOME}/.pki/nssdb/ in abstractions/private-files
+and abstractions/private-files-strict (lp#911847)
+ - update abstractions/kde, private-files* and ubuntu-browsers.d/user-files
+to use ~/.kde4, not only ~/.kde (bnc#741592)
+ - block write access to ~/.kde{,4}/env in abstractions/private-files
+(lp#914190)
+ - allow write access for personal dictionary etc. in abstractions/aspell
+(lp#917859)
+ - when using genprof for a script, include read access to the script itsself
+ - automatically include abstractions/python or abstractions/ruby for
+python/ruby scripts
+ - add profile for smbldap-useradd and allow smbd to call it (bnc#738041)
+ - allow creation of the .config directory in abstractions/enchant (lp#914184)
+ - allow TFTP read-only access in dnsmasq profile (lp#905412)
+ - allow capability dac_read_search for syslog-ng (bnc#731876)
+ - add p11-kit abstraction and include it in abstractions/authentification
+(lp#912754, lp#912752)
+ - add audacity to abstractions/ubuntu-media-players (lp#899963)
+ - allow software-center, fireclam plugin, [tT]unar, exo-open, kate and
+/dev/nvidia* in abstractons/ubuntu-browsers.d/* (lp#662906, lp#562831,
+lp#890894, lp#890894, lp#884748)
+ - fix typo for multiarch gconf-modules in abstractions/base (lp#904548)
+ - allow avahi to do dbus introspection (lp#769148)
+ - allow access to ~/.fonts.conf.d in abstractions/fonts (lp#870992)
+ - allow transmission in abstractions/ubuntu-bittorrent-clients (lp#852062)
+ - allow reading ~/.cups/client.conf and ~/.cups/lpoptions in
+abstractions/cups-client (lp#887992)
+ - allow read access of /etc/python{2,3}.[0-7]*/sitecustomize.py in
+abstractions/python (lp#860856)
+ - various updates to the sshd profile (lp#817956)
+ - (and some more changes I already included in the apparmor-2.7-branch.diff)
+
+---
+Tue Jan 3 23:52:38 UTC 2012 - opens...@cboltz.de
+
+- Update to AppArmor 2.7.0 (= r1858)
+ - make traceroute6 work (bnc#733312)
+ - allow access to pyconfig.h in abstractions/python (lp#840734)
+ - fix logprof/genprof for hex-encoded program filenames (= filenames
+containing space etc.)
+- add apparmor-2.7-branch.diff with some upstreamed fixes:
+ - usr.sbin.smbd needs read access for /etc/netgroup (bnc#738041)
+ - create /etc/apparmor.d/tunables/multiarch.d as directory, not as file
+ - fix syntax error in abstractons/python
+
+---
+Tue Nov 29 18:34:54 CET 2011 - meiss...@suse.de
+
+- changed a $ - % (typo)
+
+---
+Sat Nov 26 21:52:31 UTC 2011 - opens...@cboltz.de
+
+- make Provides for perl-libapparmor versioned to avoid self-Obsoletes
+
+---
+Thu Nov 10 20:16:24 UTC 2011 - opens...@cboltz.de
+
+- update to AppArmor 2.7.0 rc2
+ Most of the changes since rc1 were already included as patches.
