Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

apparmor-profiles-2.8.0-2.4.1 RPM for noarch

From OpenSuSE 12.2 for noarch

Name: apparmor-profiles Distribution: openSUSE 12.2
Version: 2.8.0 Vendor: openSUSE
Release: 2.4.1 Build date: Fri Aug 10 19:14:08 2012
Group: Productivity/Security Build host: build19
Size: 229573 Source RPM: apparmor-2.8.0-2.4.1.src.rpm
Summary: AppArmor profiles that are loaded into the apparmor kernel module
Base profiles. AppArmor is a file and network mandatory access control
mechanism. AppArmor confines processes to the resources allowed by the
systems administrator and can constrain the scope of potential security

This package is part of a suite of tools that used to be named




GPL-2.0 ; LGPL-2.1+


* Thu Aug 09 2012
  - clear and update inconsistent profile cache (bnc#774529)
* Sun Aug 05 2012
  - abstractions/bash: update /bin/ls to also match /usr/bin/ls (usrMerge)
* Mon Jul 30 2012
  - Add required fonts for new TeXLive 2012
* Fri Jul 06 2012
  - update /bin/ping profile to also match /usr/bin/ping (usrMerge)
* Sat Jun 02 2012
  - update to AppArmor 2.8.0 (= r2047)
    - new utility aa-easyprof - templated profile generation tool (the resulting
      profile may be less strict than profiles generated with genprof/logprof)
    - various small bugfixes
  - removed upstreamed patches
* Tue May 08 2012
  - add apparmor-techdoc.patch to remove traces of the build time in PDF files
* Sat May 05 2012
  - update to AppArmor 2.8 beta5 (= 2.7.103 / r2031)
    - new utility aa-exec to confine a program with the specified AppArmor profile
    - add support for mount rules
    - see for full upstream
  - removed upstreamed and backported patches
  - remove outdated autobuild and "disable repo" patches that were disabled since
    the AppArmor 2.7 package
  - create the Immunix::SubDomain compat perl module only for openSUSE <= 12.1
    (bnc#720617 #c7)
* Mon Apr 16 2012
  - replace patch for dnsmasq profile with upstream patch (bnc#738905)
* Fri Apr 13 2012
  - add apparmor-r2022-log-parser-network-bnc755923.patch - logprof didn't
    create network rules because of changed log format (bnc#755923, lp#800826)
  - add profile for samba winbindd (bnc#748499)
* Fri Apr 06 2012
  - fix dnsmasq profile (bnc#738905)
* Thu Feb 09 2012
  - add 0001-fix-for-lp929531.patch to allow reading
    /sys/devices/system/cpu/online in abstractions/base (lp#929531)
* Tue Jan 31 2012
  - Update to AppArmor 2.7.2 (= 2.7 branch / r1894)
    - move various permissions from httpd2-prefork profile to
      abstractions/apache2-common. Backward-incompatible change: *.htaccess
      files are no longer allowed for ^HANDLING_UNTRUSTED_INPUT
    - allow access for more /usr/lib*/samba/ files for smbd (bnc#725967#c5)
    - allow various .conf files for dovecot (lp#458922)
    - disallow wl for *.so in @{HOME}/.pki/nssdb/ in abstractions/private-files
      and abstractions/private-files-strict (lp#911847)
    - update abstractions/kde, private-files* and ubuntu-browsers.d/user-files
      to use ~/.kde4, not only ~/.kde (bnc#741592)
    - block write access to ~/.kde{,4}/env in abstractions/private-files
    - allow write access for personal dictionary etc. in abstractions/aspell
    - when using genprof for a script, include read access to the script itsself
    - automatically include abstractions/python or abstractions/ruby for
      python/ruby scripts
    - add profile for smbldap-useradd and allow smbd to call it (bnc#738041)
    - allow creation of the .config directory in abstractions/enchant (lp#914184)
    - allow TFTP read-only access in dnsmasq profile (lp#905412)
    - allow capability dac_read_search for syslog-ng (bnc#731876)
    - add p11-kit abstraction and include it in abstractions/authentification
      (lp#912754, lp#912752)
    - add audacity to abstractions/ubuntu-media-players (lp#899963)
    - allow software-center, fireclam plugin, [tT]unar, exo-open, kate and
      /dev/nvidia* in abstractons/ubuntu-browsers.d/* (lp#662906, lp#562831,
      lp#890894, lp#890894, lp#884748)
    - fix typo for multiarch gconf-modules in abstractions/base (lp#904548)
    - allow avahi to do dbus introspection (lp#769148)
