Last commit made on 2017-03-28
Get this branch:
git clone -b applied/ubuntu/yakkety-updates https://git.launchpad.net/ubuntu/+source/apparmor
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information


Recent commits

a33c664... by Tyler Hicks on 2017-03-28

Import patches-applied version 2.10.95-4ubuntu5.3 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 6e9a21172e4424d8f51708601a5f0cc492ed5a4d
Unapplied parent: 541caa635e4e58fa66b8995ce80964838350b690

New changelog entries:
  * SECURITY UPDATE: Don't unload unknown profiles during package
    configuration or when restarting the apparmor init script, upstart job, or
    systemd unit as this could leave processes unconfined (LP: #1668892)
    - debian/apparmor.postinst, debian/apparmor.init, debian/apparmor.upstart:
      Remove calls to unload_obsolete_profiles()
    - debian/patches/utils-add-aa-remove-unknown.patch,
      debian/apparmor.install debian/apparmor.manpages: Include a new utility,
      aa-remove-unknown, which can be used to unload unknown profiles
    - CVE-2017-6507

541caa6... by Tyler Hicks on 2017-03-28

[PATCH] utils: Add aa-remove-unknown utility to unload unknown profiles

Gbp-Pq: utils-add-aa-remove-unknown.patch.

42789f7... by Tyler Hicks on 2017-03-28

profiles: Grant access to systemd-resolved in the nameservice abstraction

Gbp-Pq: profiles-grant-access-to-systemd-resolved.patch.

18befce... by Tyler Hicks on 2017-03-28

tests: Fix exec_stack.sh errors under 4.8 and newer kernels

Gbp-Pq: r3509-tests-fix-exec_stack-errors.patch.

67f8d56... by Tyler Hicks on 2017-03-28

Previously a stack with unconfined would cause the mode to be reported as mixed

Gbp-Pq: r3505-tests-fix-stacking-mode-checks.patch.

ff82bcf... by Tyler Hicks on 2017-03-28

logparser.py: ignore network events with 'send receive'

Gbp-Pq: r3498-r3499-ignore-net-events-that-look-like-file-events.patch.

8144479... by Tyler Hicks on 2017-03-28

Allow dbus-user-session D-Bus path

Gbp-Pq: r3492-allow-dbus-user-session-path.patch.

7c571ab... by Tyler Hicks on 2017-03-28

utils: Handle the safe/unsafe change_profile exec modes

Gbp-Pq: r3490-utils-handle-change-profile-exec-modes.patch.

b8abc6f... by Tyler Hicks on 2017-03-28

tests: Fix onexec.sh races by using the transition test program

Gbp-Pq: r3488-r3489-fix-racy-onexec-test.patch.

2e2504d... by Tyler Hicks on 2017-03-28

profiles: Create abstraction for mozc input method editor

Gbp-Pq: r3480-create-mozc-abstraction.patch.