Changelog for
apparmor-docs-2.8.1-7.2.noarch.rpm :
* Mon May 13 2013 cooloAATTsuse.com- do not package directories as %config - especially not as noreplace
* Tue Apr 02 2013 opensuseAATTcboltz.de- add Requires: insserv to parser package (needed by initscript)
* Tue Mar 05 2013 opensuseAATTcboltz.de- nscd profile: add missing permissions and deny capability block_suspend (bnc#807104, apparmor-profiles-nscd.diff)
* Sun Feb 17 2013 jengelhAATTinai.de- Add missing files to SRPM (bnc#777471)
* Sun Jan 13 2013 opensuseAATTcboltz.de- update abstractions/mysql with correct paths and add MariaDB paths (bnc#798183)
* Thu Jan 10 2013 opensuseAATTcboltz.de- update to AppArmor 2.8.1 (=2.8 branch r2069) Bugfix release, http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_1 Most important changes are: - add various missing parts to profiles and abstractions - fix a possible x conflict with hats or child profiles in apparmor_parser - fix and speedup stdin handling in aa-decode - various other bugfixes - add pkgconfig support to libapparmor- remove upstream(ed) patches
* Mon Dec 03 2012 opensuseAATTcboltz.de- verify tarball with gpg-offline
* Tue Sep 25 2012 cooloAATTsuse.com- fix directory flags for /etc/apparmor.d to be in sync between - parser and -profiles subpackage
* Fri Sep 21 2012 opensuseAATTcboltz.de- remove %stop_on_removal for no longer existing aaeventd (bnc#781564)- don\'t hide TeX output when building the parser and techdoc
* Thu Aug 09 2012 opensuseAATTcboltz.de- clear and update inconsistent profile cache (bnc#774529)
* Sun Aug 05 2012 opensuseAATTcboltz.de- abstractions/bash: update /bin/ls to also match /usr/bin/ls (usrMerge)
* Mon Jul 30 2012 wernerAATTsuse.de- Add required fonts for new TeXLive 2012
* Fri Jul 06 2012 opensuseAATTcboltz.de- update /bin/ping profile to also match /usr/bin/ping (usrMerge)
* Sat Jun 02 2012 opensuseAATTcboltz.de- update to AppArmor 2.8.0 (= r2047) - new utility aa-easyprof - templated profile generation tool (the resulting profile may be less strict than profiles generated with genprof/logprof) - various small bugfixes- removed upstreamed patches
* Tue May 08 2012 opensuseAATTcboltz.de- add apparmor-techdoc.patch to remove traces of the build time in PDF files
* Sat May 05 2012 opensuseAATTcboltz.de- update to AppArmor 2.8 beta5 (= 2.7.103 / r2031) - new utility aa-exec to confine a program with the specified AppArmor profile - add support for mount rules - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8 for full upstream changelog- removed upstreamed and backported patches- remove outdated autobuild and \"disable repo\" patches that were disabled since the AppArmor 2.7 package- create the Immunix::SubDomain compat perl module only for openSUSE <= 12.1 (bnc#720617 #c7)
* Mon Apr 16 2012 opensuseAATTcboltz.de- replace patch for dnsmasq profile with upstream patch (bnc#738905)
* Fri Apr 13 2012 opensuseAATTcboltz.de- add apparmor-r2022-log-parser-network-bnc755923.patch - logprof didn\'t create network rules because of changed log format (bnc#755923, lp#800826)- add profile for samba winbindd (bnc#748499)
* Fri Apr 06 2012 mszerediAATTsuse.cz- fix dnsmasq profile (bnc#738905)
* Thu Feb 09 2012 opensuseAATTcboltz.de- add 0001-fix-for-lp929531.patch to allow reading /sys/devices/system/cpu/online in abstractions/base (lp#929531)
* Tue Jan 31 2012 opensuseAATTcboltz.de- Update to AppArmor 2.7.2 (= 2.7 branch / r1894) - move various permissions from httpd2-prefork profile to abstractions/apache2-common. Backward-incompatible change:
*.htaccess files are no longer allowed for ^HANDLING_UNTRUSTED_INPUT - allow access for more /usr/lib
