lp:~sdeziel/apparmor/user-mail

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp:apparmor/2.12 at revision 3439

Seth Arnold: Approve on 2016-04-14

Diff: 12 lines (+1/-1)

1 file modified

profiles/apparmor.d/abstractions/user-mail (+1/-1)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

3439. By Simon Déziel on 2016-04-14

abstractions/user-mail: /var/mail/* should only be accessible to their owners

3438. By Seth Arnold on 2016-04-13

Merge samba fixes from Simon Deziel

3437. By Tyler Hicks on 2016-04-12

profiles: Add attach_disconnected flag to dnsmasq profile

https://launchpad.net/bugs/1569316

When Ubuntu made the jump from network-manager 1.0.4 to 1.1.93, the
dnsmasq process spawned from network-manager started hitting a
disconnected path denial:

  audit: type=1400 audit(1460463960.943:31702): apparmor="ALLOWED"
    operation="connect" info="Failed name lookup - disconnected path"
    error=-13 profile="/usr/sbin/dnsmasq"
    name="run/dbus/system_bus_socket" pid=3448 comm="dnsmasq"
    requested_mask="wr" denied_mask="wr" fsuid=65534 ouid=0

Signed-off-by: Tyler Hicks <email address hidden>
Acked-by: Christian Boltz <email address hidden>

3436. By John Johansen on 2016-04-11

Enable dynamically scaling max jobs if new resources are brought online

BugLink: http://bugs.launchpad.net/bugs/1566490

This patch enables to parser to scale the max jobs if new resources are
being brought online by the scheduler.

It only enables the scaling check if there is a difference between the
maximum number of cpus (CONF) and the number of online (ONLN) cpus.

Instead of checking for more resources regardless, of whether the online
cpu count is increasing it limits its checking to a maximum of
MAX CPUS + 1 - ONLN cpus times. With each check coming after fork spawns a
new work unit, giving the scheduler a chance to bring new cpus online
before the next check. The +1 ensures the checks will be done at least
once after the scheduling task sleeps waiting for its children giving
the scheduler an extra chance to bring cpus online.

Signed-off-by: John Johansen <email address hidden>
Acked-by: Seth Arnold <email address hidden>

3435. By Christian Boltz on 2016-04-08

merge lp:~sdeziel/apparmor/dnsmasq-lxd-bridge:

  Simon Deziel 2016-04-08 usr.sbin.dnsmasq: add lxd-bridge rules

Acked-by: Christian Boltz <email address hidden>

References: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1566944

3434. By Christian Boltz on 2016-04-06

dovecot/auth: allow access to /var/run/dovecot/stats-user

Since the latest openSUSE Tumbleweed update (dovecot 2.2.21 -> 2.2.22),
dovecot/auth writes to /var/run/dovecot/stats-user.

Acked-by: Seth Arnold <email address hidden> for trunk, 2.10 and 2.9.

3433. By Tyler Hicks on 2016-04-06

parser: Fix dependency in Makefile

parser 'make install' failed if 'make' wasn't run before. This patch
adds the missing dependency 'install-indep: indep'.

Signed-off-by: Tyler Hicks <email address hidden>
Acked-by: Christian Boltz <email address hidden>

3432. By Christian Boltz on 2016-04-05

Fix dependency in binutils Makefile

binutils 'make install' failed if 'make' wasn't run before.
This patch adds the missing dependency 'install-indep: indep'

Acked-by: Seth Arnold <email address hidden>

3431. By Christian Boltz on 2016-04-05

Move binutils manpages to section 1

The binutils (aa-enabled and aa-exec) get installed into /usr/bin/ and
are meant to be used by non-root users. Therefore the manpages should be
in section 1 instead of 8 (which is for sysadmin commands).

Acked-by: Seth Arnold <email address hidden>

3430. By Tyler Hicks on 2016-03-29

tests: Allow stacking tests to use system programs and libraries

The stacking tests worked fine when using in-tree programs and libraries
but the tests unexpectedly failed when USE_SYSTEM=1 was specified. This
patch makes use of the addimage:$test argument to mkprofile.pl to
generate the correct file permissions needed to use the system binaries.

Signed-off-by: Tyler Hicks <email address hidden>
Acked-by: Steve Beattie <email address hidden>