Merge lp:~jdstrand/indicator-network/indicator-network-lp1296415 into lp:indicator-network/14.10

[Jamie Strandboge]

   * add lenient AppArmor profile to allow connecting to ofono (LP: #1296415)
     - add debian/usr.lib.indicator-network-service
     - debian/control: Build-Depends on dh-apparmor
     - debian/rules: update override_dh_installdeb to use dh_apparmor
     - debian/indicator-network.dirs: add etc/apparmor.d
     - debian/indicator-network.install: install profile in to place

   * add lenient AppArmor profile to allow connecting to ofono (LP: #1296415)
     - add debian/usr.lib.indicator-network-service
     - debian/control: Build-Depends on dh-apparmor
     - debian/rules: update override_dh_installdeb to use dh_apparmor
     - debian/indicator-network.dirs: add etc/apparmor.d
     - debian/indicator-network.install: install profile in to place

[PS Jenkins bot (ps-jenkins)]

PASSED: Continuous integration, rev:350
http://jenkins.qa.ubuntu.com/job/indicator-network-ci/145/
Executed test runs:
    SUCCESS: http://jenkins.qa.ubuntu.com/job/indicator-network-utopic-amd64-ci/19
    SUCCESS: http://jenkins.qa.ubuntu.com/job/indicator-network-utopic-armhf-ci/19
        deb: http://jenkins.qa.ubuntu.com/job/indicator-network-utopic-armhf-ci/19/artifact/work/output/*zip*/output.zip

Click here to trigger a rebuild:
http://s-jenkins.ubuntu-ci:8080/job/indicator-network-ci/145/rebuild

review: Approve (continuous-integration)

[lp:~jdstrand/indicator-network/indicator-network-lp1296415]

351. By Jamie Strandboge on 2014-06-24

debian/usr.lib.indicator-network-service: more closely mimic unconfined with
exec transitions

[PS Jenkins bot (ps-jenkins)]

PASSED: Continuous integration, rev:351
http://jenkins.qa.ubuntu.com/job/indicator-network-ci/146/
Executed test runs:
    SUCCESS: http://jenkins.qa.ubuntu.com/job/indicator-network-utopic-amd64-ci/20
    SUCCESS: http://jenkins.qa.ubuntu.com/job/indicator-network-utopic-armhf-ci/20
        deb: http://jenkins.qa.ubuntu.com/job/indicator-network-utopic-armhf-ci/20/artifact/work/output/*zip*/output.zip

Click here to trigger a rebuild:
http://s-jenkins.ubuntu-ci:8080/job/indicator-network-ci/146/rebuild

review: Approve (continuous-integration)

[Jamie Strandboge (jdstrand)]

Please reject this. We won't be implementing this feature after all (see bug description for more info).

[Charles Kerr (charlesk)]

Rejecting as per Jamie's request

Unmerged revisions

351. By Jamie Strandboge on 2014-06-24

debian/usr.lib.indicator-network-service: more closely mimic unconfined with
exec transitions

350. By Jamie Strandboge on 2014-06-24

 * add lenient AppArmor profile to allow connecting to ofono (LP: #1296415)
   - add debian/usr.lib.indicator-network-service
   - debian/control: Build-Depends on dh-apparmor
   - debian/rules: update override_dh_installdeb to use dh_apparmor
   - debian/indicator-network.dirs: add etc/apparmor.d
   - debian/indicator-network.install: install profile in to place

=== modified file 'debian/control'
--- debian/control	2014-05-14 11:17:40 +0000
+++ debian/control	2014-06-24 22:20:04 +0000
@@ -24,6 +24,7 @@
                python3-setuptools,
                qtbase5-dev,
                valgrind [amd64 armhf i386 powerpc],
+               dh-apparmor
 Standards-Version: 3.9.3
 # If you aren't a member of ~indicator-applet-developers but need to upload
 # packaging changes, just go ahead. ~indicator-applet-developers will notice

=== added file 'debian/indicator-network.dirs'
--- debian/indicator-network.dirs	1970-01-01 00:00:00 +0000
+++ debian/indicator-network.dirs	2014-06-24 22:20:04 +0000
@@ -0,0 +1,1 @@
+etc/apparmor.d

=== modified file 'debian/indicator-network.install'
--- debian/indicator-network.install	2014-05-21 17:16:24 +0000
+++ debian/indicator-network.install	2014-06-24 22:20:04 +0000
@@ -7,3 +7,4 @@
 usr/lib/*/indicator-network/indicator-network-service
 etc/xdg/autostart/indicator-network.desktop
 usr/share/locale
+debian/usr.lib.indicator-network-service etc/apparmor.d

=== modified file 'debian/rules'
--- debian/rules	2014-05-14 11:20:55 +0000
+++ debian/rules	2014-06-24 22:20:04 +0000
@@ -28,3 +28,7 @@
 	mkdir -p debian/indicator-network/usr/share/apport/package-hooks
 	cp debian/source_indicator-network.py debian/indicator-network/usr/share/apport/package-hooks
 	dh_install -X'*.pyc' -X'__pycache__' --fail-missing
+
+override_dh_installdeb:
+	dh_apparmor --profile-name=usr.lib.indicator-network-service -pindicator-network
+	dh_installdeb

=== added file 'debian/usr.lib.indicator-network-service'
--- debian/usr.lib.indicator-network-service	1970-01-01 00:00:00 +0000
+++ debian/usr.lib.indicator-network-service	2014-06-24 22:20:04 +0000
@@ -0,0 +1,16 @@
+#include <tunables/global>
+
+# Permissive profile to have profile name to limit access to ofonod (LP: #1296415)
+/usr/lib/*/indicator-network/indicator-network-service (attach_disconnected) {
+  capability,
+  mount,
+  remount,
+  umount,
+  network,
+  /   rwkl,
+  /** rwlkm,
+  /** pix,
+  dbus,
+  signal,
+  ptrace,
+}