    - allow access to ~/.fonts.conf.d in abstractions/fonts (lp#870992)
    - allow transmission in abstractions/ubuntu-bittorrent-clients (lp#852062)
    - allow reading ~/.cups/client.conf and ~/.cups/lpoptions in
      abstractions/cups-client (lp#887992)
    - allow read access of /etc/python{2,3}.[0-7]*/ in
      abstractions/python (lp#860856)
    - various updates to the sshd profile (lp#817956)
    - (and some more changes I already included in the apparmor-2.7-branch.diff)
* Tue Jan 03 2012
  - Update to AppArmor 2.7.0 (= r1858)
    - make traceroute6 work (bnc#733312)
    - allow access to pyconfig.h in abstractions/python (lp#840734)
    - fix logprof/genprof for hex-encoded program filenames (= filenames
      containing space etc.)
  - add apparmor-2.7-branch.diff with some upstreamed fixes:
    - usr.sbin.smbd needs read access for /etc/netgroup (bnc#738041)
    - create /etc/apparmor.d/tunables/multiarch.d as directory, not as file
    - fix syntax error in abstractons/python
* Tue Nov 29 2011
  - changed a $ -> % (typo)
* Sat Nov 26 2011
  - package subdomain.conf only in -parser, not in -utils package
  - package and only in libapparmor-devel,
    not in libapparmor1
  - make Provides for perl-libapparmor versioned to avoid self-Obsoletes
  - move libapparmor.a and libimmunix.a from libapparmor1 to
    libapparmor-devel package
* Thu Nov 10 2011
  - update to AppArmor 2.7.0 rc2
    Most of the changes since rc1 were already included as patches.
    Additional changes:
    - fix logprof/genprof to recognize "mknod" in audit.log
    - fix libapparmor python bindings to compile with python 3
    - fix wrong status message in initscript if apparmor-utils are not installed
    - parser/Makefile: fix some warnings, always respect CXX and LDFLAGS
    - fix some warnings in utils/Makefile
  - remove 4 upstreamed patches
  - remove mkdir /etc/apparmor.d/disable - that's done by upstream Makefile now
  - update line numbers in 2 patches
* Tue Nov 01 2011
  - make abstractions/winbind working on 64bit systems
  - allow loading the libraries for samba "vfs objects" also on 32bit
    systems (bnc#725967)
* Wed Oct 26 2011
  - allow loading the libraries for samba "vfs objects" (bnc#725967)
* Wed Oct 19 2011
  - include autogenerated profile sniplet for samba shares (bnc#688040)
  - more helpful error message for "aa-notify -p" if the user is not in
    the configured group
* Thu Oct 13 2011
  - update to AppArmor 2.7.0 rc1
    - aa-notify: add --display option and warn if $DISPLAY is not set
      (important for usage with sudo on openSUSE)
    - fix syntax error on "rcapparmor stop"
    - allow read access to /proc/*/mounts in the dovecot profile
* Sun Oct 09 2011
  - add patch with upstream changes since 2.7.0 beta2 release
    - add example parser.conf
    - print warning if profile cache directory doesn't exist
    - remove initscript for no longer existing aa-eventd (bnc#720617)
    - set correct $HOME in aa-notify
  - enable caching of profiles (= massive speedup) (bnc#689458)
  - add comments for patches in .spec and comments in some patches
  - run spec-cleaner
* Fri Sep 30 2011
  - add libtool as buildrequire to make the spec file more reliable
* Fri Sep 16 2011
  - update to AppArmor 2.7.0 beta2
    - includes fixes for bnc#717707, bnc#678749, bnc#685674, bnc#679182,
      bnc#691072, bnc#705319, bnc#713728
  - add some missing perl module Requires to perl-apparmor
* Tue Sep 13 2011
  - update to AppArmor 2.7.0 beta1, for details see
  - removed lots of patches I pushed upstream
  - disabled apparmor-2.5.1-unified-build (patch to use automake,
    does not apply to 2.7 and probably won't be accepted upstream)
  - disabled build of tomcat_apparmor (doesn't build, deprecated upstream)
  - run spec-cleaner
  - remove *.la files
  - move usr.sbin.nscd profile back to apparmor-profiles package
* Wed Sep 07 2011
  - Update patch apparmor-profiles-usr.sbin.dnsmasq to include
    /var/lib/libvirt/dnsmasq/*.leases (bnc#694197).
* Mon Aug 22 2011
  - install compat module (bnc#713408)
* Wed Aug 03 2011
  - Update to 2.6.1.
    - One patch eliminated
    - Lots of minor fixes
    - Split out more common abstractions
  - Add check_for_apparmor() helper.
* Tue Aug 02 2011
