lp:~intrigeri/apparmor/flatpak-exports

Branch merges

Propose for merging

No branches dependent on this one.

On hold for merging into lp:apparmor/2.12

intrigeri: Disapprove on 2018-02-25

AppArmor Developers: Pending requested 2017-09-20

Diff: 53 lines (+16/-14)

1 file modified

profiles/apparmor.d/abstractions/freedesktop.org (+16/-14)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

3711. By intrigeri on 2017-09-20

abstractions/freedesktop.org: fixup.

3710. By intrigeri on 2017-09-20

abstractions/freedesktop.org: treat Flatpak exports the same way as bits shipped by the distro (Closes: Debian#865206).

As Simon McVittie <email address hidden> wrote on
https://bugs.debian.org/865206 and on the AppArmor mailing list:

"Anything in /var/lib/flatpak/exports/share or
~/.local/share/flatpak/exports/share is essentially equivalent to
the corresponding path in /usr/{local/,}share, and is something
that has deliberately been "exported" to the rest of the system by a
Flatpak-confined app.

The only reason to prevent reading those directories would be if you do
not want the AppArmor-confined app to be able to enumerate the other
software you have installed on your system, as an anti-fingerprinting
mechanism."

3709. By John Johansen on 2017-09-17

Add the LSS and container con presentations for the last few years

Signed-off-by: John Johansen <email address hidden>

3708. By Jamie Strandboge on 2017-09-15

Description: allow access to stub resolver configuration

Signed-Off-By: Jamie Strandboge <email address hidden>
Acked-by: Seth Arnold <email address hidden>

3707. By John Johansen on 2017-09-11

Add the patches for 4.13 and 4.14. These are based on security-next for 4.14

The old out of tree patchseries has been completely dropped. v4.13
has most of the newer apparmor 3.x code in it. v4.14 has the rest except
the af_unix mediation which is included as the last patch

3706. By Christian Boltz on 2017-09-10

abstractions/freedesktop.org: support /usr/local/applications; support subdirs of applications folder

Merge request by Cameron Norman 2015-06-07
https://code.launchpad.net/~cameronnemo/apparmor/abstraction-fdo-applications-fixups/+merge/261336

Acked-by: Christian Boltz <email address hidden> for trunk, 2.11, 2.10 and 2.9

3705. By John Johansen on 2017-09-08

Document the use of the features_X and requires() functions

Signed-off-by: John Johansen <email address hidden>
Acked-by: Tyler Hicks <email address hidden>

3704. By John Johansen on 2017-09-07

regression_test: Clarify message about skipping pivot root transitions

Signed-off-by: John Johansen <email address hidden>
Acked-by: Christian Boltz <email address hidden>

3703. By John Johansen on 2017-09-07

regression tests: fix long path failure when path_max can not be written

Not all kernels support writing the path_max kernel parameter after
boot. Detect if it can be written and run the long_path tests only
if it can be.

Signed-off-by: Seth Forshee <email address hidden>
Signed-off-by: John Johansen <email address hidden>

3702. By John Johansen on 2017-09-07

regression test: update query label tests to reflect, fixed xpass cases

newer versions of apparmor that support multi-transaction have this xpass
case fixed

Signed-off-by: John Johansen <email address hidden>
Acked-by: Seth Arnold <email address hidden>