*/samba/ files for smbd (bnc#725967#c5) - allow various .conf files for dovecot (lp#458922) - disallow wl for
*.so in AATT{HOME}/.pki/nssdb/ in abstractions/private-files and abstractions/private-files-strict (lp#911847) - update abstractions/kde, private-files
* and ubuntu-browsers.d/user-files to use ~/.kde4, not only ~/.kde (bnc#741592) - block write access to ~/.kde{,4}/env in abstractions/private-files (lp#914190) - allow write access for personal dictionary etc. in abstractions/aspell (lp#917859) - when using genprof for a script, include read access to the script itsself - automatically include abstractions/python or abstractions/ruby for python/ruby scripts - add profile for smbldap-useradd and allow smbd to call it (bnc#738041) - allow creation of the .config directory in abstractions/enchant (lp#914184) - allow TFTP read-only access in dnsmasq profile (lp#905412) - allow capability dac_read_search for syslog-ng (bnc#731876) - add p11-kit abstraction and include it in abstractions/authentification (lp#912754, lp#912752) - add audacity to abstractions/ubuntu-media-players (lp#899963) - allow software-center, fireclam plugin, [tT]unar, exo-open, kate and /dev/nvidia
* in abstractons/ubuntu-browsers.d/
* (lp#662906, lp#562831, lp#890894, lp#890894, lp#884748) - fix typo for multiarch gconf-modules in abstractions/base (lp#904548) - allow avahi to do dbus introspection (lp#769148) - allow access to ~/.fonts.conf.d in abstractions/fonts (lp#870992) - allow transmission in abstractions/ubuntu-bittorrent-clients (lp#852062) - allow reading ~/.cups/client.conf and ~/.cups/lpoptions in abstractions/cups-client (lp#887992) - allow read access of /etc/python{2,3}.[0-7]
*/sitecustomize.py in abstractions/python (lp#860856) - various updates to the sshd profile (lp#817956) - (and some more changes I already included in the apparmor-2.7-branch.diff)
* Tue Jan 03 2012 opensuseAATTcboltz.de- Update to AppArmor 2.7.0 (= r1858) - make traceroute6 work (bnc#733312) - allow access to pyconfig.h in abstractions/python (lp#840734) - fix logprof/genprof for hex-encoded program filenames (= filenames containing space etc.)- add apparmor-2.7-branch.diff with some upstreamed fixes: - usr.sbin.smbd needs read access for /etc/netgroup (bnc#738041) - create /etc/apparmor.d/tunables/multiarch.d as directory, not as file - fix syntax error in abstractons/python
* Tue Nov 29 2011 meissnerAATTsuse.de- changed a $ -> % (typo)
* Sat Nov 26 2011 opensuseAATTcboltz.de- package subdomain.conf only in -parser, not in -utils package- package libapparmor.so and libimmunix.so only in libapparmor-devel, not in libapparmor1- make Provides for perl-libapparmor versioned to avoid self-Obsoletes- move libapparmor.a and libimmunix.a from libapparmor1 to libapparmor-devel package
* Thu Nov 10 2011 opensuseAATTcboltz.de- update to AppArmor 2.7.0 rc2 Most of the changes since rc1 were already included as patches. Additional changes: - fix logprof/genprof to recognize \"mknod\" in audit.log - fix libapparmor python bindings to compile with python 3 - fix wrong status message in initscript if apparmor-utils are not installed - parser/Makefile: fix some warnings, always respect CXX and LDFLAGS - fix some warnings in utils/Makefile- remove 4 upstreamed patches- remove mkdir /etc/apparmor.d/disable - that\'s done by upstream Makefile now- update line numbers in 2 patches
* Tue Nov 01 2011 opensuseAATTcboltz.de- make abstractions/winbind working on 64bit systems- allow loading the libraries for samba \"vfs objects\" also on 32bit systems (bnc#725967)
* Wed Oct 26 2011 opensuseAATTcboltz.de- allow loading the libraries for samba \"vfs objects\" (bnc#725967)
