Ubuntu
strongswan package

~paelzer/ubuntu/+source/strongswan:lp-1786250-self-fd-reads-cosmic

  1. Git
  2. lp:~paelzer/ubuntu/+source/strongswan
  3. lp-1786250-self-fd-reads-cosmic
Last commit made on 2018-09-24
Get this branch:
git clone -b lp-1786250-self-fd-reads-cosmic https://git.launchpad.net/~paelzer/ubuntu/+source/strongswan
Only Christian Ehrhardt  can upload to this branch. If you are Christian Ehrhardt  please log in for upload directions.

Branch merges

Branch information

Name:
lp-1786250-self-fd-reads-cosmic
Repository:
lp:~paelzer/ubuntu/+source/strongswan

Recent commits

0ad07e7... by Christian Ehrhardt 

changelog: fix apparmor denies reading the own FDs (LP: #1786250)

Signed-off-by: Christian Ehrhardt <email address hidden>

d74a857... by Christian Ehrhardt 

fix apparmor denies reading the own FDs (LP: #1786250)

As per LP #1786250, user noted audit failures in system log
against charon trying to read its own list of file descriptors
in /proc/<pid>/fd/.

We are uncertain when/why this started, however it is not
unreasonable for a process to attempt to read its own fd's,
so allow by extending the apparmor profile for charon.

References:
http://manpages.ubuntu.com/manpages/bionic/en/man5/apparmor.d.5.html
https://linux.die.net/man/5/proc

582ccbd... by Andreas Hasenack

Import patches-unapplied version 5.6.3-1ubuntu1 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Upload parent: 914d0606e00afd407437ea850454beba437a0ea2

914d060... by Andreas Hasenack

Cleanup d/changelog (removed signed-off lines)

bcb24b5... by Andreas Hasenack

update-maintainer

1c941f6... by Andreas Hasenack

reconstruct-changelog

bb919ae... by Andreas Hasenack

merge-changelogs

810dd28... by Andreas Hasenack

  * Dropped:
    - d/usr.sbin.charon-systemd: allow systemd notifications (LP: #1765652)
      [Fixed in 5.6.3-1]

c2bbd12... by Andreas Hasenack

    - d/usr.lib.ipsec.charon, d/usr/sbin/charon-systemd: Add support for
      usr-merge, thanks to Christian Ehrhardt. LP: #1784023

f5b8c3b... by Christian Ehrhardt 

    - d/usr.sbin.charon-systemd: allow to contact mysql for sql and
      attr-sql plugins (LP: #1766240)

Signed-off-by: Christian Ehrhardt <email address hidden>