lp:ubuntu/maverick-security/apparmor

Created by James Westby on 2011-01-07 and last modified on 2011-01-07
Get this branch:
bzr branch lp:ubuntu/maverick-security/apparmor
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Mature

Recent revisions

109. By Jamie Strandboge on 2011-01-05

* Fix for apparmor_parser not generating correct policy when mixing exec
  transitions with and without unconfined fallback transitions.
  - debian/patches/0011-lp693082.patch: adjust dfa match flag table size
    and fix index calculation for pux and cux.
  - LP: #693082

108. By Jamie Strandboge on 2010-09-27

abstractions/ubuntu-email: adjustment for ever-changing thunderbird path
(LP: #648900)

107. By Jamie Strandboge on 2010-09-10

[ Jamie Strandboge ]
* New upstream RC release (revision 1413). In addition to getting the tools
  to work with the maverick kernel, this update fixes:
  - LP: #619521
  - LP: #633369
  - LP: #626451
  - LP: #581525
  - LP: #623467 (link and unlink still need to be addressed)
* Dropped the following patches, included upstream:
  - 0002-lp615177.patch
  - 0004-ubuntu-pux.patch
  - 0006-kde4-config-pux.patch
  - 0007-lp605835.patch
  - 0012-lp625041.patch
  - 0013-lp623586.patch
* Update the following patches:
  - rename 0010-fix-release.patch as 0001-fix-release.patch since this will
    likely always need to be here
  - rename 0005-add-chromium-browser.patch as
    0002-add-chromium-browser.patch
  - rename 0001-local-includes.patch as 0003-local-includes.patch and update
    to use r1493 (from trunk) of local/README file. This can be dropped in
    2.6.
  - collect the ubuntu abstractions updates pulled from trunk into
    0004-ubuntu-abstractions-updates.patch. This can be dropped in 2.6.
  - rename 0008-lp601583.patch as 0005-lp601583.patch. This can be dropped
    in 2.5.1 final.
* fix up some lintian warnings:
  - debian/control:
    + don't use 'Section' in apparmor-notify, since it is the same as the
      source
    + updates Standards-Version to 3.9.1
    + add ${misc:Depends} to libapparmor-dev and apparmor-notify
  - add debian/source/format
  - debian/libapache2-mod-apparmor.postrm: use #DEBHELPER#
  - debian/libapache2-mod-apparmor.preinst: use #DEBHELPER#
  - add debian/watch
* debian/notify/notify.conf: set show_notifications="yes" by default
* debian/patches/0006-network-interface-enumeration.patch: allow network
  interface enumeration. This can be dropped in 2.5.1 final.
* debian/patches/0007-gnome-updates.patch: update for font/icon/mime
  locations in current gnome. This can be dropped in 2.5.1 final.

[ Kees Cook ]
* debian/apparmor.init: rename "stop" to "teardown", drop caches on
  "stop" and warn about the dangers of "teardown".

106. By Jamie Strandboge on 2010-09-03

* debian/profiles/chromium-browser: updated to have the proper path to
  local/
* debian/patches/0011-lp514356+573344+593413.patch: browser abstraction
  updates for /net, kmozillahelper and gnome-appearance-properties
  (LP: #593413, LP: #514356, LP: #573344)
* debian/patches/0012-lp625041.patch: add sensible-browser (LP: #625041)
* debian/patches/0013-lp623586.patch: allow access to ghostscript fonts when
  not using defoma (LP: #623586)

105. By Jamie Strandboge on 2010-08-11

* debian/patches/0007-lp605835.patch: allow ca-certificates in ssl_certs
  abstraction (LP: #605835)
* debian/patches/0008-lp601583.patch: adjust X abstraction for newer gdm
  (LP: #601583)
* debian/patches/0009-lp565753.patch: add ubuntu-feed-readers abstraction
  and have ubuntu-browsers.d/multimedia use it (LP: #565753)
* debian/apparmor.config: don't try to read in the existing value from
  /etc/apparmor.d/tunables/home.d/ubuntu, but instead always use what is
  in debconf. (LP: #561694)
* add aa-update-browser for giving a programmatic way to update browser
  profiles to use browser abstractions
  - add debian/aa-update-browser
  - add debian/aa-update-browser.8
  - debian/rules: install aa-update-browser*
* debian/patches/0003-ubuntu-browsers-d.patch: updated to generalize java
  child profile names
* debian/patches/0010-fix-release.patch: update common/Make.rules to use
  Canonical Ltd in generated documentation

104. By Jamie Strandboge on 2010-08-10

* debian/patches/0001-local-includes.patch: updated to adjust local/README
  to have upstream clarifications
* debian/patches/0003-ubuntu-browsers-d.patch: add ubuntu-browsers.d/*
  abstractions
* debian/patches/0004-ubuntu-pux.patch: use 'PUx' instead of 'Ux' in
  abstractions/ubuntu-*
* add chromium-browser profile. All this can be removed once
  chromium-browser ships its own profile:
  - debian/patches/0005-add-chromium-browser.patch: add preliminary
    profiles/apparmor.d/usr.bin.chromium-browser
  - debian/profiles/chromium-browser: added for use with ubuntu-browsers.d
  - debian/rules: ship debian/profiles/chromium-browser in apparmor-profiles
* don't make /etc/apparmor.d/local/* from apparmor-profiles conffiles
  - debian/control: Build-Depends on debhelper 7.4.20ubuntu5
  - debian/rules: use dh_apparmor instead of shipping the files as conffiles
  - debian/apparmor-profiles.postinst: move DEBHELPER before initscript
    reload
  - debian/apparmor-profiles.postrm: added to remove chromium-browser config
    file
* debian/patches/0006-kde4-config-pux.patch: remove kde4-config from kde
  abstraction and add it to kde ubuntu-browsers abstraction

103. By Jamie Strandboge on 2010-08-09

debian/patches/0002-lp615177.patch: 'owner' match in commit 1406 too
strict for /tmp/ and /var/tmp/ (LP: #615177)

102. By Jamie Strandboge on 2010-08-06

debian/rules: move local/usr.lib.apache2.mpm-prefork.apache2 to
libapache2-mod-apparmor

101. By Jamie Strandboge on 2010-08-05

* Update to upstream bzr revision 1393 from lp:apparmor/2.5.
  * add dbus-session abstraction (LP: #566207)
  * require owner in user-tmp abstraction (LP: #578922)
  * don't use uninitialized $opt_s (LP: #582075)
  * allow thunderbird 3 in abstractions/ubuntu-email (LP: #590462)
  * allow gmplayer in abstractions/ubuntu-media-players (LP: #591421)
* debian/control: updated branches.
* debian/patches/0001-local-includes.patch: backported patch from trunk to
  allow local administrators to customize their profiles without modifying
  a shipped profile
* debian/rules:
  - don't pass RELEASE to libapparmor's 'make install' as it breaks the
    build and isn't used by the Makfile anyway
  - install apparmor.d/local/README in apparmor, not apparmor-profiles
  - don't install apparmor.d/local/usr.sbin.ntpd
* Drop the following patches already included upstream:
  - 0001-lp538561.patch
  - 0002-aalogprof-warnings.patch
  - 0003-fix-memleaks.patch
  - 0004-lp549557.patch
  - 0005-lp538661.patch
  - 0006-lp611248.patch

100. By Jamie Strandboge on 2010-08-03

debian/patches/0006-lp611248.patch: allow access to gdk-pixbuf loaders
LP: #611248

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/natty/apparmor
This branch contains Public information 
Everyone can see this information.

Subscribers