* Wed Oct 19 2011 opensuseAATTcboltz.de- include autogenerated profile sniplet for samba shares (bnc#688040)- more helpful error message for \"aa-notify -p\" if the user is not in the configured group
* Thu Oct 13 2011 opensuseAATTcboltz.de- update to AppArmor 2.7.0 rc1 - aa-notify: add --display option and warn if $DISPLAY is not set (important for usage with sudo on openSUSE) - fix syntax error on \"rcapparmor stop\" - allow read access to /proc/
*/mounts in the dovecot profile
* Sun Oct 09 2011 opensuseAATTcboltz.de- add patch with upstream changes since 2.7.0 beta2 release - add example parser.conf - print warning if profile cache directory doesn\'t exist - remove initscript for no longer existing aa-eventd (bnc#720617) - set correct $HOME in aa-notify- enable caching of profiles (= massive speedup) (bnc#689458)- add comments for patches in .spec and comments in some patches- run spec-cleaner
* Fri Sep 30 2011 cooloAATTsuse.com- add libtool as buildrequire to make the spec file more reliable
* Fri Sep 16 2011 opensuseAATTcboltz.de- update to AppArmor 2.7.0 beta2 - includes fixes for bnc#717707, bnc#678749, bnc#685674, bnc#679182, bnc#691072, bnc#705319, bnc#713728- add some missing perl module Requires to perl-apparmor
* Tue Sep 13 2011 opensuseAATTcboltz.de- update to AppArmor 2.7.0 beta1, for details see http://wiki.apparmor.net/index.php/ReleaseNotes_2_7- removed lots of patches I pushed upstream- disabled apparmor-2.5.1-unified-build (patch to use automake, does not apply to 2.7 and probably won\'t be accepted upstream)- disabled build of tomcat_apparmor (doesn\'t build, deprecated upstream)- run spec-cleaner- remove
*.la files- move usr.sbin.nscd profile back to apparmor-profiles package
* Wed Sep 07 2011 jfehligAATTsuse.com- Update patch apparmor-profiles-usr.sbin.dnsmasq to include /var/lib/libvirt/dnsmasq/
*.leases (bnc#694197).
* Mon Aug 22 2011 opensuseAATTcboltz.de- install SubDomain.pm compat module (bnc#713408)
* Wed Aug 03 2011 jeffmAATTsuse.de- Update to 2.6.1. - One patch eliminated - Lots of minor fixes - Split out more common abstractions- Add check_for_apparmor() helper.
* Tue Aug 02 2011 jeffmAATTsuse.de- dhcpd: Fix apparmor profile (bnc#692428)
* Tue Aug 02 2011 fcrozatAATTsuse.com- Add apparmor-securityfs-systemd.patch: do not mount securityfs when running under systemd, just access the directory, systemd will automount it (bnc#704460).
* Sun Jul 17 2011 andrea.turriniAATTgmail.com- Fixed typos in descriptions and summaries of apparmor.spec
* Fri Jun 24 2011 jeffmAATTsuse.de- Fixed building of pam_apparmor to properly link libpam (bnc#696553).- Fixed building of apache2-mod_apparmor to properly link (bnc#701821).
* Tue Jun 21 2011 cooloAATTnovell.com- move the requires and prerequires to the right package
* Wed Apr 27 2011 opensuseAATTcboltz.de- make the -doc and -profiles subpackages noarch (again)
* Thu Mar 24 2011 jeffmAATTsuse.de- Added alias from Immunix::SubDomain to Immunix:AppArmor to allow older users of perl-apparmor to work properly.
* Tue Mar 22 2011 jeffmAATTsuse.de- Properly re-created links to old utility names.
* Mon Mar 14 2011 jeffmAATTsuse.de- Added /etc/ethers and /var/run/dnsmasq-forwarders to usr.sbin.dnsmasq (bnc#678749)
* Mon Mar 14 2011 jeffmAATTsuse.de- Update to 2.6.0 - 19 patches eliminated - Lots of minor fixes. - Split out more common abstractions - Added more local includes
* Tue Mar 01 2011 rhaferAATTsuse.de- Additional libvirt related fixes in usr.sbin.dnsmasq (bnc#675867)
* Thu Feb 24 2011 jeffmAATTsuse.de- Added \'network packet raw\' to dhclient profile.
