apparmor 2.10.95-0ubuntu2.6 source package in Ubuntu

Changelog

apparmor (2.10.95-0ubuntu2.6) xenial-security; urgency=medium

  * SECURITY UPDATE: Don't unload unknown profiles during package
    configuration or when restarting the apparmor init script or upstart job
    as this could leave processes unconfined (LP: #1668892)
    - debian/apparmor.postinst, debian/apparmor.init, debian/apparmor.upstart:
      Remove calls to unload_obsolete_profiles()
    - debian/patches/utils-add-aa-remove-unknown.patch,
      debian/apparmor.install debian/apparmor.manpages: Include a new utility,
      aa-remove-unknown, which can be used to unload unknown profiles
    - CVE-2017-6507

 -- Tyler Hicks <email address hidden>  Wed, 15 Mar 2017 22:07:02 +0000

Upload details

Uploaded by:
Tyler Hicks on 2017-03-16
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Xenial security on 2017-03-28 main admin

Downloads

File Size SHA-256 Checksum
apparmor_2.10.95.orig.tar.gz 4.3 MiB 3f659a599718f4a5e2a33140916715f574a5cb3634a6b9ed6d29f7b0617e4d1a
apparmor_2.10.95-0ubuntu2.6.debian.tar.xz 93.9 KiB 9864f5ba71c069fa31e85af3a9fd771cef26e67a1ecc785b0c1464d33ae5bfb1
apparmor_2.10.95-0ubuntu2.6.dsc 3.2 KiB e04b41652174316c8d4117bdbff6dc5f2854efba18c6240a1120f0899949d5be

View changes file

Binary packages built by this source

apparmor: user-space parser utility for AppArmor

 This provides the system initialization scripts needed to use the
 AppArmor Mandatory Access Control system, including the AppArmor Parser
 which is required to convert AppArmor text profiles into machine-readable
 policies that are loaded into the kernel for use with the AppArmor Linux
 Security Module.

apparmor-dbgsym: debug symbols for package apparmor

 This provides the system initialization scripts needed to use the
 AppArmor Mandatory Access Control system, including the AppArmor Parser
 which is required to convert AppArmor text profiles into machine-readable
 policies that are loaded into the kernel for use with the AppArmor Linux
 Security Module.

apparmor-docs: documentation for AppArmor

 This package provides some technical documentation for the AppArmor
 Mandatory Access Control system. Currently this is only a single
 PDF covering basic operation, written some time ago.

apparmor-easyprof: AppArmor easyprof profiling tool

 This provides the aa-easyprof utility which is an easy to use interface for
 AppArmor policy generation. aa-easyprof supports the use of templates and
 policy groups to quickly profile an application.

apparmor-notify: AppArmor notification system

 This package provides a utility to display AppArmor denial messages via
 desktop notifications. The utility can also be used to generate summary
 reports.

apparmor-profiles: profiles for AppArmor Security policies

 This provides various AppArmor profiles that have not been shipped by
 the packages they provide confinement for. By default, they ship in
 complain mode so that users can test and choose which are desired.

apparmor-utils: utilities for controlling AppArmor

 This provides the utilities to operate on AppArmor profiles. Profiles
 can be created, updated, enforced, set to complain mode, and disabled
 with tools such as aa-genprof, aa-enforce, aa-complain and aa-disabled.

dh-apparmor: AppArmor debhelper routines

 This provides the debhelper tools used to install and migrate AppArmor
 profiles. This is normally used from package maintainer scripts during
 install and removal.

libapache2-mod-apparmor: changehat AppArmor library as an Apache module

 This provides the Apache module needed to declare various differing
 confinement policies when running virtual hosts in the webserver
 by using the changehat abilities exposed through libapparmor.

libapache2-mod-apparmor-dbgsym: debug symbols for package libapache2-mod-apparmor

 This provides the Apache module needed to declare various differing
 confinement policies when running virtual hosts in the webserver
 by using the changehat abilities exposed through libapparmor.

libapparmor-dev: AppArmor development libraries and header files

 This package provides the development libraries and header files needed to
 link against the AppArmor changehat and log parsing functions. Also
 includes the manpages for library functions.

libapparmor-perl: AppArmor library Perl bindings

 This provides the Perl module that contains the language bindings
 for the AppArmor library, libapparmor, which were autogenerated via
 SWIG.

libapparmor-perl-dbgsym: debug symbols for package libapparmor-perl

 This provides the Perl module that contains the language bindings
 for the AppArmor library, libapparmor, which were autogenerated via
 SWIG.

libapparmor1: changehat AppArmor library

 This package provides the shared library used for making use of the
 AppArmor profile and changehat functionality, as well as common log
 parsing routines.

libapparmor1-dbgsym: debug symbols for package libapparmor1

 This package provides the shared library used for making use of the
 AppArmor profile and changehat functionality, as well as common log
 parsing routines.

libpam-apparmor: changehat AppArmor library as a PAM module

 This provides the PAM module needed to declare various differing
 confinement policies when starting PAM sessions by using the
 changehat abilities exposed through libapparmor.

libpam-apparmor-dbgsym: debug symbols for package libpam-apparmor

 This provides the PAM module needed to declare various differing
 confinement policies when starting PAM sessions by using the
 changehat abilities exposed through libapparmor.

python-apparmor: AppArmor Python utility library

 This provides the Python modules that implement the higher-level AppArmor
 applications.

python-libapparmor: AppArmor library Python bindings

 This provides the Python module that contains the language bindings
 for the AppArmor library, libapparmor, which were autogenerated via
 SWIG.

python3-apparmor: AppArmor Python3 utility library

 This provides the Python3 modules that implement the higher-level AppArmor
 applications.

python3-libapparmor: AppArmor library Python3 bindings

 This provides the Python3 module that contains the language bindings
 for the AppArmor library, libapparmor, which were autogenerated via
 SWIG.