~sbeattie/apparmor/+git/apparmor:master

Last commit made on 2017-10-28
Get this branch:
git clone -b master https://git.launchpad.net/~sbeattie/apparmor/+git/apparmor
Only Steve Beattie can upload to this branch. If you are Steve Beattie please log in for upload directions.

Branch merges

Branch information

Name:
master
Repository:
lp:~sbeattie/apparmor/+git/apparmor

Recent commits

29b20fd... by Steve Beattie

git conversion: move .bzrignore to .gitignore

Signed-off-by: Steve Beattie <email address hidden>

df0f20f... by Steve Beattie

parser+libapparmor: partially address issues building with musl

adjust macros and header inclusion to make progress on building with the
musl C library.

Acked-by: Steve Beattie <email address hidden>

c4a4e5b... by Steve Beattie

profiles: add attach_disconnected flags to example apache profile

Without it, seeing rejections like:

  apparmor="ALLOWED" operation="file_mmap" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/apache2" name="" pid=13777 comm="apache2" requested_mask="rw" denied_mask="rw" fsuid=0 ouid=0

Acked-by: Steve Beattie <email address hidden>

Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=875892

d2f7f21... by Steve Beattie

profiles: update wireshark profile for modern releases

Acked-by: Steve Beattie <email address hidden>

eab153a... by John Johansen

Bump version 2.11.95 for 2.12 beta

Signed-off-by: John Johansen <email address hidden>

f737cc3... by Steve Beattie

profiles: allow OpenAL HRTF support in audio abstraction

The files are "head-related transfer function" data sets, used by
OpenAL for better spatialization of sounds when headphones are detected.

Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874665

7aeebcb... by Christian Boltz

Keep JSON version at 2.12

We never did a release with the JSON code, and YaST (the only known user
of the JSON interface) will work with the added 'changes' dialog type
from r3721 without needing changes.

Also add a better comment/reason why a response for 'changes' is
expected, but gets ignored.

Reviewed-by: Goldwyn Rodrigues <email address hidden>
Acked-by: Steve Beattie <email address hidden>

62e9169... by Steve Beattie

utils: stop rewriting shbang lines in setup script

The python setup tools script is set to rewrite the shbang line of
scripts installed in ${PREFIX}/bin/ if the PYTHON environment variable
is set. Unfortunately, this (a) only covers the aa-easyprof script
as the rest are installed in ${PREFIX}/sbin/, and (b) we've deprecated
python 2 support, and hardcoded python3 as the interpreter for all of
the python scripts in the utils/ directory.

The only use for this feature would be if for some reason the utils did
not work properly with the default python3 interpreter and a specific
version was needed to be set, but I don't think that warrants keeping
the extra bit of code complexity around (and indeed, the snippet that
does this is forcibly disabled in Debian/Ubuntu).

Therefore, drop the shbang rewriting entirely.

Signed-off-by: Steve Beattie <email address hidden>
Acked-by: John Johansen <email address hidden>

ffeb6c0... by Steve Beattie

binutils: honor ${CFLAGS} and ${CPPFLAGS}

Acked-by: Steve Beattie <email address hidden>

ad94da3... by Steve Beattie

profiles: tunables/global - accept seven digit pids

On 64bit systems, /proc/sys/kernel/pid_max can be set to PID_MAX_LIMIT,
(2^22), which results in seven digit pids. Adjust the @{PID} variable in
tunables/global to accept this.

Acked-by: intrigeri <email address hidden>
Acked-by: Steve Beattie <email address hidden>