apparmor (3.0.8-3) unstable; urgency=medium * Cherry-pick a few small, targeted fixes from upstream 3.0 branch -- intrigeri <intrigeri@debian.org> Tue, 14 Feb 2023 11:49:15 +0000 apparmor (3.0.8-2) unstable; urgency=medium * Only pin the policy ABI, not the kernel ABI. This brings back the desired behavior that we had on Bullseye. Fixes regression introduced in 3.0.3-1. * Drop obsolete dependency on lsb-base: it's transitional and provided by sysvinit-utils, which is essential -- intrigeri <intrigeri@debian.org> Wed, 18 Jan 2023 11:10:22 +0000 apparmor (3.0.8-1) unstable; urgency=medium * New upstream release * debian/watch: only track the 3.0 series for now * Add upstream patch to fix test suite -- intrigeri <intrigeri@debian.org> Sat, 10 Dec 2022 17:54:51 +0000 apparmor (3.0.7-1) unstable; urgency=medium * New upstream release -- intrigeri <intrigeri@debian.org> Tue, 16 Aug 2022 14:09:22 +0000 apparmor (3.0.6-1) unstable; urgency=medium * New upstream release (Closes: #1015354) * Drop patch that was applied upstream * Enable LTO * Declare compliance with Policy 4.6.1 -- intrigeri <intrigeri@debian.org> Tue, 02 Aug 2022 09:15:54 +0000 apparmor (3.0.5-1) unstable; urgency=medium * New upstream release * Drop patches that were applied upstream * Drop profile-load script: part of upstream 3.0.5 * Install newly upstreamed aa-notify.desktop instead of the custom Debian one * Rename debian/master branch to debian/unstable * New patch, to fix new upstream "dirtest" test * Install new samba-* profiles -- intrigeri <intrigeri@debian.org> Mon, 25 Jul 2022 13:46:44 +0000 apparmor (3.0.4-3) unstable; urgency=medium * Cherry-pick 7 patches from upstream apparmor-3.0 branch (Closes: #1003153) * Adjust overrides for recent Lintian * Override Lintian false positives -- intrigeri <intrigeri@debian.org> Wed, 06 Jul 2022 07:48:25 +0000 apparmor (3.0.4-2) unstable; urgency=medium * Add upstream commit that makes the test suite compatible with Python 3.10 -- intrigeri <intrigeri@debian.org> Wed, 23 Feb 2022 09:48:59 +0000 apparmor (3.0.4-1) unstable; urgency=medium * New upstream release * apparmor-profiles: install new samba-bgqd profile * Drop backported patches that are now obsolete * debian/allow-access-to-ibus-socket.patch: drop support for pre-Bullseye ibus path * Declare compliance with Policy 4.6.0.1 * Drop XS- prefix for adopted Python-Version control field * Add new symbols -- intrigeri <intrigeri@debian.org> Sat, 12 Feb 2022 12:34:23 +0000 apparmor (3.0.3-6) unstable; urgency=medium * debian/rules: let "set -e" take effect (Closes: #998843) * Add support for Python 3.10 (Closes: #998686): - upstream-ab4cfb5e-replace-distutils-with-setuptools.patch: new patch, edited to drop changes to upstream .gitignore. - Add build-dependency on python3-setuptools -- intrigeri <intrigeri@debian.org> Thu, 18 Nov 2021 09:15:55 +0000 apparmor (3.0.3-5) unstable; urgency=medium [ Debian Janitor ] * Remove constraints unnecessary since stretch. [ Helmut Grohne ] * Make the package cross-buildable (Closes: #984582): - Multiarchify python Build-Depends - Let dh_auto_build pass cross tools to make - Annotate perl build-dependency with !nocheck [ intrigeri ] * Remove obsolete libapparmor-perl on upgrade -- intrigeri <intrigeri@debian.org> Sat, 23 Oct 2021 10:22:04 +0000 apparmor (3.0.3-4) unstable; urgency=medium * Merge apparmor-easyprof into apparmor-utils (Closes: #972880) * Make apparmor-utils and python3-apparmor arch:all (Closes: #972881) -- intrigeri <intrigeri@debian.org> Sun, 17 Oct 2021 17:23:17 +0000 apparmor (3.0.3-3) unstable; urgency=medium * Adjust gbp.conf and Vcs-* control fields for 3.0.x now being in sid. * Stop building the libapparmor-perl binary package (Closes: #993565) * Update Lintian overrides * Add B-D on dh-sequence-python3, to workaround #996089 in Lintian * B-D: python3-all → python3-all:any, to appease Lintian -- intrigeri <intrigeri@debian.org> Wed, 13 Oct 2021 05:56:16 +0000 apparmor (3.0.3-2) unstable; urgency=medium * Upload to unstable -- intrigeri <intrigeri@debian.org> Fri, 03 Sep 2021 08:23:30 +0000 apparmor (3.0.3-1) experimental; urgency=medium * New upstream release * Drop debian/Revert-libapparmor-fixing-setup.py-call-when-crosscompili.patch: obsolete * Refresh patches * Merge changes from sid, up to 2.13.6-10 * upstream-6cfc6eee-python-3.10.patch: new patch, for compatibility with Python 3.10 -- intrigeri <intrigeri@debian.org> Mon, 23 Aug 2021 18:25:14 +0000 apparmor (3.0.1-6) experimental; urgency=medium * autopkgtest: use hint-testsuite-triggers to ensure dummy test is not run -- intrigeri <intrigeri@debian.org> Fri, 02 Apr 2021 11:38:16 +0000 apparmor (3.0.1-5) experimental; urgency=medium * Merge changes from sid, up to 2.13.6-9 -- intrigeri <intrigeri@debian.org> Fri, 12 Feb 2021 14:37:24 +0000 apparmor (3.0.1-4) experimental; urgency=medium * apparmor: drop obsolete dependency on python3 (#981442) * Merge changes from sid, up to 2.13.6-7 -- intrigeri <intrigeri@debian.org> Fri, 05 Feb 2021 06:48:41 +0000 apparmor (3.0.1-3) experimental; urgency=medium * Supersede failed, incomplete dgit upload -- intrigeri <intrigeri@debian.org> Sun, 27 Dec 2020 10:44:24 +0000 apparmor (3.0.1-2) experimental; urgency=medium * Supersede failed, incomplete dgit upload -- intrigeri <intrigeri@debian.org> Sun, 27 Dec 2020 10:16:16 +0000 apparmor (3.0.1-1) experimental; urgency=medium * New upstream release * Vcs-* control fields: track the debian/experimental branch * Drop upstream-commit-*.patch: included in 3.0.1 * Refresh patches * Add aa_features_new_from_file to symbols file * Pin the Linux 5.9 feature set * Only pin the policy ABI, not the kernel ABI -- intrigeri <intrigeri@debian.org> Sun, 27 Dec 2020 09:23:01 +0000 apparmor (3.0.0-1) experimental; urgency=medium * New upstream release (Closes: #930031) * Merge ubuntu/3.0.0-0ubuntu1: - Drop upstreamed patches - d/apparmor.install: + install new aa-features-abi binary to /usr/bin + include abi/ directory and tunables/etc. - d/apparmor.manpages: + install new aa-features-abi.1 manpage + install apparmor_xattrs.7 manpage - d/apparmor-profiles.install: + install new usr.lib.dovecot.script-login + adjust for renamed postfix profiles + add usr.bin.dumpcap to extra-profiles + remove usr.sbin.nmbd and usr.sbin.smbd from extra-profiles (already in apparmor-profiles) - d/control: + apparmor-utils: drop perl dependency + Update apparmor-notify dependencies: it was ported to Python - d/tests/test-installed: + include libraries/ in workdir so tests have access to private headers - New patches: + d/p/u/parser-Fix-warning-message-when-complain-mode-is-for.patch: Provide better message about caching not happening due to a profile being in force-complain mode. (LP: #1899218) + d/p/ubuntu/lp1891338.patch: adjust ubuntu-integration to use abstractions/exo-open (LP: #1891338) + d/p/ubuntu/lp1889699.patch: adjust to support brave in ubuntu abstractions (LP: #1889699) + d/p/ubuntu/lp1881357.patch: adjust for new ICEauthority path in /run (LP: #1881357) * Drop another already upstreamed patch * Upstream the patches added by Ubuntu * New patches: - upstream-commit-9350038-add-CAP_CHECKPOINT_RESTORE.patch: fixes FTBFS on Linux 5.9 - upstream-commit-5958930-add-_aa_asprintf-to-private-symbols.patch: fixes symbols discrepancy - upstream-commit-51144b5-apparmor_xattrs.7-fix-whatis-entry.patch - upstream-commit-11d1f38-Fix-typos.patch - debian/Revert-libapparmor-fixing-setup.py-call-when-crosscompili.patch: fixes passing hardening LDFLAGS to Python