Created by James Westby on 2010-10-13 and last modified on 2011-04-18
Get this branch:
bzr branch lp:ubuntu/natty/apparmor
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Ubuntu branches

Recent revisions

123. By Jamie Strandboge on 2011-04-18

* debian/patches/0003-add-debian-integration-to-lighttpd.patch: updates for
  lighttpd example profile to work in Debian/Ubuntu (LP: #582814)
* debian/patches/0004-lp754889.patch: add several image viewers to
  ubuntu-browsers.d/multimedia abstraction (LP: #754889)
* debian/patches/0005-lp761217.patch: abstractions/private-files updates for
  zsh and several other shells (LP: #761217)
* debian/patches/0001-add-chromium-browser.patch: fixes for multiarch and
  crash reporter (LP: #764786)

122. By Jamie Strandboge on 2011-04-07

debian/patches/0002-lp750381.path: adjust ubuntu-media-players abstraction
to allow reading of configs required by gnash and owner writing of
@{HOME}/.gnash (LP: #750381)

121. By Steve Beattie on 2011-03-24

* New upstream release.
  - Fixes breakage of mod_apparmor apache2 module (LP: #737074)
  - Fixes profile matching when an attachement doesn't contain a
    regex (LP: #731155)
  - Fixes parser acceptance of missing network protocols (LP: #732837)
  - Patches taken upstream and dropped:
    + debian/patches/0002-lp727478.patch
    + debian/patches/0003-test-lp727478.patch
    + debian/patches/0004-lp736870.patch
* debian/apparmor.install, debian/apparmor.dirs: add new multiarch
  tunable file and directory
* debian/python-libapparmor.install: loosen directory specification
  for resiliancy against different python versions

120. By Steve Langasek on 2011-03-22

* Update debian/patches/0004-lp736870.patch (LP: #736870):
  - armel triplet doesn't match '*-linux-gnu'
  - /lib/tls for libc6-xen needs handling
  - gnome, kde, kerberosclient, and authentication abstractions also need
    updating for multiarch.

119. By Jamie Strandboge on 2011-03-17

debian/patches/0004-lp736870.patch: add multiarch support to abstractions
(LP: #736870)

118. By Jamie Strandboge on 2011-03-03

* debian/patches/0002-lp727478.patch: Override AF_MAX for kernels that don't
  support proper masking. Patch thanks to John Johansen (LP: #727478)
* debian/patches/0003-test-lp727478.patch: add tcp.sh test as partial
  networking test

117. By Steve Beattie on 2011-02-24

[ Steve Beattie ]
* New upstream 2.6.0 release (LP: #724193)
  - Patches taken upstream and dropped:
    + 0001-ubuntu-buildd.patch
    + 0003-add-libvirt-support-to-dnsmasq.patch
    + 0004-lp698194.patch
    + 0005-aa-disable.patch
  - debian/rules: remove library path settings for mod_apparmor and
    pam_apprmor builds; upstream handles this properly now.
  - debian/apparmor-utils.install: handle upstream SubDomain.pm =>
    AppArmor.pm renaming
* debian/lib/apparmor/functions: handle profile names with embedded
  spaces (LP: #655523)
* debian/rules, debian/control, debian/python-libapparmor: build
  a python-libapparmor package.

[ Jamie Strandboge ]
* debian/copyright: update and reformat according to DEP-5
* debian/lib/apparmor/functions: don't unload dynamically generated libvirt
  profiles on reload, restart, and force-reload (LP: #702774)
* debian/control: use Section: python for python-libapparmor

116. By Jamie Strandboge on 2011-02-07

* debian/patches/0005-aa-disable.patch: add aa-disable
* debian/apparmor-utils.install: install aa-disable
* debian/apparmor-utils.manpages: install aa-disable man page

115. By Jamie Strandboge on 2011-01-07

* Merge with upstream bzr revision 1617. Closes the following bugs:
  - LP: #692406: temporarily disable the defunct repository until an
    alternative can be used
  - LP: #649497: add ibus abstraction
  - LP: #652562: allow 'rw' to /var/log/samba/cores/
  - LP: #658135: allow access to /usr/lib32 and /usr/lib64 for dri modules
* 0002-add-chromium-browser.patch: add /dev/shm/.org.chromium.*
  (LP: #692866)
* rename debian/patches/0010-ubuntu-buildd.patch to 0001-ubuntu-buildd.patch
  and adjust debian/patches/series
* debian/patches/0003-add-libvirt-support-to-dnsmasq.patch (LP: #697239):
  - allow read and write access to libvirt pid files for dnsmasq
  - allow net_admin capability for DHCP server
  - allow net_raw and network inet raw for ICMP pings when used as a DHCP
* debian/patches/0004-lp698194 (LP: #698194):
  - abstractions/private-files: don't allow wl to autostart directories
  - abstractions/private-files-strict: don't allow access to chromium,
    kwallet and popular mail clients

114. By Kees Cook on 2010-12-20

* Merge with upstream bzr revision 1601 to gain parser speed
  improvements and man page fixes. Closes the following bugs:
  - LP: #349049: document audit, deny and owner rule qualifiers
  - LP: #466228: ubuntu-browsers.d/multimedia: allow flash printing
  - LP: #644983: add ubuntu-browsers.d/ubuntu-integration-xul
  - LP: #692216: use aa_change_hat() instead of change_hat()
  - LP: #692217: add aa_change_profile.pod manpage
* debian/control: explicitly depend on gettext module.
* ship apparmor vim syntax file (LP: #646800):
  - debian/vim-apparmor.yaml: vim addon definition file.
  - debian/apparmor-utils.install: add apparmor.vim and vim-apparmor.yaml.
* debian/libapparmor1.manpages: ship aa_change_profile manpage.

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
This branch contains Public information 
Everyone can see this information.