Author: Steve Beattie
Revision Date: 2019-02-19 09:38:13 UTC

The AppArmor project has been converted to git and is now hosted on
gitlab.

To get the converted repository, please do
  git clone https://gitlab.com/apparmor/apparmor

Author: Launchpad Translations on behalf of apparmor-dev
Revision Date: 2018-12-04 05:26:16 UTC

Launchpad automatic translations update.

Author: Simon Déziel
Revision Date: 2017-10-27 00:02:24 UTC

profiles: update wireshark profile for modern releases

MErge from trunk commit 3728

Acked-by: Steve Beattie <steve@nxnw.org>

Author: intrigeri
Revision Date: 2017-10-26 17:31:35 UTC

profiles: allow OpenAL HRTF support in audio abstraction

Merge from trunk commit 3726

The files are "head-related transfer function" data sets, used by
OpenAL for better spatialization of sounds when headphones are detected.

Acked-by: Steve Beattie <steve@nxnw.org>

Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874665

Author: intrigeri
Revision Date: 2017-10-26 17:27:37 UTC

profiles: allow OpenAL HRTF support in audio abstraction

merge from trunk commit 3726

The files are "head-related transfer function" data sets, used by
OpenAL for better spatialization of sounds when headphones are detected.

Acked-by: Steve Beattie <steve@nxnw.org>

Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874665

Author: John Johansen
Revision Date: 2017-10-19 02:44:47 UTC

Bump release version to 2.8.5

Author: Jamie Strandboge
Revision Date: 2017-09-15 13:24:38 UTC

add debian/patches/nameservice-add-stub-resolv.patch

Author: Tyler Hicks
Revision Date: 2016-08-24 15:39:55 UTC

debian/source/format: use source format 1.0

Author: Christian Boltz
Revision Date: 2016-05-29 19:33:37 UTC

usr.sbin.unbound: deny chown capability

When the PID is inside the chroot or no chroot is used, Unbound will attempt
to chown the PID. This fails most of the time even without Apparmor because
the PID is created as root.

Merge request by Simon Déziel

Acked-by: Christian Boltz <apparmor@cboltz.de>

Author: Steve Beattie
Revision Date: 2015-06-17 19:57:47 UTC

Update changelog release for pushing to trusty-proposed.

Author: Jamie Strandboge
Revision Date: 2014-09-08 23:12:56 UTC

debian/control: update Breaks for apparmor-easyprof-ubuntu, libvirt-bin,
and lightdm. Add Breaks on rsyslog.

Author: Tyler Hicks
Revision Date: 2014-04-03 21:15:31 UTC

Fix patch tag typo in python-utils-file-support.patch

Author: Tyler Hicks
Revision Date: 2014-03-27 19:13:53 UTC

debian/changelog: Fix spelling and readability errors

Author: Jamie Strandboge
Revision Date: 2014-03-26 16:15:34 UTC

* autostart aa-notify via /etc/xdg/autostart instead of /etc/X11/Xsession.d
  (LP: #1288241)
  - remove debian/notify/90apparmor-notify
  - add debian/notify/apparmor-notify.desktop
  - debian/apparmor-notify.install: adjust for the above
  - add debian/apparmor-notify.maintscript to remove 90apparmor-notify
* debian/notify/notify.conf: use_group should be set to "sudo" instead of
  "admin" (LP: #1009666)

Author: Jamie Strandboge
Revision Date: 2014-03-26 15:26:21 UTC

use -name instead of -regex based on feedback by Christian Boltz

Author: Jamie Strandboge
Revision Date: 2014-03-20 15:28:12 UTC

update changelog for trusty

Author: Seth Arnold
Revision Date: 2014-03-20 03:36:23 UTC

Modified patches to remove numbers, they complicated quilt handling too
much.

  - add-chromium-browser.patch
  - add-debian-integration-to-lighttpd.patch
  - ubuntu-manpage-updates.patch
  - libapparmor-layout-deb.patch
  - libapparmor-mention-dbus-method-in-getcon-man.patch
  - etc-writable.patch
  - aa-utils_are_bilingual.patch
  - convert-to-rules.patch
  - list-fns.patch
  - parse-mode.patch
  - add-decimal-interp.patch
  - policy_mediates.patch
  - fix-failpath.patch
  - feature_file.patch
  - fix-network.patch
  - aare-to-class.patch
  - add-mediation-unix.patch
  - parser_version.patch
  - caching.patch
  - label-class.patch
  - fix-lexer-debug.patch
  - use-diff-encode.patch
  - fix-serialize.patch
  - fix-ppc-endian-ftbfs.patch
  - opt_arg.patch
  - tests-cond-dbus.patch

Author: Kees Cook
Revision Date: 2012-04-25 19:58:58 UTC

Merge from trunk rev 2037:

The m4 shipped to handle Python was incorrectly clearing
$CPPFLAGS. Additionally, do not repeat compiler flags for automake
targets that already include them, and pass more flags to the Perl build.

