Created by James Westby on 2009-06-15 and last modified on 2010-10-29
Get this branch:
bzr branch lp:ubuntu/hardy-updates/apparmor
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Ubuntu branches
Review team:
Ubuntu Development Team

Recent revisions

45. By nutznboltz on 2010-10-29

abstractions/base: backport the rule that allows /proc/*/maps
so that libc6 catch_segfault() can read them and because
other glibc *printf protections read the maps file too.
(LP: #668479)

44. By John Dong on 2009-04-28

SubDomain.pm: Ignore "force-complain/" to prevent aa-genprof from failing.
(LP: #331534)

43. By Jamie Strandboge on 2008-05-02

added abstractions/smbpass and #include it in abstractions/authentication
to allow access to /var/lib/samba/*.tdb. LP: #217787

42. By Kees Cook on 2008-04-07

parser/rc.apparmor.functions: do not abort if parser is missing, in
the case of an unpurged "apparmor" init script running under SELinux.

41. By Kees Cook on 2008-04-02

* Sync bugfixes from upstream 8.04 branch, svn 1161.
  - documentation updated to reflect AppArmor 2.1 features.
  - minor profile updates (nscd, ntpd, opera)
  - util/SubDomain.pm: corrected mask merging and type detection.

40. By Kees Cook on 2008-03-27

* profiles/apparmor.d/abstractions/nameservice: (LP: #207912)
  - fix ldap path
  - add nsswitch "db" backend paths

39. By Kees Cook on 2008-03-17

[ Kees Cook ]
* utils/SubDomain.pm:
  - fix up mask parsing to match kernel version (LP: #202920).
  - fix up syslog parsing regexp to match broken kernels (LP: #202888).
* profiles/apparmor.d/abstractions/base: add licenses path for reading.
* profiles/apparmor.d/abstractions/freedesktop.org: include /usr/local.
* profiles/apparmor.d/usr.sbin.smbd: include print client abstraction.
* profiles/apparmor.d/abstractions/nameservice: include missing gai.conf
  (LP: #202991).

[ Jamie Strandboge ]
* add Debian Policy compliant way to toggle complain mode (LP: #203137)
  - parser/rc.apparmor.functions: add '-C' to PARSER_ARGS if
    force-complain/<profile> exists
  - utils/enforce: remove symlink in force-complain/
  - debian/rules: create /etc/apparmor.d/force-complain

38. By Kees Cook on 2008-03-11

* profiles/apparmor.d/abstractions/python: update shared python locations.
* debian/control: adjust Depends to allow sysvinit (LP: #199871).

37. By Mathias Gug on 2008-02-13

[ Jamie Strandboge ]
 * removed usr.sbin.named and usr.sbin.mysqld, as these will be provided
   be bind9 and mysql-server-5.0, respectively.

[ Mathias Gug ]
 * profiles/apparmor.d/abstractions/ssl_keys: add ssl_keys abstraction, to
   be used by profiles accessing ssl privates keys.

[ Rick Clark ]
 * added abstraction for likewise-open.

36. By Kees Cook on 2008-01-16

* profiles/apparmor.d/abstractions/fonts: add missing ~/.fonts.conf
* profiles/apparmor.d/sbin.klogd: add newly needed @{PROC}/kallsyms

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
This branch contains Public information 
Everyone can see this information.