* Tue Feb 22 2011 bwiedemannAATTnovell.com- Add Requires for used perl packages (bnc#670650).
* Tue Jan 25 2011 jeffmAATTsuse.de- Updated dhclient profile and added dhclient-script profile (bnc#561152).
* Tue Jan 25 2011 jeffmAATTsuse.de- Added ability to completely disable repositories.
* Mon Jan 24 2011 jeffmAATTsuse.de- Properly indent sub-profiles after genprof completion (bnc#480795).
* Mon Jan 24 2011 jeffmAATTsuse.de- Inherit flags in sub-profiles when generating profiles (bnc#496204).
* Mon Jan 24 2011 jeffmAATTsuse.de- Stop treating profiles shipped with the package as config files. - /etc/apparmor.d will still be treated specially.- Add support for parsing network operation events (bnc#665483)
* Sun Jan 23 2011 jeffmAATTsuse.de- Fix for sbin.klogd profile using kernel versions >= 2.6.38-rc1.
* Sun Jan 23 2011 jeffmAATTsuse.de- Update to apparmor-2.5 r1445. - Includes 3 of the fixes below. - Several testsuite fixes. - Update for Thunderbird profile.
* Fri Jan 21 2011 jeffmAATTsuse.de- Add support for libvirt in usr.sbin.dnsmasq (bnc#666090)
* Tue Jan 18 2011 cooloAATTnovell.com- fix rm call for nscd profile to avoid file conflict
* Tue Jan 11 2011 jeffmAATTsuse.de- profiles: Add openssl abstraction (bnc#623886).
* Tue Jan 11 2011 jeffmAATTsuse.de- Added support for sys_nice to ntpd profile (bnc#657054).
* Mon Jan 10 2011 jeffmAATTsuse.de- apparmor-utils: Support newer auditd formatted messages.- Fix two x transition conflict bugs. (bnc#662928)
* Thu Jan 06 2011 rhaferAATTsuse.de- Splitted ldap related things from nameservice into separate profile and added some missing paths (bnc#662761)
* Wed Dec 22 2010 jeffmAATTsuse.de- Fixed pod2man macros with older versions of GNU make
* Mon Dec 20 2010 jeffmAATTsuse.de- Fixed building of perl and ruby SWIG modules. The former is required for apparmor-utils to work properly.
* Tue Dec 07 2010 jeffmAATTsuse.de- Fixed use-after-free issue in apparmor_parser.
* Tue Dec 07 2010 jeffmAATTsuse.de- Added fixes for logprof issuing uninitialized variable errors while encountering audit messages for unconfined processes.
* Wed Dec 01 2010 jeffmAATTsuse.de- Updated cupsd profile (bnc#539401)
* Wed Dec 01 2010 jeffmAATTsuse.de- Fix {proc} vs {PROC} macro usage in firefox profile (bnc#436262)
* Wed Dec 01 2010 jeffmAATTsuse.de- Added support for eDirectory nameservice (bnc#621394)
* Wed Dec 01 2010 jeffmAATTsuse.de- Fixed incorrect /proc/
*/sys usage in usr.sbin.ntpd profile (bnc#634801)
* Wed Dec 01 2010 jeffmAATTsuse.de- Added fix for another case of whitespace affecting profile removal (bnc#510740)
* Tue Nov 30 2010 jeffmAATTsuse.de- Added support for unified build, which massively simplified the packaging.
* Mon Nov 15 2010 czanikAATTbalabit.hu- Fix for syslog-ng profile to allow upgrade to v3.2- add mysql support to syslog-ng profile
* Thu Oct 21 2010 jeffmAATTsuse.de- Added support for enabling/disabling the module automatically during installation/removal (bnc#623246)
* Tue Oct 05 2010 jeffmAATTsuse.de- Converted archive to tar.bz2.
* Tue Oct 05 2010 jeffmAATTsuse.de- Updated to 2.5.1-final. - Lots of testcase updates.
* Fri Aug 27 2010 jeffmAATTsuse.de- Initial packaging of AppArmor 2.5 - Now contained in a single archive so built from a single spec file