ubuntu/+source/apparmor-easyprof-ubuntu:ubuntu/utopic

Last commit made on 2014-10-22
Get this branch:
git clone -b ubuntu/utopic https://git.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
ubuntu/utopic
Repository:
lp:ubuntu/+source/apparmor-easyprof-ubuntu

Recent commits

2db9021... by Jamie Strandboge on 2014-10-22

Import patches-unapplied version 1.2.38 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: 7711600d8a0cba94d242cd4f3824cdc300e002fb

New changelog entries:
  * ubuntu/networking: add rules for app-specific ubuntu-download-manager
    file downloads (LP: #1384349)

7711600... by Jamie Strandboge on 2014-10-14

Import patches-unapplied version 1.2.37 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: 712247c73c1dd5f22fa2253f34f6ef8342d25e56

New changelog entries:
  * ubuntu/audio: also allow access to GetArtistArt when accessing the
    thumbnailer (LP: #1381102)

712247c... by Jamie Strandboge on 2014-10-08

Import patches-unapplied version 1.2.36 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: fcf3b31c5b9f9b61c93dac8a47634cea49cee380

New changelog entries:
  * ubuntu/accounts: allow all on org.freedesktop.DBus.Properties for
    /com/google/code/AccountsSSO/SingleSignOn/** (LP: #1378809)
  * ubuntu/ubuntu-*, pending/ubuntu-scope-local-content, ubuntu/webview: also
    allow read on /android/system/build.prop (LP: #1378838)

fcf3b31... by Jamie Strandboge on 2014-10-06

Import patches-unapplied version 1.2.35 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: ebdda8eccf367068a4644d00cf36a9ea22b13cf4

New changelog entries:
  * ubuntu/1.2/push-notification-client: don't deny access to the clipboard
    since sdk apps are supposed to be able to specify this policy group
  * ubuntu/1.2: add ubuntu-push-helper for push-helpers to use which (among
    other things) explicitly disables access to the clipboard (LP: #1371170)
  * adjust autopackagetest for ubuntu-push-helper
  * ubuntu/accounts: allow all on org.freedesktop.DBus.Properties for
    /com/google/code/AccountsSSO/SingleSignOn
  * ubuntu/1.2/ubuntu-scope-network, pending/ubuntu-scope-local-content: also
    add remaining libhybris paths (/{,var/}run/shm/hybris_shm_data and
    /system/build.prop)
  * ubuntu/ubuntu-sdk: explicitly disallow gsettings (dconf) access
    (LP: #1378115)

ebdda8e... by Jamie Strandboge on 2014-10-06

Import patches-unapplied version 1.2.34 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: 84b7f342d5f8ab7cec09216c10dab614f520c4b9

New changelog entries:
  * ubuntu/1.[12]/ubuntu-{sdk,webapp}: re-add still needed rule for
    /{,run/}shm/shm/WK2SharedMemory.[0-9]*. This needs to stay until qtwebkit
    is removed from the image (LP: #1377648)

84b7f34... by Jamie Strandboge on 2014-10-03

Import patches-unapplied version 1.2.33 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: aba0712278a381b17571330e57423ed4114c486f

New changelog entries:
  * ubuntu/accounts: allow access to GetAll on org.freedesktop.DBus.Properties
    for /com/google/code/AccountsSSO/SingleSignOn (LP: #1377205)
  * ubuntu/webview: also deny access to /custom/etc/dconf_profile. This is
    fallout from Oxide trying to use gsettings, but we've been silently
    denying that access since the webview policy group was added, so just
    silence this denial too (LP: #1260101)
  * ubuntu/ubuntu-{sdk,webapp}: also allow talking to clipboard on freedesktop
    interface (LP: #1377221)
  * tests/test-data.py: update hardware dir handling and also adjust policy
    groups to use tmpdir
  * debian/control: Build-Depends on apparmor so we can check syntax during
    builds

aba0712... by Jamie Strandboge on 2014-10-01

Import patches-unapplied version 1.2.32 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: 16790bffc107d0ba6756d5911ddd754374dc6694

New changelog entries:
  * ubuntu/1.2/ubuntu-scope-network, pending/ubuntu-scope-local-content:
    allow access to android libraries (LP: #1376430)
  * ubuntu/ubuntu-{sdk,webapp}: allow read access for thumbnailer icons
    (LP: #1376436)

16790bf... by Jamie Strandboge on 2014-10-01

Import patches-unapplied version 1.2.31 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: c81525b72b72dd2c34e4f2a7a304e9ef7e19b9f1

New changelog entries:
  * ubuntu/ubuntu-{sdk,webapp}: allow apps to read and write to their
    app-specific QML cached bytecode (LP: #1376361)

c81525b... by Jamie Strandboge on 2014-09-30

Import patches-unapplied version 1.2.30 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: 6dd6201e0a05ecd5f6934bf07c2f09be426486da

New changelog entries:
  * ubuntu/ubuntu-*: add owner /{run,dev}/shm/shmfd-* rwk (LP: #1370218)
  * ubuntu/microphone: remove shmfd access since it is in the templates now

6dd6201... by Jamie Strandboge on 2014-09-29

Import patches-unapplied version 1.2.29 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: d2da3b1e7adf0ef4b602e77f245754c1378a1ba4

New changelog entries:
  * ubuntu/webview: explicitly deny write access to @{PROC}/[0-9]*/oom_adj
    and @{PROC}/[0-9]*/oom_score_adj. This is confirmed as a way to escape
    application lifecycle (LP: #1260115)