Merge lp:~jpds/ubuntu/trusty/apparmor/ipsec-abstraction into lp:ubuntu/trusty/apparmor

[Jonathan Davies]

Added an abstraction for ipsec configuration files.

Unmerged revisions

67. By Jonathan Davies on 2013-12-21

Added 2.8.0-0ubuntu36 changelog entry.

66. By Jonathan Davies on 2013-12-21

Created ipsec abstraction.

=== modified file 'debian/changelog'
--- debian/changelog	2013-11-29 13:44:49 +0000
+++ debian/changelog	2013-12-21 17:12:49 +0000
@@ -1,3 +1,9 @@
+apparmor (2.8.0-0ubuntu36) UNRELEASED; urgency=low
+
+  * abstractions/ipsec: Created.
+
+ -- Jonathan Davies <[e-mail]>  Sat, 21 Dec 2013 17:06:21 +0000
+
 apparmor (2.8.0-0ubuntu35) trusty; urgency=low
 
   * abstractions/nameservice: Also allow access to the sssd nss pipe.

=== added file 'profiles/apparmor.d/abstractions/ipsec'
--- profiles/apparmor.d/abstractions/ipsec	1970-01-01 00:00:00 +0000
+++ profiles/apparmor.d/abstractions/ipsec	2013-12-21 17:12:49 +0000
@@ -0,0 +1,17 @@
+# ------------------------------------------------------------------
+#
+#    Copyright (C) 2013 Canonical Ltd.
+#
+#    This program is free software; you can redistribute it and/or
+#    modify it under the terms of version 2 of the GNU General Public
+#    License published by the Free Software Foundation.
+#
+# ------------------------------------------------------------------
+
+  # AppArmor abstraction for IPsec-related rules.
+
+  /etc/ipsec.conf             r,
+  /etc/ipsec.secrets          r,
+  /etc/ipsec.d/               r,
+  /etc/ipsec.d/**             r,
+