Public bug reported: Binary package hint: apparmor
Upstream svn repository has a couple of changes that are relevant for Ubuntu. Most of the changes are fixes to support the new audit message format introduced in the new version of the kernel module. Now that the kernel module has been updated, proper audit messages will be sent to syslog. The tools used to generate and update apparmor profiles need to be updated to support the new audit messages format. The merge with usptream revision 982 also contains fixes for apparmor- dbus, apparmor-gnome-applet, which are not packaged. There is also a minor library version bump for libapparmor. Upstream is currently in bug-fix mode as OpenSuse is in beta testing. The ubuntu package can be find in the bzr branch http://bazaar.launchpad.net/~mathiaz/apparmor/ubuntu-mathiaz. The debian changelog is the following: * new merge from upstream: * fixes to support new audit messages sent by the kernel module. * bump in minor library version for libapparmor. * debian/control: Add perl libterm-readkey-perl and librpc-xml-perl dependencies for apparmor-utils. Fixes LP: #139757, LP: #139091. * utils/SubDomain.pm: Re-enable RPC client for remote repositories. * profiles/apparmor.d/sbin.syslog: update profile. Upstream changelog is: ------------------------------------------------------------ revno: 913 committer: steve-beattie timestamp: Mon 2007-09-17 06:22:40 +0000 message: Fix aa logparsing library to parse messages where the strings in the name, name2, or profile fields have been safely (hex) encoded. ------------------------------------------------------------ revno: 912 committer: DominicReynolds_ timestamp: Mon 2007-09-17 03:28:26 +0000 message: Change the default repository to http://apparmor.opensuse.org/backend/api - the host for the production repository. ------------------------------------------------------------ revno: 911 committer: DominicReynolds_ timestamp: Mon 2007-09-17 03:00:47 +0000 message: Modify the cupsd profile to use ix transtions (rather than Px) for backend plugins. ------------------------------------------------------------ revno: 910 committer: DominicReynolds_ timestamp: Mon 2007-09-17 02:58:36 +0000 message: Update to log parsing to correctly unpack the hex encoded values passed from the module: name, name2, and profile. (fix from [EMAIL PROTECTED]) ------------------------------------------------------------ revno: 909 committer: DominicReynolds_ timestamp: Mon 2007-09-17 02:56:14 +0000 message: Remove the confirmation prompt for confirm_and_finish - this was a duplicate prompt after the repository changes to save_profiles. ------------------------------------------------------------ revno: 908 committer: DominicReynolds_ timestamp: Mon 2007-09-17 02:55:11 +0000 message: Add support for network toggles, append, and locking to the YaST2 EditProfile wizard. ------------------------------------------------------------ revno: 907 committer: steve-beattie timestamp: Sat 2007-09-15 07:02:13 +0000 message: Add a basic inode_permission testcase. ------------------------------------------------------------ revno: 906 committer: steve-beattie timestamp: Sat 2007-09-15 06:41:44 +0000 message: Remove the magic token from the aa_change_profile() interface, as change_profile transitions ought to be uni-directional. If you want bi-directional transitions, use aa_change_hat() instead. ------------------------------------------------------------ revno: 905 committer: steve-beattie timestamp: Sat 2007-09-15 04:46:56 +0000 message: Bump release version (+date) in specfile, and bump library minor version. ------------------------------------------------------------ revno: 904 committer: steve-beattie timestamp: Fri 2007-09-14 22:38:46 +0000 message: Add support for an old style message hint "changing_profile" which indicates that the pid referenced is being placed in the null-complain profile. ------------------------------------------------------------ revno: 903 committer: ddrewelow timestamp: Fri 2007-09-14 22:23:08 +0000 message: Fixes (#310454) to support new audit log format and new libapparmor1. ------------------------------------------------------------ revno: 902 committer: ddrewelow timestamp: Fri 2007-09-14 22:22:26 +0000 message: Fixes (#310454) to support new audit log format and new libapparmor1. ------------------------------------------------------------ revno: 901 committer: steve-beattie timestamp: Fri 2007-09-14 15:36:01 +0000 message: This patch fixes up the support for parsing old style messages generated on systems where auditd has not been compiled with --with-apparmor (i.e. events are reported with an unknown type). ------------------------------------------------------------ revno: 900 committer: steve-beattie timestamp: Fri 2007-09-14 15:33:05 +0000 message: This patch fixes the parsing of old-style apparmor log messages that occur within a hat that's name does not begin with a '/'. New style message parsing was not affected by this bug. ------------------------------------------------------------ revno: 899 committer: steve-beattie timestamp: Fri 2007-09-14 15:29:07 +0000 message: Stop printing "Error: syntax error" to stdout when the library has a problem parsing the log message. ------------------------------------------------------------ revno: 898 committer: steve-beattie timestamp: Fri 2007-09-14 15:26:21 +0000 message: This patch adds support for parsing apparmor messages that come through syslog, along with testcases. This should work for both old and new style log messages, as well as with dmesg timestamps enabled in the kernel ("echo 1 > /sys/module/printk/parameters/printk_time"). This patch applies on top of the previous patch sent to support the type=15xx messages. ------------------------------------------------------------ revno: 897 committer: steve-beattie timestamp: Fri 2007-09-14 15:00:48 +0000 message: This patch adds support to the logparsing library for the type=15xx flags when events come through the audit subsystem. It also fixes the case where the audit daemon has not been configured with apparmor support and the events are reported as type=UNKNOWN[15xx]. It also fixes the testsuite dependencies so that they will get relinked when the library changes. ------------------------------------------------------------ revno: 896 committer: steve-beattie timestamp: Thu 2007-09-13 17:50:57 +0000 message: Bump to version 1.2 to match autobuild version. ------------------------------------------------------------ revno: 895 committer: steve-beattie timestamp: Thu 2007-09-13 17:15:06 +0000 message: Bump version in the configure.in file to match version in the specfile. ** Affects: apparmor (Ubuntu) Importance: Undecided Status: New -- UVFe - 2.1+982-0ubuntu1 https://bugs.launchpad.net/bugs/140507 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