build * apparmor-profiles: install new php-fpm profile * Tell dh_missing that we purposely don't ship the chromium-browser profile * Override a Lintian false positive -- intrigeri <intrigeri@debian.org> Sun, 25 Oct 2020 12:03:26 +0000 apparmor (3.0.0-0ubuntu1) groovy; urgency=medium [ Alex Murray ] * Update to the final AppArmor 3.0 upstream release - d/apparmor.install: + install new aa-features-abi binary to /usr/bin - d/apparmor.manpages: + install new aa-features-abi.1 man page - d/apparmor-profiles.install: + install new usr.lib.dovecot.script-login + adjust for renamed postfix profiles - d/tests/test-installed: + include libraries/ in workdir so tests have access to private headers - Drop the following patches that were originally backported from upstream but are now incorporated in the final release: + d/p/parser-fix_cap_match.patch + d/p/policy-provide-example-and-base-abi-to-pin-pre-3.0-p.patch + d/p/parser-add-abi-warning-flags.patch + d/p/fix-tests-regression-apparmor-prologue-inc-settest.patch + d/p/fix-automatic-adding-of-rule-for-change-hat-iface.patch + d/p/fix-parser-to-emit-proc-attr-access-for-all-situations.patch + d/p/fix-change-profile-stack-abstraction.patch + d/p/ubuntu/stop-loading-snapd-profiles.patch [ Emilia Torino ] * d/control: adjust apparmor-notify to depends on python3-psutil and python3-apparmor (LP: #1899046) [ Steve Beattie ] * d/p/u/parser-Fix-warning-message-when-complain-mode-is-for.patch: Provide better message about caching not happening due to a profile being in force-complain mode. (LP: #1899218) -- Alex Murray <alex.murray@canonical.com> Sun, 11 Oct 2020 16:26:32 -0700 apparmor (3.0.0~beta1-0ubuntu6) groovy; urgency=medium * Drop d/p/lp1824812.patch: this patch was only needed with 2.13 and not 3.0. With AppArmor 3, the patch ends up setting SFS_MOUNTPOINT to the wrong directory in is_container_with_internal_policy(), which causes policy to always fail to load in containers. Thanks to Christian Ehrhardt for the analysis. (LP: #1895967) -- Jamie Strandboge <jamie@ubuntu.com> Tue, 22 Sep 2020 15:10:33 +0000 apparmor (3.0.0~beta1-0ubuntu5) groovy; urgency=medium [ John Johansen ] * d/p/fix-parser-to-emit-proc-attr-access-for-all-situations.patch: fix-automatic-adding-of-rule-for-change-hat-iface.patch fixed the parser to emit rules needed for change_hat in the hat profiles but broke the rule being emitted for the parent profile, this fixes it for both so that it is emitted for any profile that is a hat or that contains a hat. * d/p/fix-change-profile-stack-abstraction.patch: fix the change_profile abstraction so that it allows access to the apparmor attribute paths under LSM stacking. -- Alex Murray <alex.murray@canonical.com> Fri, 18 Sep 2020 11:58:59 +0930 apparmor (3.0.0~beta1-0ubuntu2) groovy; urgency=medium [ John Johansen ] * d/p/fix-automatic-adding-of-rule-for-change-hat-iface.patch: fix parser not adding a rule to profiles if they are a hat or contain hats granting write access to the kernel interfaces. -- Emilia Torino <emilia.torino@canonical.com> Thu, 17 Sep 2020 12:40:09 -0300 apparmor (3.0.0~beta1-0ubuntu1) groovy; urgency=medium [ John Johansen ] * New upstream release (LP: #1895060, LP: #1887577, LP: #1880841) * Drop all patches backported from upstream: applied in 3.0 * d/p/policy-provide-example-and-base-abi-to-pin-pre-3.0-p.patch: provide example and base abi to pin pre 3.0 policy * d/p/ubuntu/enable-pinning-of-pre-AppArmor-3.x-poli.patch: enable pinning of pre AppArmor 3.x policy * drop d/p/debian/dont-include-site-local-with-dovecot.patch: no longer needed with upstream 'include if exists' [ Steve Beattie ] * d/p/parser-fix_cap_match.patch: fix cap match to work correctly, important now that groovy has a 5.8 