lp:~sdeziel/apparmor/dnsmasq-lxd-bridge

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp:apparmor/2.12 at revision 3435

Christian Boltz: Approve on 2016-04-08

Diff: 14 lines (+4/-0)

1 file modified

profiles/apparmor.d/usr.sbin.dnsmasq (+4/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

3435. By Simon Déziel on 2016-04-08

usr.sbin.dnsmasq: add lxd-bridge rules

3434. By Christian Boltz on 2016-04-06

dovecot/auth: allow access to /var/run/dovecot/stats-user

Since the latest openSUSE Tumbleweed update (dovecot 2.2.21 -> 2.2.22),
dovecot/auth writes to /var/run/dovecot/stats-user.

Acked-by: Seth Arnold <email address hidden> for trunk, 2.10 and 2.9.

3433. By Tyler Hicks on 2016-04-06

parser: Fix dependency in Makefile

parser 'make install' failed if 'make' wasn't run before. This patch
adds the missing dependency 'install-indep: indep'.

Signed-off-by: Tyler Hicks <email address hidden>
Acked-by: Christian Boltz <email address hidden>

3432. By Christian Boltz on 2016-04-05

Fix dependency in binutils Makefile

binutils 'make install' failed if 'make' wasn't run before.
This patch adds the missing dependency 'install-indep: indep'

Acked-by: Seth Arnold <email address hidden>

3431. By Christian Boltz on 2016-04-05

Move binutils manpages to section 1

The binutils (aa-enabled and aa-exec) get installed into /usr/bin/ and
are meant to be used by non-root users. Therefore the manpages should be
in section 1 instead of 8 (which is for sysadmin commands).

Acked-by: Seth Arnold <email address hidden>

3430. By Tyler Hicks on 2016-03-29

tests: Allow stacking tests to use system programs and libraries

The stacking tests worked fine when using in-tree programs and libraries
but the tests unexpectedly failed when USE_SYSTEM=1 was specified. This
patch makes use of the addimage:$test argument to mkprofile.pl to
generate the correct file permissions needed to use the system binaries.

Signed-off-by: Tyler Hicks <email address hidden>
Acked-by: Steve Beattie <email address hidden>

3429. By Christian Boltz on 2016-03-29

Don't store exec modes in transtions[]

exec choices are stored in transitions[], but that's never used
(and I don't see a need for it), therefore stop storing it.

Note: hat choices (CMD_ADDHAT, CMD_USEDEFAULT and CMD_DENY) get still
stored in transitions[], and that information is used if the same hat
name appears again.

Acked-by: Steve Beattie <email address hidden>

3428. By Christian Boltz on 2016-03-28

Update abstractions/ssl_* for acmetool-generated certificates

acmetool is an alternative client for Let's Encrypt.
(https://github.com/hlandau/acme/)

It stores the certificates etc. in the following directory layout:

    /var/lib/acme/live/<domain> -> ../certs/<hash>
    /var/lib/acme/certs/<hash>/cert
    /var/lib/acme/certs/<hash>/chain
    /var/lib/acme/certs/<hash>/privkey -> ../../keys/<hash>/privkey
    /var/lib/acme/certs/<hash>/url
    /var/lib/acme/certs/<hash>/fullchain
    /var/lib/acme/keys/<hash>/privkey

This patch adds the needed permissions to the ssl_certs and ssl_keys
abstractions so that the certificates can be used.

Acked-by: Seth Arnold <email address hidden> for trunk, 2.10 and 2.9.

3427. By Steve Beattie on 2016-03-25

Merge JSON output options for aa-status.

Thanks to Max Timchenko <email address hidden> for the patch.

Acked-by: Steve Beattie <email address hidden>

3426. By Tyler Hicks on 2016-03-25

parser: Allow debugedit to work on apparmor_parser

https://launchpad.net/bugs/1561939

The debugedit program is unable to cope with the extra slash in the
LIBAPPARMOR_SRC variable.

Signed-off-by: Tyler Hicks <email address hidden>
Suggested-by: Christian Svensson <email address hidden>