apparmor:apparmor-2.9

Branch merges

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

Related rock recipes

d4fef5b... by Christian Boltz on 2018-06-28

profiles: adjust abstractions/python for python 3.7

Python 3.7 was released yesterday - and to make the abstraction
future-proof, also cover 3.8 and 3.9 in advance ;-)

(cherry picked from commit 01f41fbff821be7264a4b0aac83ed04747395055)

Signed-off-by: Steve Beattie <email address hidden>
PR: https://gitlab.com/apparmor/apparmor/merge_requests/139

3ae5be3... by Christian Boltz on 2018-05-09

profiles: update samba profiles

- allow smbd to load new shared libraries
- allow winbindd to read and write new kerberos cache location

Based on a patch by "Samuel Cabrero" <email address hidden>

(cherry picked from commit 23b5f29b80582aacd23fb63c026cdf7c0dc21233)

References: https://bugzilla.opensuse.org/show_bug.cgi?id=1092099

Acked-by: Steve Beattie <email address hidden>
PR: https://gitlab.com/apparmor/apparmor/merge_requests/121

8c2371a... by Christian Boltz on 2018-05-06

utils: fix writing alias rules

write_pair() ignored the 'tail' parameter, which resulted in writing
invalid alias rules (without the trailing comma).

Also add an alias to test/cleanprof.* to ensure it doesn't break again.

(cherry picked from commit ae4ab628551afa4614cc7cb41daf1d5a67e417bb)

Acked-by: John Johansen <email address hidden>
Acked-by: Steve Beattie <email address hidden>
PR: https://gitlab.com/apparmor/apparmor/merge_requests/119

43285d6... by Christian Boltz on 2018-05-06

utils: fix writing "link subset" rules

Writing a "link subset" rule missed a space, which resulted in something
like
  link subset/foo -> /bar,

Also add a test rule to tests/cleanprof.* to ensure this doesn't break
again.

[Fixed up conflicts in cleanpprof_test.in and .out -- @smb]

(cherry picked from commit 514535608f32590ed9e1c23931606bc7a66079ee)

Acked-by: Steve Beattie <email address hidden>
PR: https://gitlab.com/apparmor/apparmor/merge_requests/117

e3e0194... by Steve Beattie on 2018-04-27

mount regression test: convert mount test to use MS_NODEV

The mount regression test passes MS_MANDLOCK to the mount(2) syscall in
the test program. When the kernel is configured without
CONFIG_MANDATORY_FILE_LOCKING set, attempting to mount a filesystem with
this option always fails with EPERM. To fix, convert the test program to
use the MS_NODEV option instead.

(cherry picked from commit 49ba6af2bf49be9eff89ce760cca60f33eb8e341)

Signed-off-by: Steve Beattie <email address hidden>
Acked-by: John Johansen <email address hidden>

Bug: https://bugs.launchpad.net/apparmor/+bug/1765025
PR: https://gitlab.com/apparmor/apparmor/merge_requests/109

3f65716... by John Johansen <email address hidden> on 2018-04-14

Merge branch 'cboltz-dovecot-config' into 'master'

dovecot/config: allow dac_read_search and reading ssl-parameters.dat

See merge request apparmor/apparmor!95

Acked-by: John Johansen <email address hidden>

(cherry picked from commit 5d973c26570113f9b6239156d64a07fc2f838a29)

c4e60719 dovecot/config: allow dac_read_search and reading ssl-parameters.dat

f5c5b80... by Christian Boltz <email address hidden> on 2018-04-13

Merge branch 'cboltz-dovecot-profiles' into 'master'

Dovecot profile updates

See merge request apparmor/apparmor!90

Acked-by: John Johansen <email address hidden>

(cherry picked from commit 6b78daf25b8d9db8a37608e735a2c6349a7b8c8b)

36bdd6ea add dovecot/stats profile, and allow dovecot to run it
26a8b722 allow dovecot/auth to write /run/dovecot/old-stats-user

3cdc2a4... by Christian Boltz <email address hidden> on 2018-03-26

Merge branch 'master' into 'master'

Fix typo in apparmor_parser.pod

See merge request apparmor/apparmor!85

Acked-by: Christian Boltz <email address hidden> for 2.9..master

(cherry picked from commit 47da50b7e6f97deab4f881859aba0e82be953b42)

50ee50f9 Fix typo in apparmor_parser.pod

1614db2... by Christian Boltz <email address hidden> on 2018-03-18

Merge branch 'cboltz-fix-make-C-profiles' into 'master'

Fix $(PWD) when using "make -C profiles"

See merge request apparmor/apparmor!80

Acked-by: John Johansen <email address hidden>

(cherry picked from commit 14096cb3a71e2a9343ad8dd2dc3fefbe54a1faac)

20893382 Fix $(PWD) when using "make -C profiles"

f59f605... by Christian Boltz <email address hidden> on 2018-03-16

Merge branch 'cboltz-skip-git-dir' into 'master'

ignore .git in is_skippable_dir()

See merge request apparmor/apparmor!77

Acked-by: John Johansen <email address hidden>

(cherry picked from commit 3b5683be2941ef5f9411b9482f76020b1082bdc9)

f9eb3fea ignore .git in is_skippable_dir()