kernel. * d/apparmor-profiles.install: + adjust for renamed postfix profiles + add usr.bin.dumpcap and usr.bin.mlmmj-receive to extra-profiles + remove usr.sbin.nmbd and usr.sbin.smbd from extra-profiles (already in apparmor-profiles) * d/apparmor.install: include abi/ directory and tunables/etc. * d/apparmor.manpages: add apparmor_xattrs.7 manpage * d/control: + apparmor-utils: no more shipped perl tools, drop perl dependency + apparmor-notify: aa-notify was converted to python3 from perl; adjust -notify dependencies to compensate * d/p/fix-tests-regression-apparmor-prologue-inc-settest.patch: fix sed expression in settest() [ Emilia Torino ] * Removing Ubuntu specific chromium-browser profile. This is safe to do since groovy's chromium-browser deb installs the snap. If apparmor3 is backported to 18.04 or earlier, the profile will need to be taken into consideration - d/profiles/chromium-browser: remove chromium-browser profile - d/apparmor-profiles.postinst: remove postinst script as it only contains chromium-browser related functionallity. - d/apparmor-profiles.postrm: remove postrm script as it only contains chromium-browser related functionallity. - d/apparmor-profiles.install: remove ubuntu-specific chromium-browser abstraction and profile - d/apparmor-profiles.lintian-overrides: remove chromium-browser profile lintian overrides - d/p/ubuntu/add-chromium-browser.patch: remove patch which added chrome-browser [ Alex Murray ] * d/p/policy-provide-example-and-base-abi-to-pin-pre-3.0-p.patch: refresh this patch with the official upstream version * d/p/ubuntu/enable-pinning-of-pre-AppArmor-3.x-poli.patch: refresh this patch to match the above * d/p/parser-add-abi-warning-flags.patch: enable parser warnings to be silenced or to be treated as errors [ Jamie Strandboge ] * d/p/adjust-for-ibus-1.5.22.patch: update ibus abstract path for ibus 1.5.22. This can be dropped with AppArmor 3.0 final. * d/p/parser-add-abi-warning-flags.patch: refresh to avoid lintian warnings * d/p/ubuntu/lp1891338.patch: adjust ubuntu-integration to use abstractions/exo-open (LP: #1891338) * d/p/ubuntu/lp1889699.patch: adjust to support brave in ubuntu abstractions. Patch thanks to François Marier (LP: #1889699) * d/p/ubuntu/lp1881357.patch: adjust for new ICEauthority path in /run (LP: #1881357) -- Jamie Strandboge <jamie@ubuntu.com> Wed, 09 Sep 2020 21:48:17 +0000 apparmor (2.13.6-10) unstable; urgency=medium * autopkgtest: use hint-testsuite-triggers to ensure dummy test is not run (Closes: #954655) -- intrigeri <intrigeri@debian.org> Sat, 03 Apr 2021 06:09:19 +0000 apparmor (2.13.6-9) unstable; urgency=medium * usr.lib.dovecot.script-login: don't include non-existent local override file (Closes: #982112) * Declare compliance with Policy 4.5.1 -- intrigeri <intrigeri@debian.org> Sat, 06 Feb 2021 17:07:35 +0000 apparmor (2.13.6-8) unstable; urgency=medium * Backport patch from upstream 3.0 series, which ports aa-status to C (upstream-commit-8f9046b-port-aa-status-to-c.patch), then drop obsolete dependency from the apparmor binary package on python3 (Closes: #981442) * Annotate test dependencies <!nocheck> (Closes: #981205). Thanks to Helmut Grohne <helmut@subdivi.de> for the patch! -- intrigeri <intrigeri@debian.org> Fri, 05 Feb 2021 11:24:57 +0000 apparmor (2.13.6-7) unstable; urgency=medium * Supersede failed dgit upload. -- intrigeri <intrigeri@debian.org> Fri, 15 Jan 2021 13:16:37 +0000 apparmor (2.13.6-6) unstable; urgency=medium * New patch: upstream-commit-1ba978b6-adjust-for-new-ICEauthority-path-in-run.patch (Closes: #980154) -- intrigeri <intrigeri@debian.org> Fri, 15 Jan 2021 12:30:06 +0000 apparmor (2.13.6-5) unstable; urgency=medium * Supersede failed dgit upload. -- intrigeri <intrigeri@debian.org> Mon, 11 Jan 2021 