Merge lp:~jdstrand/nuntium/nuntium-lp1296415 into lp:nuntium

[Jamie Strandboge]

  * add lenient AppArmor profile to allow connecting to ofono (LP: #1296415)
    - add debian/usr.bin.nuntium
    - debian/control: Build-Depends on dh-apparmor
    - debian/rules: update override_dh_installdeb to use dh_apparmor
    - debian/nuntium.dirs: add etc/apparmor/init/network-interface-security
      and etc/apparmor.d
    - debian/nuntium.install: install profile in to place
    - debian/nuntium.links: symlink AppArmor profile in to

  * add lenient AppArmor profile to allow connecting to ofono (LP: #1296415)
    - add debian/usr.bin.nuntium
    - debian/control: Build-Depends on dh-apparmor
    - debian/rules: update override_dh_installdeb to use dh_apparmor
    - debian/nuntium.dirs: add etc/apparmor/init/network-interface-security
      and etc/apparmor.d
    - debian/nuntium.install: install profile in to place
    - debian/nuntium.links: symlink AppArmor profile in to

[lp:~jdstrand/nuntium/nuntium-lp1296415]

46. By Jamie Strandboge on 2014-06-24

debian/usr.bin.nuntium: more closely mimic unconfined with exec transitions

[Sergio Schvezov (sergiusens)]

Changing status from jdstrand's email about it not being ready.

Unmerged revisions

46. By Jamie Strandboge on 2014-06-24

debian/usr.bin.nuntium: more closely mimic unconfined with exec transitions

45. By Jamie Strandboge on 2014-06-24

 * add lenient AppArmor profile to allow connecting to ofono (LP: #1296415)
   - add debian/usr.bin.nuntium
   - debian/control: Build-Depends on dh-apparmor
   - debian/rules: update override_dh_installdeb to use dh_apparmor
   - debian/nuntium.dirs: add etc/apparmor/init/network-interface-security
     and etc/apparmor.d
   - debian/nuntium.install: install profile in to place
   - debian/nuntium.links: symlink AppArmor profile in to
     network-interface-security to ensure it is loaded in time

=== modified file 'debian/control'
--- debian/control	2014-05-13 17:06:46 +0000
+++ debian/control	2014-06-24 22:21:18 +0000
@@ -10,6 +10,7 @@
  golang-go-dbus-dev,
  golang-go-xdg-dev,
  golang-gocheck-dev,
+ dh-apparmor,
 Standards-Version: 3.9.5
 Homepage: https://launchpad.net/nuntium
 Vcs-Browser: http://bazaar.launchpad.net/~phablet-team/nuntium/trunk/files

=== added file 'debian/nuntium.dirs'
--- debian/nuntium.dirs	1970-01-01 00:00:00 +0000
+++ debian/nuntium.dirs	2014-06-24 22:21:18 +0000
@@ -0,0 +1,2 @@
+etc/apparmor/init/network-interface-security
+etc/apparmor.d

=== modified file 'debian/nuntium.install'
--- debian/nuntium.install	2014-04-03 19:25:14 +0000
+++ debian/nuntium.install	2014-06-24 22:21:18 +0000
@@ -1,2 +1,3 @@
 debian/nuntium.conf /usr/share/upstart/sessions/
 usr/bin/nuntium
+debian/usr.bin.nuntium etc/apparmor.d

=== added file 'debian/nuntium.links'
--- debian/nuntium.links	1970-01-01 00:00:00 +0000
+++ debian/nuntium.links	2014-06-24 22:21:18 +0000
@@ -0,0 +1,1 @@
+etc/apparmor.d/usr.bin.nuntium etc/apparmor/init/network-interface-security/usr.bin.nuntium

=== modified file 'debian/rules'
--- debian/rules	2014-06-21 19:39:53 +0000
+++ debian/rules	2014-06-24 22:21:18 +0000
@@ -31,3 +31,7 @@
 
 override_dh_strip:
 	echo "Skipping strip"
+
+override_dh_installdeb:
+	dh_apparmor --profile-name=usr.bin.nuntium -pnuntium
+	dh_installdeb

=== added file 'debian/usr.bin.nuntium'
--- debian/usr.bin.nuntium	1970-01-01 00:00:00 +0000
+++ debian/usr.bin.nuntium	2014-06-24 22:21:18 +0000
@@ -0,0 +1,16 @@
+#include <tunables/global>
+
+# Permissive profile to have profile name to limit access to ofonod (LP: #1296415)
+/usr/bin/nuntium (attach_disconnected) {
+  capability,
+  mount,
+  remount,
+  umount,
+  network,
+  /   rwkl,
+  /** rwlkm,
+  /** pix,
+  dbus,
+  signal,
+  ptrace,
+}