+ Additional changes:
+ - fix logprof/genprof to recognize mknod in audit.log
+ - fix libapparmor python bindings to compile with python 3
+ - fix wrong status message in initscript if apparmor-utils are not installed
+ - parser/Makefile: fix some warnings, always respect CXX and LDFLAGS
+ - fix some warnings in utils/Makefile
+- remove 4 upstreamed patches
+- remove mkdir /etc/apparmor.d/disable - that's done by upstream Makefile now
+- update line numbers in 2 patches
+
+---
Old:
apparmor-2.5.1-ldapclient-profile
apparmor-2.7.0rc1-aa-notify-better-error-message.diff
apparmor-2.7.rc1.tar.gz
apparmor-abstractions-winbind-64bit.diff
apparmor-samba-vfs-objects.diff
New:
commit apparmor for openSUSE:12.1
Hello community,
here is the log from the commit of package apparmor for openSUSE:12.1 checked
in at 2011-11-02 11:44:03
Comparing /work/SRC/openSUSE:12.1/apparmor (Old)
and /work/SRC/openSUSE:12.1/.apparmor.new (New)
Package is apparmor, Maintainer is
Changes:
--- /work/SRC/openSUSE:12.1/apparmor/apparmor.changes 2011-10-28
15:35:51.0 +0200
+++ /work/SRC/openSUSE:12.1/.apparmor.new/apparmor.changes 2011-11-02
11:44:05.0 +0100
@@ -1,0 +2,7 @@
+Tue Nov 1 17:39:29 UTC 2011 - opens...@cboltz.de
+
+- make abstractions/winbind working on 64bit systems
+- allow loading the libraries for samba vfs objects also on 32bit
+ systems (bnc#725967)
+
+---
New:
apparmor-abstractions-winbind-64bit.diff
Other differences:
--
++ apparmor.spec ++
--- /var/tmp/diff_new_pack.icUyQ4/_old 2011-11-02 11:44:05.0 +0100
+++ /var/tmp/diff_new_pack.icUyQ4/_new 2011-11-02 11:44:05.0 +0100
@@ -53,7 +53,7 @@
Source2:%{name}-profile-editor.desktop
Source3:update-trans.sh
-# more helpful error message for aa-notify -p if the user is not in the
configured group. Patch pending upstream.
+# more helpful error message for aa-notify -p if the user is not in the
configured group. Commited upstream after 2.7rc1.
Patch: apparmor-2.7.0rc1-aa-notify-better-error-message.diff
# enable caching of profiles (= massive performance speedup when loading
profiles)
@@ -62,9 +62,12 @@
# include autogenerated profile sniplet for samba shares (bnc#688040)
Patch2: apparmor-samba-include-permissions-for-shares.diff
-# allow samba vfs objects (bnc#725967)
+# allow samba vfs objects (bnc#725967). Commited upstream after 2.7rc1.
Patch3: apparmor-samba-vfs-objects.diff
+# make abstractions/winbind working on 64bit systems. Commited upstream after
2.7rc1.
+Patch4: apparmor-abstractions-winbind-64bit.diff
+
# split a long string in AppArmor.pm. Not accepted upstream because they want
a solution without hardcoded width.
Patch5: apparmor-utils-string-split
@@ -75,7 +78,7 @@
# Add support for eDirectory calls in abstractions/nameservice. Not accepted
upstream (yet) because of open questions
Patch12:apparmor-2.5.1-edirectory-profile
-# split ldap related things from abstractions/nameservice to
abstractions/ldapclient and add sasl support. TODO: send upstream
+# split ldap related things from abstractions/nameservice to
abstractions/ldapclient and add sasl support. Commited upstream after 2.7rc1.