08:33:53 +0000 apparmor (2.13.6-4) unstable; urgency=medium * autopkgtest: update tcpdump profile name -- intrigeri <intrigeri@debian.org> Mon, 11 Jan 2021 08:15:55 +0000 apparmor (2.13.6-3) unstable; urgency=medium * Only pin the policy ABI, not the kernel ABI. I hope this fixes the regressions, on older kernels, caused by pinning the Linux 5.9 feature set, that I guess is the reason behind the several autokpgtest regressions caused by 2.13.6-2 (debci runs on Linux 4.19.x). -- intrigeri <intrigeri@debian.org> Mon, 28 Dec 2020 11:41:02 +0000 apparmor (2.13.6-2) unstable; urgency=medium * Pin the Linux 5.9 feature set -- intrigeri <intrigeri@debian.org> Sun, 27 Dec 2020 10:24:57 +0000 apparmor (2.13.6-1) unstable; urgency=medium * New upstream release (Closes: #969114, #930031) * Improve long descriptions: - apparmor-utils: fix typos - libapparmor1, libapparmor-dev: don't try to list all functionality * autopkgtest: don't try to compile kopano policies (kopanocore is not in testing and was orphaned) * Adjust to the fact 3.0.x was released upstream and packaged in experimental: - debian/watch: use the Launchpad page with all downloads - gbp: use upstream/2.13.x as the upstream branch * Drop obsolete patches * apparmor-profiles: install usr.lib.dovecot.script-login (Closes: #972883) * Drop dh_perl custom invocation -- intrigeri <intrigeri@debian.org> Sun, 27 Dec 2020 08:00:50 +0000 apparmor (2.13.5-1) unstable; urgency=medium * New upstream release (Closes: #868563, #934869, #969267) * Drop patches now included upstream * Refresh patches * d/apparmor.install: Install new file 'tunables/run' under '/etc/apparmor.d' * upstream-commit-145136f-fix-2.13-libapparmor-so-version.patch: new patch * Stop building on non-Linux architectures (Closes: #972049). Thanks to Laurent Bigonville <bigon@debian.org> for the suggestion. * Drop obsolete Lintian overrides * Update Lintian override name * Bump debhelper compat level to 13 * Update symbols list * Install gettext translations * apparmor-profiles: install a few more profiles (usr.bin.mlmmj-receive, usr.lib.postfix.dnsblog, usr.lib.postfix.postscreen) * debian/not-installed: list files not installed on purpose * Adjust *.install source files to appease dh_missing * autopkgtests: don't try to test disabled Thunderbird profile * Merge ubuntu/2.13.3-7ubuntu6. Remaining included changes after resolving conflicts and dropping patches included in 2.13.{4,5}: - debian/control: add Breaks on snapd < 2.44.3+20.04~ since prior snapd versions assume that apparmor will load the snapd policy on boot -- intrigeri <intrigeri@debian.org> Sat, 24 Oct 2020 17:15:28 +0000 apparmor (2.13.4-3) unstable; urgency=medium * apparmor-profiles: provide (upstream) bug reporting instructions * upstream-commit-1f319c3-systemd-userdbd-compat.patch: new patch (Closes: #962405) -- intrigeri <intrigeri@debian.org> Tue, 16 Jun 2020 13:09:13 +0000 apparmor (2.13.4-2) unstable; urgency=medium * apparmor-profiles: don't ship redundant freshclam profile (Closes: #959915) * Apply upstream !465: fix the build with make 4.3 * Drop unused Lintian override * GitLab CI: - allow reprotest to fail without failing the whole pipeline - enable diffoscope for reprotest -- intrigeri <intrigeri@debian.org> Mon, 25 May 2020 09:23:21 +0000 apparmor (2.13.4-1) unstable; urgency=medium * New upstream release * Switch to HTTPS for upstream homepage URL * apparmor-profiles: install missing usr.lib.dovecot.stats profile (Closes: #953268) * Drop backported patches that are now obsolete. * Cherry-picked from Ubuntu: - Update ibus abstract path for ibus 1.5.22 - debian/control: drop Breaks that were only needed for upgrades to bionic * Drop obsolete Lintian overrides * Add python3-all to Build-Depends * Override