Signed-off-by: Kees Cook <kees@ubuntu.com>
Acked-By: Steve Beattie <sbeattie@ubuntu.com>

Author: Steve Beattie
Revision Date: 2011-08-26 23:03:03 UTC

Merge from trunk revision 1805:

  Attached is a patch to make the initscript not fail if /tmp is full
  by converting the comm(1) usage on temporary files to an embedded
  awk script. On both Ubuntu and OpenSUSE, a version of awk (mawk in
  Ubuntu, gawk in OpenSUSE) is either a direct or indirect dependency
  on the minimal or base package set, and the original reporter also
  mentioned that an awk-based solution would be palatable in a way
  that converting to bash, or using perl or python here would not be.

  In the embedded awk script, I've tried to avoid gawk or mawk
  specific behaviors or extensions; e.g. this is the reason for the
  call to sort on the output of the awk script, rather than using
  gawk's asort(). But please let me know if you see anything that
  shouldn't be portable across awk implementations.

  An additional issue that is fixed in both scripts is handling
  child profiles (e.g. hats) during reload. If child profiles are
  filtered out (via grep -v '//') of the list to consider, then
  on reloading a profile where a child profile has been removed or
  renamed, that child profile will continue to stick around. However,
  if the profile containing child profiles is removed entirely,
  if the initscript attempts to unload the child profiles after the
  parent is removed, this will fail because they were unloaded when
  the parent was unloaded. Thus I removed any filtering of child
  profiles out, but do a post-awk reverse sort which guarantees that
  any child profiles will be removed before their parent is. I also
  added the LC_COLLATE=C (based on the Ubuntu version) to the sort
  call to ensure a consistent sort order.

  To restate, the problem with the existing code is that it creates
  temporary files in $TMPDIR (by default /tmp) and if that partition
  is full, problems with the reload action ensue. Alternate solutions
  include switching the initscript to use bash and its <$() extension
  or setting TMPDIR to /dev/shm/. The former is unpalatable to some
  (particularly for an initscript), and for the latter, /dev/shm is
  only guaranteed to exist on GNU libc based systems (glibc apparently
  expects /dev/shm to exist for its POSIX shared memory implementation;
  see shm_overview(7)). So to me, awk (sans GNU extensions) looks
  to be the least bad option here.

Nominated-By: Steve Beattie <sbeattie@ubuntu.com>
Acked-By: John Johansen <john.johansen@canonical.com>

Author: John Johansen
Revision Date: 2011-06-06 17:39:54 UTC

Rename tags to conform with git tag requirements

Rename tags
  apparmor_2.5.2~rc1 to apparmor_2.5.2-rc1
  apparmor_2.6.0~rc1 to apparmor_2.6.0-rc1

this is necessary for export to the git mirror

Signed-off-by: John Johansen <john.johansen@canonical.com>

Author: jrjohansen
Revision Date: 2008-07-23 08:12:28 UTC

fix error in selinux patch

Author: jrjohansen
Revision Date: 2009-01-07 14:11:56 UTC

Fix for bnc#464103

where the command name reported can be confused because the application
was started as a link.

Author: DominicReynolds_
Revision Date: 2007-09-17 19:32:54 UTC

Create a branch for 10.2 for maintenance.

Author: DominicReynolds_
Revision Date: 2007-09-18 16:38:04 UTC

Maintenance update for the apparmor-utils package. All source pulled
from trunk except lcn updates.

Author: dominic_r
Revision Date: 2007-10-18 02:46:58 UTC

Removed temporary dir under experimental.

Author: jrjohansen
Revision Date: 2008-05-27 12:04:33 UTC

remove for-mainline dir from kernel patches

Author: jrjohansen
Revision Date: 2008-03-28 07:19:57 UTC

merge -r 1158 - fix fatal errors so that they have an exit with an exit code
of 127

Author: jrjohansen
Revision Date: 2007-09-11 00:37:16 UTC

update patch header