ubuntu/+source/apparmor-easyprof-ubuntu:ubuntu/vivid-devel

Last commit made on 2015-04-08
Get this branch:
git clone -b ubuntu/vivid-devel https://git.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
ubuntu/vivid-devel
Repository:
lp:ubuntu/+source/apparmor-easyprof-ubuntu

Recent commits

b56d4e3... by Jamie Strandboge on 2015-04-07

Import patches-unapplied version 1.3.10 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: 351e7c325668e58505f6c9b35bb0a62bc45088c4

New changelog entries:
  * templates/*: explicitly deny noisy access to accountsservice
    (LP: #1433590)

351e7c3... by Jamie Strandboge on 2015-03-30

Import patches-unapplied version 1.3.9 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: 43c6f5267dd8c6e96668b7283a2879637864afa6

New changelog entries:
  * templates/ubuntu-sdk|ubuntu-webapp: explicitly deny noisy /dev/tty access
  * policygroups/accounts: also deny 'r' to /{,var/}run/user/*/signond/socket
    to silence expected noisy denial (LP: #1415492)

43c6f52... by Jamie Strandboge on 2015-03-04

Import patches-unapplied version 1.3.8 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: a8d5392a8aceb78a848db2925257c80c0c1f750f

New changelog entries:
  * hardware/video.d/apparmor-easyprof-ubuntu_mako: add accesses for
    video4linux 1 and 2 devices needed by mediascanner2 (gst-plugin-scanner)
    et al

a8d5392... by Jamie Strandboge on 2015-02-26

Import patches-unapplied version 1.3.7 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: 482fd2711b6f6588fd75e512aa9de57ab8ffa6c5

New changelog entries:
  * ubuntu/webview: allow oxide_helper read access to /sys/devices/system/cpu/
    and /sys/devices/system/cpu/cpu[0-9]*/cpufreq/cpuinfo_max_freq

482fd27... by Steve Beattie on 2015-02-18

Import patches-unapplied version 1.3.6 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: b7169023e664b1c15de47065c936503d5415b0f1

New changelog entries:
  * ubuntu/1.0/ubuntu-{sdk,webapp}: also allow access to mir libraries via
    the new mir abstraction for 1.0 templates (LP: #1422521)
  * ubuntu/1.[123]/ubuntu-{sdk,webapp}: allow access to mir libraries via
    the new mir abstraction (LP: #1422521)
  * debian/control: update version dependency to ensure the mir
    abstraction exists

b716902... by Jamie Strandboge on 2015-02-03

Import patches-unapplied version 1.3.4 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: add77e8ce677bf7fb5648e2578727f8614ca701b

New changelog entries:
  [ Alberto Mardegan ]
  * ubuntu/accounts: explictly deny access to the p2p socket. This will now be
    available only to unconfined apps to support a trusted socket for
    privileged processes (LP: #1415492)
  [ Jamie Strandboge ]
  * add ubuntu/1.2/ubuntu-account-plugin template and add to 1.3 policy
    (LP: #1219644)
  * adjust expected_templates_12 in autopkgtests to have ubuntu-account-plugin
  * ubuntu/webview: allow /sys/devices/system/cpu/*/cpufreq/cpuinfo_max_freq
    readonly access

add77e8... by Jamie Strandboge on 2015-01-08

Import patches-unapplied version 1.3.3 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: 7dd8f70d8a03a32ae03ea2d16bec6cffaf54894f

New changelog entries:
  * ubuntu/{music,pictures,video}_files*: temporarily allow read access to
    global SD card user directory (LP: #1392368). This can be removed once
    there is a proper API for apps to find the SD card label.

7dd8f70... by Jamie Strandboge on 2015-01-08

Import patches-unapplied version 1.3.2 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: 91945a2a3849af1ef1c8d5694c2a123cf601ff79

New changelog entries:
  [ Ricardo Salveti de Araujo ]
  * Adding hardware/video.d/apparmor-easyprof-ubuntu_manta to allow rw on
    /dev/video*, needed for hardware video decoding (LP: #1408130). (Note: we
    may need to add rw on /dev/v4l-subdev*, but this seems to be enough for
    now)

91945a2... by Jamie Strandboge on 2014-12-15

Import patches-unapplied version 1.3.1 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: 6781ed719ccc9f8cf0c3de9a6784507dd7d537b5

New changelog entries:
  * ubuntu/ubuntu-sdk:
    - explicitly deny reads on ~/.cache/QML/Apps/ to silence noisy denials.
      Undo this when LP: 1381620 is fixed in qtdeclarative-opensource-src
    - explicitly deny dbus bind on name="org.freedesktop.Application" since
      it is noisy. Undo this when LP: 1378823 is fixed in ubuntu-ui-toolkit
  * ubuntu/1.3/ubuntu-sdk: drop html5-container policy. html5 apps should use
    webapp-container and specify the 'webview' policy group with 1.3 (15.04)
    policy (LP: #1392461)
  * ubuntu/ubuntu-scope-network, pending/ubuntu-scope-local-content: allow
    scopes to read data from the apps data dir (LP: #1384286)
  * adjust all dbus rules to use peer=(label=unconfined) to prevent
    coordinated communications between apps over DBus (LP: #1383824)
  * ubuntu/{music,pictures,video}_files*: allow access to global SD card
    directories (LP: #1391930)
  * debian/control: Depends on apparmor >= 2.8.98-0ubuntu2~ for the dbus peer
    changes (we need at least apparmor_parser 2.9.beta4 for these)

6781ed7... by Jamie Strandboge on 2014-10-29

Import patches-unapplied version 1.3.0 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: 2db9021b8374b08ad6db5e264c97ba041b0e9f4e

New changelog entries:
  * debian/control:
    - add Vcs-Bzr and Vcs-Browser now that we have them
    - adjust Standards-Version
  * add debian/make-new-version.sh and document how to use it
  * create policy version 1.3
  * adjust autopkgtests:
    - add tests for policy version 1.3
    - fix lintian warnings in naming of the tests
  * debian/apparmor-easyprof-ubuntu.postinst: add #DEBHELPER# token