lp:~sdeziel/apparmor/wireshark-refresh

Created by Simon Déziel on 2016-04-13 and last modified on 2016-04-13
Get this branch:
bzr branch lp:~sdeziel/apparmor/wireshark-refresh
Only Simon Déziel can upload to this branch. If you are Simon Déziel please log in for upload directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Simon Déziel
Project:
AppArmor
Status:
Merged

Recent revisions

3439. By Simon Déziel on 2016-04-13

usr.bin.wireshark: refresh for Xenial

3438. By Seth Arnold on 2016-04-13

Merge samba fixes from Simon Deziel

3437. By Tyler Hicks on 2016-04-12

profiles: Add attach_disconnected flag to dnsmasq profile

https://launchpad.net/bugs/1569316

When Ubuntu made the jump from network-manager 1.0.4 to 1.1.93, the
dnsmasq process spawned from network-manager started hitting a
disconnected path denial:

  audit: type=1400 audit(1460463960.943:31702): apparmor="ALLOWED"
    operation="connect" info="Failed name lookup - disconnected path"
    error=-13 profile="/usr/sbin/dnsmasq"
    name="run/dbus/system_bus_socket" pid=3448 comm="dnsmasq"
    requested_mask="wr" denied_mask="wr" fsuid=65534 ouid=0

Signed-off-by: Tyler Hicks <email address hidden>
Acked-by: Christian Boltz <email address hidden>

3436. By John Johansen on 2016-04-11

Enable dynamically scaling max jobs if new resources are brought online

BugLink: http://bugs.launchpad.net/bugs/1566490

This patch enables to parser to scale the max jobs if new resources are
being brought online by the scheduler.

It only enables the scaling check if there is a difference between the
maximum number of cpus (CONF) and the number of online (ONLN) cpus.

Instead of checking for more resources regardless, of whether the online
cpu count is increasing it limits its checking to a maximum of
MAX CPUS + 1 - ONLN cpus times. With each check coming after fork spawns a
new work unit, giving the scheduler a chance to bring new cpus online
before the next check. The +1 ensures the checks will be done at least
once after the scheduling task sleeps waiting for its children giving
the scheduler an extra chance to bring cpus online.

Signed-off-by: John Johansen <email address hidden>
Acked-by: Seth Arnold <email address hidden>

3435. By Christian Boltz on 2016-04-08

merge lp:~sdeziel/apparmor/dnsmasq-lxd-bridge:

  Simon Deziel 2016-04-08 usr.sbin.dnsmasq: add lxd-bridge rules

Acked-by: Christian Boltz <email address hidden>

References: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1566944

3434. By Christian Boltz on 2016-04-06

dovecot/auth: allow access to /var/run/dovecot/stats-user

Since the latest openSUSE Tumbleweed update (dovecot 2.2.21 -> 2.2.22),
dovecot/auth writes to /var/run/dovecot/stats-user.

Acked-by: Seth Arnold <email address hidden> for trunk, 2.10 and 2.9.

3433. By Tyler Hicks on 2016-04-06

parser: Fix dependency in Makefile

parser 'make install' failed if 'make' wasn't run before. This patch
adds the missing dependency 'install-indep: indep'.

Signed-off-by: Tyler Hicks <email address hidden>
Acked-by: Christian Boltz <email address hidden>

3432. By Christian Boltz on 2016-04-05

Fix dependency in binutils Makefile

binutils 'make install' failed if 'make' wasn't run before.
This patch adds the missing dependency 'install-indep: indep'

Acked-by: Seth Arnold <email address hidden>

3431. By Christian Boltz on 2016-04-05

Move binutils manpages to section 1

The binutils (aa-enabled and aa-exec) get installed into /usr/bin/ and
are meant to be used by non-root users. Therefore the manpages should be
in section 1 instead of 8 (which is for sysadmin commands).

Acked-by: Seth Arnold <email address hidden>

3430. By Tyler Hicks on 2016-03-29

tests: Allow stacking tests to use system programs and libraries

The stacking tests worked fine when using in-tree programs and libraries
but the tests unexpectedly failed when USE_SYSTEM=1 was specified. This
patch makes use of the addimage:$test argument to mkprofile.pl to
generate the correct file permissions needed to use the system binaries.

Signed-off-by: Tyler Hicks <email address hidden>
Acked-by: Steve Beattie <email address hidden>

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:apparmor/2.12
This branch contains Public information 
Everyone can see this information.

Subscribers