lp:ubuntu/lucid-security/apparmor

Created by James Westby and last modified
Get this branch:
bzr branch lp:ubuntu/lucid-security/apparmor
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Mature

Recent revisions

101. By Micah Gersten

* fix LP: #989184 - Firefox 12's launcher script is not allowed in
  abstractions/ubuntu-browsers; This was a regression from the firefox
  path changing to a non-versioned path in the Firefox 12 packaging
  - add debian/patches/0016-lp989184.patch
  - update debian/patches/series
* fix LP: #990931 - Thunderbird is being blocked by apparmor from Firefox;
  This was a regression from the Thunderbird path changing to a non-versioned
  path in the Thunderbird 12 packaging
  - add debian/patches/0015-lp990931.patch
  - update debian/patches/series

100. By Jamie Strandboge

* Fix for apparmor_parser not generating correct policy when mixing exec
  transitions with and without unconfined fallback transitions.
  - debian/patches/0013-lp693082.patch: adjust dfa match flag table size
    and fix index calculation for pux and cux.
  - LP: #693082

99. By Jamie Strandboge

[ Jamie Strandboge ]
* debian/patches/lp-549557.patch: have apparmor_notify deal with log file
  rotation. (LP: #549557)
* debian/notify/notify.conf: set show_notifications="yes"
* debian/patches/0005-lp538661.patch: adjust php5 abstraction for cgi config
  file path and extensions (LP: #538661)

[ Kees Cook ]
* debian/apparmor.functions: do not load in parallel, this is causing
  weird side-effects.

98. By Marc Deslauriers

[ Jamie Strandboge ]
* debian/patches/0001-lp538561.patch: add 'k' to /var/lib/samba/**.tdb in
  the samba abstraction (LP: #538561)

[ Marc Deslauriers ]
* debian/patches/0002-aalogprof-warnings.patch: get rid of warnings when
  aa-logprof is run.
* debian/{rules,control}: move apache2 abstractions into the base package
  so we can put apache2 profiles into the -profiles package without
  aa-logprof bailing out. (LP: #539441)
* debian/patches/0003-fix-memleaks.patch: include a couple of leak
  patches from upstream.

97. By Kees Cook

* New upstream release.
* debian/control: updated branches.
* debian/copyright: updated download locations.
* debian/rules: drop unneeded build variables.
* common/Make.rules: set distributor.

96. By Jamie Strandboge

* Update to upstream bzr revision 1367
* debian/notify/90apparmor-notify: sleep for 60 seconds for boot speed and
  to make sure that X is all the way up so the notifications look pretty

95. By Kees Cook

* Update to upstream bzr revision 1364.
* debian/apparmor.functions: ignore .dpkg-bak files when loading too.

94. By Jamie Strandboge

debian/apparmor.postinst: on upgrades, prepopulate apparmor/homedirs
if it is not preseeded. Will check /etc/passwd for UIDs >= 1000 and
< 30000 for unique dirnames of home directories that are not /home. Fully
resolves (LP: #447292)

93. By Kees Cook

[ Kees Cook ]
* Update to upstream bzr revision 1362.
  - This release includes DFA minimization, transition table compression,
    and improved partitioning performance (LP: #503869).
  - drop 0001-tunable-alias.patch, now upstream.
* debian/apparmor.postinst: update home.d template to note the trailing
  slash, even if the debconf template mentions it too.
* debian/apparmor.functions: go fully parallel with parsing to use all
  CPUs in the case of needing to regenerate caches.
* debian/rules: enable library testsuite during build.
* debian/control: add dejagnu for library testsuite.
* debian/{rules,control}: use chrpath to drop rpath in libapparmor-perl.

[ Jamie Strandboge ]
* debian/control: add apparmor-notify
* add debian/notify/notify.conf
* add debian/notify/90apparmor-notify
* add debian/apparmor-notify.install: install notify.conf to /etc/apparmor
  and 90apparmor-notify to /etc/X11/Xsession.d
* debian/rules:
  - remove upstream notify.conf since we will install our own via debhelper
  - move apparmor_notify script and man pages to apparmor-notify

92. By Jamie Strandboge

0001-tunable-alias.patch: backport r1330 to make it easier for people
to use AppArmor's alias rules (LP: #160002)

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/natty/apparmor
This branch contains Public information 
Everyone can see this information.

Subscribers