Lintian false positive * Declare compliance with Policy 4.5.0 * Apply upstream !464: let Mesa check if the kernel supports the i915 perf interface -- intrigeri <intrigeri@debian.org> Tue, 31 Mar 2020 08:45:58 +0000 apparmor (2.13.3-7ubuntu6) groovy; urgency=medium * Add missing "boot_id" rule to abstractions/nameservice. (LP: #1872564) - d/p/upstream-commit-454fca7-Add-run-variable.patch: Add the definition for the "@{run}" variable. - d/p/upstream-commit-ef591a67-Add-trailing-slash-to-the-run-variable-definition.patch: Add trailing slash to the "@{run}" variable. - d/p/upstream-commit-1f319c3870-abstractions-nameservice-allow-accessing-run-systemd-user.patch: Add a missing rule to allow systemd to access @{PROC}/sys/kernel/random/boot_id and @{run}/systemd/userdb. - d/apparmor.install: Install new file 'tunables/run' under '/etc/apparmor.d'. -- Sergio Durigan Junior <sergio.durigan@canonical.com> Mon, 11 May 2020 09:55:16 -0400 apparmor (2.13.3-7ubuntu5) focal; urgency=medium * snapd 2.44.3+20.04 introduced an apparmor unit of its own to load snap policy in /var/lib/snapd/apparmor/profiles. As such, don't load snapd policy twice by not loading it in the apparmor unit (LP: 1871148) - ubuntu/stop-loading-snapd-profiles.patch: stop loading snapd profiles - debian/control: add Breaks on snapd < 2.44.3+20.04~ since prior snapd versions assume that apparmor will load the snapd policy on boot - debian/apparmor.service: remove the now unneeded RequiresMountsFor on /var/lib/snapd/apparmor/profiles * drop ubuntu/parser-conf-no-expr-simplify.patch: Optimize=no-expr-simplify was added to parser.conf to mitigate slow snap policy compiles on 32bit ARM. These days, snapd calls apparmor_parser with "-O no-expr-simplify" and loads its snap policy, so drop this delta with upstream and Debian. -- Jamie Strandboge <jamie@ubuntu.com> Sun, 12 Apr 2020 16:11:31 +0000 apparmor (2.13.3-7ubuntu4) focal; urgency=medium * debian/apparmor.service: add /var/lib/snapd/apparmor/profiles to RequiresMountsFor since Ubuntu's rc.apparmor.functions looks for it (LP: #1871148) * libnss-systemd.patch: allow accessing the libnss-systemd VarLink sockets and DBus APIs. Patch partially based on work by Simon Deziel. (LP: #1796911, LP: #1869024) * upstream-mr-424-kerberos-dot-dirs.patch: abstractions/kerberosclient: allow reading /etc/krb5.conf.d/ * upstream-mr-442-gnome-user-themes.patch: gnome abstraction: allow reading per-user themes from $XDG_DATA_HOME (Closes: #930031) * upstream-mr-443-ecryptfs-dirs.patch: abstractions/base: allow read access to top-level ecryptfs directories (LP: #1848919) * upstream-mr-445-uuidd-request.patch: abstractions/base: allow read access to /run/uuidd/request * upstream-mr-464-Mesa_i915_perf_interface.patch: let Mesa check if the kernel supports the i915 perf interface. Patch from Debian -- Jamie Strandboge <jamie@ubuntu.com> Mon, 06 Apr 2020 17:47:20 +0000 apparmor (2.13.3-7ubuntu3) focal; urgency=medium * Add upstream-abstractions-add-etc-mdns.allow-to-etc-apparmor.d-ab.patch (LP: #1869629) -- John Johansen <john.johansen@canonical.com> Wed, 01 Apr 2020 01:05:30 -0700 apparmor (2.13.3-7ubuntu2) focal; urgency=medium * No-change rebuild to drop python3.7. -- Matthias Klose <doko@ubuntu.com> Tue, 18 Feb 2020 10:42:36 +0100 apparmor (2.13.3-7ubuntu1) focal; urgency=medium * Merge from Debian. Remaining changes: - Ubuntu-specific patches: + ubuntu/add-chromium-browser.patch + ubuntu/communitheme-snap-support.patch + ubuntu/mimeinfo-snap-support.patch + ubuntu/parser-conf-no-expr-simplify.patch + ubuntu/profiles-grant-access-to-systemd-resolved.patch + upstream-dont-allow-fontconfig-cache-write.patch + upstream-tests-mult-mount-bump-size-of-created-disk.patch - debian/apparmor.