  - dhcpd: Fix apparmor profile (bnc#692428)
* Tue Aug 02 2011
  - Add apparmor-securityfs-systemd.patch: do not mount securityfs
    when running under systemd, just access the directory, systemd
    will automount it (bnc#704460).
* Sun Jul 17 2011
  - Fixed typos in descriptions and summaries of apparmor.spec
* Fri Jun 24 2011
  - Fixed building of pam_apparmor to properly link libpam (bnc#696553).
  - Fixed building of apache2-mod_apparmor to properly link (bnc#701821).
* Tue Jun 21 2011
  - move the requires and prerequires to the right package
* Wed Apr 27 2011
  - make the -doc and -profiles subpackages noarch (again)
* Thu Mar 24 2011
  - Added alias from Immunix::SubDomain to Immunix:AppArmor to allow
    older users of perl-apparmor to work properly.
* Tue Mar 22 2011
  - Properly re-created links to old utility names.
* Mon Mar 14 2011
  - Added /etc/ethers and /var/run/dnsmasq-forwarders to
    usr.sbin.dnsmasq (bnc#678749)
* Mon Mar 14 2011
  - Update to 2.6.0
    - 19 patches eliminated
    - Lots of minor fixes.
    - Split out more common abstractions
    - Added more local includes
* Tue Mar 01 2011
  - Additional libvirt related fixes in usr.sbin.dnsmasq (bnc#675867)
* Thu Feb 24 2011
  - Added 'network packet raw' to dhclient profile.
* Tue Feb 22 2011
  - Add Requires for used perl packages (bnc#670650).
* Tue Jan 25 2011
  - Updated dhclient profile and added dhclient-script profile (bnc#561152).
* Tue Jan 25 2011
  - Added ability to completely disable repositories.
* Mon Jan 24 2011
  - Properly indent sub-profiles after genprof completion (bnc#480795).
* Mon Jan 24 2011
  - Inherit flags in sub-profiles when generating profiles (bnc#496204).
* Mon Jan 24 2011
  - Stop treating profiles shipped with the package as config files.
    - /etc/apparmor.d will still be treated specially.
  - Add support for parsing network operation events (bnc#665483)
* Sun Jan 23 2011
  - Fix for sbin.klogd profile using kernel versions >= 2.6.38-rc1.
* Sun Jan 23 2011
  - Update to apparmor-2.5 r1445.
    - Includes 3 of the fixes below.
    - Several testsuite fixes.
    - Update for Thunderbird profile.
* Fri Jan 21 2011
  - Add support for libvirt in usr.sbin.dnsmasq (bnc#666090)
* Tue Jan 18 2011
  - fix rm call for nscd profile to avoid file conflict
* Tue Jan 11 2011
  - profiles: Add openssl abstraction (bnc#623886).
* Tue Jan 11 2011
  - Added support for sys_nice to ntpd profile (bnc#657054).
* Mon Jan 10 2011
  - apparmor-utils: Support newer auditd formatted messages.
  - Fix two x transition conflict bugs. (bnc#662928)
* Thu Jan 06 2011
  - Splitted ldap related things from nameservice into separate
    profile and added some missing paths (bnc#662761)
* Wed Dec 22 2010
  - Fixed pod2man macros with older versions of GNU make
* Mon Dec 20 2010
  - Fixed building of perl and ruby SWIG modules. The former
    is required for apparmor-utils to work properly.
* Tue Dec 07 2010
  - Fixed use-after-free issue in apparmor_parser.
* Tue Dec 07 2010
  - Added fixes for logprof issuing uninitialized variable errors
    while encountering audit messages for unconfined processes.
* Wed Dec 01 2010
  - Updated cupsd profile (bnc#539401)
* Wed Dec 01 2010
  - Fix {proc} vs {PROC} macro usage in firefox profile (bnc#436262)
* Wed Dec 01 2010
  - Added support for eDirectory nameservice (bnc#621394)
* Wed Dec 01 2010
  - Fixed incorrect /proc/*/sys usage in usr.sbin.ntpd profile (bnc#634801)
* Wed Dec 01 2010
  - Added fix for another case of whitespace affecting profile
    removal (bnc#510740)
* Tue Nov 30 2010
  - Added support for unified build, which massively simplified
    the packaging.
* Mon Nov 15 2010
  - Fix for syslog-ng profile to allow upgrade to v3.2
  - add mysql support to syslog-ng profile
* Thu Oct 21 2010
  - Added support for enabling/disabling the module automatically
    during installation/removal (bnc#623246)
* Tue Oct 05 2010
  - Converted archive to tar.bz2.
* Tue Oct 05 2010
  - Updated to 2.5.1-final.
    - Lots of testcase updates.
* Fri Aug 27 2010
  - Initial packaging of AppArmor 2.5
    - Now contained in a single archive so built from a single spec file



Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Nov 10 04:42:28 2015