Patch13:apparmor-2.5.1-ldapclient-profile
# obsolete, upstream implemented this in another way
@@ -413,6 +416,7 @@
%patch1 -p1
%patch2 -p0
%patch3 -p0
+%patch4 -p0
%patch5 -p1
#%patch10 -p1 # disabled, see above
#%patch11 -p1 # disabled, see above
++ apparmor-abstractions-winbind-64bit.diff ++
Make abstractions/winbind working on 64bit systems - valid.dat etc. are in
/usr/lib64/samba/ there
Signed-Off-by: Christian Boltz appar...@cboltz.de
Acked-By: Steve Beattie sbeat...@ubuntu.com
=== modified file 'profiles/apparmor.d/abstractions/winbind'
--- profiles/apparmor.d/abstractions/winbind2010-12-20 20:29:10 +
+++ profiles/apparmor.d/abstractions/winbind2011-11-01 15:56:49 +
@@ -13,7 +13,7 @@
/tmp/.winbindd/pipe rw,
/var/{lib,run}/samba/winbindd_privileged/pipe rw,
/etc/samba/smb.conf r,
- /usr/lib/samba/valid.datr,
- /usr/lib/samba/upcase.dat r,
- /usr/lib/samba/lowcase.dat r,
+ /usr/lib*/samba/valid.dat r,
+ /usr/lib*/samba/upcase.dat r,
+ /usr/lib*/samba/lowcase.dat r,
++ apparmor-samba-vfs-objects.diff ++
--- /var/tmp/diff_new_pack.icUyQ4/_old 2011-11-02 11:44:05.0 +0100
+++ /var/tmp/diff_new_pack.icUyQ4/_new 2011-11-02 11:44:05.0 +0100
@@ -12,7 +12,7 @@
/etc/printcap r,
/proc/*/mounts r,
/proc/sys/kernel/core_pattern r,
-+ /usr/lib64/samba/vfs/*.so mr,
++ /usr/lib*/samba/vfs/*.so mr,
/usr/sbin/smbd mr,
/etc/samba/* rwk,
/var/cache/samba/** rwk,
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit apparmor for openSUSE:12.1
Hello community, here is the log from the commit of package apparmor for openSUSE:12.1 checked in at 2011-10-27 11:03:10 Comparing /work/SRC/openSUSE:12.1/apparmor (Old) and /work/SRC/openSUSE:12.1/.apparmor.new (New) Package is apparmor, Maintainer is Changes: --- /work/SRC/openSUSE:12.1/apparmor/apparmor.changes 2011-10-24 12:27:34.0 +0200 +++ /work/SRC/openSUSE:12.1/.apparmor.new/apparmor.changes 2011-10-28 15:35:51.0 +0200 @@ -1,0 +2,5 @@ +Wed Oct 26 20:48:16 UTC 2011 - opens...@cboltz.de + +- allow loading the libraries for samba vfs objects (bnc#725967) + +--- New: apparmor-samba-vfs-objects.diff Other differences: -- ++ apparmor.spec ++ --- /var/tmp/diff_new_pack.TEVPUU/_old 2011-10-28 15:35:51.0 +0200 +++ /var/tmp/diff_new_pack.TEVPUU/_new 2011-10-28 15:35:51.0 +0200 @@ -62,6 +62,9 @@ # include autogenerated profile sniplet for samba shares (bnc#688040) Patch2: apparmor-samba-include-permissions-for-shares.diff +# allow samba vfs objects (bnc#725967) +Patch3: apparmor-samba-vfs-objects.diff + # split a long string in AppArmor.pm. Not accepted upstream because they want a solution without hardcoded width. Patch5: apparmor-utils-string-split @@ -409,6 +412,7 @@ %patch -p0 %patch1 -p1 %patch2 -p0 +%patch3 -p0 %patch5 -p1 #%patch10 -p1 # disabled, see above #%patch11 -p1 # disabled, see above ++ apparmor-samba-vfs-objects.diff ++ Allow loading the libraries used for Samba vfs objects = ... References: https://bugzilla.novell.com/show_bug.cgi?id=725967 Signed-off-by: Christian Boltz appar...@cboltz.de === modified file 'profiles/apparmor.d/usr.sbin.smbd' --- profiles/apparmor.d/usr.sbin.smbd 2011-08-27 18:50:42 + +++ profiles/apparmor.d/usr.sbin.smbd 2011-10-26 20:43:13 + @@ -24,6 +24,7 @@ /etc/printcap r, /proc/*/mounts r, /proc/sys/kernel/core_pattern r, + /usr/lib64/samba/vfs/*.so mr, /usr/sbin/smbd mr, /etc/samba/* rwk, /var/cache/samba/** rwk, -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