{install,maintscript}: feature pinning is not used in Ubuntu - debian/apparmor.preinst: remove cache files on upgrade to 2.13 - debian/apparmor-profiles.install: install Ubuntu chromium-browser profile and abstraction - debian/apparmor-profiles.lintian-overrides: update for chromium-browser profile having read access to dpkg database for lsb-release - debian/apparmor-profiles.postinst: ubuntu-browsers.d/chromium-browser abstraction if it doesn't exist - debian/control: adjust the Vcs-{Browser,Git} control fields to reflect the branch where the Ubuntu packaging is maintained. - debian/gbp.conf: use ubuntu/master as the debian-branch - debian/patches/series: comment out debian-only patches - debian/tests/control and debian/tests/compile-policy: don't test thunderbird since the Ubuntu packaging doesn't ship a profile * Drop the following patches, no longer needed: - python3.8-ac.diff * debian/control: drop Breaks on media-hub, mediascanner2.0, messaging-app, and webbrowser-app which was needed for upgrades to bionic (LP: #1797242) * upstream-adjust-for-ibus-1.5.22.patch: update ibus abstract path for ibus 1.5.22 * upstream-adjust-gnome-for-mimeapps.patch: abstractions/gnome: also allow /etc/xdg/mimeapps.list (LP: #1792027) -- Jamie Strandboge <jamie@ubuntu.com> Tue, 17 Dec 2019 15:50:00 +0000 apparmor (2.13.3-7) unstable; urgency=medium * Add explicit build dependency on dh-python, so that this package can built with python3-defaults 3.7.5-3. -- intrigeri <intrigeri@debian.org> Fri, 15 Nov 2019 10:37:05 +0000 apparmor (2.13.3-6) unstable; urgency=medium [ Matthias Klose ] * debian/rules: ensure "set -e" is honored (Closes: #943649). * Add upstream-mr-430-Fix-a-Python-3.8-autoconf-check.patch (Closes: #943657). -- intrigeri <intrigeri@debian.org> Tue, 29 Oct 2019 18:57:51 +0000 apparmor (2.13.3-5ubuntu5) focal; urgency=medium * Don't ignore exit status in debian/rules. * Fix a Python 3.8 autoconf check. -- Matthias Klose <doko@ubuntu.com> Sun, 27 Oct 2019 16:38:00 +0200 apparmor (2.13.3-5ubuntu2) focal; urgency=medium * No-change rebuild for the perl update. -- Matthias Klose <doko@ubuntu.com> Fri, 18 Oct 2019 19:26:58 +0000 apparmor (2.13.3-5ubuntu1) eoan; urgency=medium * Merge new upstream release from Debian. Remaining changes: - Ubuntu-specific patches: + ubuntu/add-chromium-browser.patch + ubuntu/communitheme-snap-support.patch + ubuntu/mimeinfo-snap-support.patch + ubuntu/parser-conf-no-expr-simplify.patch + ubuntu/profiles-grant-access-to-systemd-resolved.patch - debian/apparmor.{install,maintscript}: feature pinning is not used in Ubuntu - debian/apparmor.preinst: remove cache files on upgrade to 2.13 - debian/apparmor-profiles.install: install Ubuntu chromium-browser profile and abstraction - debian/apparmor-profiles.lintian-overrides: update for chromium-browser profile having read access to dpkg database for lsb-release - debian/apparmor-profiles.postinst: ubuntu-browsers.d/chromium-browser abstraction if it doesn't exist - debian/control: adjust the Vcs-{Browser,Git} control fields to reflect the branch where the Ubuntu packaging is maintained. - debian/gbp.conf: use ubuntu/master as the debian-branch - debian/patches/series: comment out debian-only patches - debian/tests/control and debian/tests/compile-policy: don't test thunderbird since the Ubuntu packaging doesn't ship a profile * Drop the following patches, no longer needed: - ubuntu/dont-include-site-local-with-dovecot.patch - lp1820068.patch - upstream-commit-fix-segfault-in-overlaydirat_for_each.patch - upstream-commit-add-option-to-dump-policy-cache-with-libapparmor.patch - upstream-commit-teach-aa_policy_cache_sh-about-the-new-cache.patch - upstream-commit-fix-segfault-when-loading-policy-cache-files.patch - upstream-commit-fix-variable-name-overlap-in-merge-macro.patch * upstream-dont-allow-fontconfig-cache-write.patch: don't allow write of fontconfig cache files * upstream-tests-mult-mount-bump-size-of-created-disk.patch: regression tests/mult_mount: bump size of created disk image -- Jamie Strandboge <jamie@ubuntu.com> Mon, 09 Sep 2019 19:13:22 +0000 apparmor (2.13.3-5) unstable; urgency=medium * upstream-mr-419-Xwayland-vs-recent-mutter.patch: new patch (Closes: #935058) -- intrigeri <intrigeri@debian.org> Sun, 08 Sep 2019 08:00:56 +0000 apparmor (2.13.3-4) unstable; urgency=medium * New patch, cherry-picked and adapted from Ubuntu: don't include local/ snippets in the Dovecot profiles. These inclusions of non-existing files break aa-genprof (Closes: #928160). * Merge ubuntu/2.13.2-9ubuntu7, which turns out to be a no-op, because we essentially revert all changes brought by this merge: - Drop lp1820068.patch, introduced in 2.13.2-9ubuntu7: it's included in the 2.13.3 upstream release already. - Don't enable ubuntu/parser-conf-no-expr-simplify.patch, that Ubuntu just re-enabled: in Debian we don't disable expression tree simplification, because we've cherry-picked an upstream patch that improves its performance sufficiently. -- intrigeri <intrigeri@debian.org> Sat, 27 Jul 2019 17:18:43 +0000 apparmor (2.13.3-3) unstable; urgency=medium [ Michael Biebl ] * Move libraries back to /usr/lib [ intrigeri ] * Remove Lintian override made obsolete by the move to /usr/lib/apparmor/ * Avoid-blhc-CPPFLAGS-missing-false-positive.patch: new patch. * Revert "debian/control: Breaks on snapd < 2.38~" Jamie Strandboge explained in details on #932815 the rationale behind this Breaks relationship. The user impact seems non-critical and the risk of the problem happening in practice is very low, so for now let's remove this Breaks, that prevents apparmor from migrating to testing (we don't have snapd 2.38+ in Debian yet). -- intrigeri <intrigeri@debian.org> Tue, 23 Jul 2019 22:19:02 +0000 apparmor (2.13.3-2) unstable; urgency=medium * Install the lsb_release profile. -- intrigeri <intrigeri@debian.org> Wed, 17 Jul 2019 19:41:32 +0000 apparmor (2.13.3-1) unstable; urgency=medium * Import new 2.13.3 upstream release and accordingly: - Update dev-pkg-without-shlib-symlink Lintian override: soname was bumped to 1.6.1. - Drop patches that were applied upstream. * Merge ubuntu/2.13.2-9ubuntu6, dropping the Ubuntu delta (Closes: #926015): - lp1824812.patch: set SFS_MOUNTPOINT in is_container_with_internal_policy() since it is sometimes called independently of is_apparmor_loaded() (LP: #1824812) - debian/apparmor.postrm: remove parser-created subdirs - debian/tests/control: try Ubuntu kernel but mark skip-not-installable - regression testsuite fixes: upstream-commit-add-option-to-dump-policy-cache-with-libapparmor.patch, upstream-commit-teach-aa_policy_cache_sh-about-the-new-cache.patch, upstream-commit-fix-variable-name-overlap-in-merge-macro.patch - debian/debhelper/postrm-apparmor: also remove cache files - debian/control: Breaks on snapd < 2.38~ (the cache forest breaks snap remove) * Declare compatibility with Debian Policy 4.4.0. * Bump debhelper compatibility level to 12. Accordingly: - dh_installinit: replace --no-restart-on-upgrade with its new --no-stop-on-upgrade name - Add override_dh_installsystemd that mimics our override_dh_installinit * tests/compile-policy: check syntax of kopano profiles (implements #923313 except kopano-search, until giraffe-team/kopanocore!4 is merged and uploaded) -- intrigeri <intrigeri@debian.org> Wed, 17 Jul 2019 17:55:09 +0000 # Older entries have been removed from this changelog. # To read the complete changelog use `apt changelog libapparmor1`.
Generated by dwww version 1.15 on Sun Jun 16 00:32:35 CEST 2024.