apparmor 2.8.95~2430-0ubuntu5 source package in Ubuntu

Changelog

apparmor (2.8.95~2430-0ubuntu5) trusty; urgency=medium

  * debian/control: add versioned Breaks to apparmor for lxc, libvirt-bin,
    lightdm and apparmor-easyprof-ubuntu

apparmor (2.8.95~2430-0ubuntu4) trusty; urgency=medium

  [ John Johansen, Steve Beattie ]
  * Add userspace support for AppArmor signals and ptrace mediation
    (LP: #1298611)
    + debian/patches/mediate-signals.patch,
      debian/patches/change-signal-syntax.patch: Parse signal rules with
      apparmor_parser. See the apparmor.d(5) man page for syntax details.
    + debian/patches/change-ptrace-syntax.patch,
      debian/patches/mediate-ptrace.patch: Parse ptrace rules with
      apparmor_parser. See the apparmor.d(5) man page for syntax details.
    + debian/patches/test-signal-rules.patch,
      debian/patches/test-ptrace-rules.patch,
      debian/patches/update-tests-for-new-semantics.patch: Update existing
      tests and add new tests for signal and ptrace mediation
    + debian/patches/fix-garbage-in-preprocessor-output.patch: Fix bug causing
      apparmor_parser preprocessor output to contain garbage after include
      statements
    + debian/patches/fix-double-comma-in-preprocessor-output.patch: Fix bug
      causing apparmor_parser preprocessor output to contain double commas
      after some rules
    + debian/patches/symtab-tests-and-seenlist-bug.patch,
      debian/patches/add-profile-name-variable.patch: Add ${profile_name}
      variable for use in profiles when rules need to specify the current
      profile's name. This is useful for signal and ptrace rules that specify
    + debian/patches/fix-names-treated-as-condlistid.patch: Fix
      apparmor_parser bug that caused mount and dbus rules to fail for sets of
      values

  [ Jamie Strandboge ]
  * debian/patches/update-base-abstraction-for-signals-and-ptrace.patch:
    Adjust the base abstraction for signals and ptrace mediation. Profiles
    that use the base abstraction can deny any of the granted permissions to
    achieve tighter confinement.
  * debian/patches/manpage-signal-ptrace.patch: Update the apparmor.d man
    page to document signal rules, ptrace rules, and variables for use in
    AppArmor profiles
  * debian/patches/dnsmasq-libvirtd-signal-ptrace.patch: Update the dnsmasq
    profile to allow libvirtd to send signals to and ptrace read the dnsmasq
    process
  * debian/patches/update-chromium-browser.patch: Adjust the chromium-browser
    profile for permissions needed in newer chromium-browser versions and add
    the rules needed for AppArmor ptrace mediation

  [ Tyler Hicks ]
  * Add new rule type support to aa.py to fix tracebacks when using the Python
    utilities in apparmor-utils on systems with AppArmor profiles containing
    previously unsupported rule types
    - debian/patches/python-utils-file-support.patch: Support path rules
      containing the "file" prefix (LP: #1295346)
    - debian/patches/python-utils-signal-support.patch: Parse and write signal
      rules (LP: #1300316)
    - debian/patches/python-utils-ptrace-support.patch: Parse and write ptrace
      rules (LP: #1300317)
    - debian/patches/python-utils-pivot_root-support.patch: Parse and write
      pivot_root rules (LP: #1298678)
 -- Jamie Strandboge <email address hidden>   Fri, 04 Apr 2014 01:07:24 -0500

Upload details

Uploaded by:
Jamie Strandboge on 2014-04-04
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Trusty release on 2014-04-04 main admin

Downloads

File Size SHA-256 Checksum
apparmor_2.8.95~2430.orig.tar.gz 2.1 MiB 78b0846fce04d3d2ea876fc37fcfe5d101e0da7634b6244d808cd03e5affc67d
apparmor_2.8.95~2430-0ubuntu5.debian.tar.gz 154.5 KiB f6971454f1554401b8bfbf75218b255c5bbd2a74311983fc4d574866a70a77d6
apparmor_2.8.95~2430-0ubuntu5.dsc 2.9 KiB 6783a308f71693000ae6b4e54e05fcb57742a4c2f331e718aa8e8ce7f93951a5

View changes file

Binary packages built by this source

apparmor: No summary available for apparmor in ubuntu utopic.

No description available for apparmor in ubuntu utopic.

apparmor-docs: documentation for AppArmor

 This package provides some technical documentation for the AppArmor
 Mandatory Access Control system. Currently this is only a single
 PDF covering basic operation, written some time ago.

apparmor-easyprof: No summary available for apparmor-easyprof in ubuntu utopic.

No description available for apparmor-easyprof in ubuntu utopic.

apparmor-notify: AppArmor notification system

 This package provides a utility to display AppArmor denial messages via
 desktop notifications. The utility can also be used to generate summary
 reports.

apparmor-profiles: profiles for AppArmor Security policies

 This provides various AppArmor profiles that have not been shipped by
 the packages they provide confinement for. By default, they ship in
 complain mode so that users can test and choose which are desired.

apparmor-utils: utilities for controlling AppArmor

 This provides the utilities to operate on AppArmor profiles. Profiles
 can be created, updated, enforced, set to complain mode, and disabled
 with tools such as aa-genprof, aa-enforce, aa-complain and aa-disabled.

dh-apparmor: AppArmor debhelper routines

 This provides the debhelper tools used to install and migrate AppArmor
 profiles. This is normally used from package maintainer scripts during
 install and removal.

libapache2-mod-apparmor: changehat AppArmor library as an Apache module

 This provides the Apache module needed to declare various differing
 confinement policies when running virtual hosts in the webserver
 by using the changehat abilities exposed through libapparmor.

libapparmor-dev: AppArmor development libraries and header files

 This package provides the development libraries and header files needed to
 link against the AppArmor changehat and log parsing functions. Also
 includes the manpages for library functions.

libapparmor-perl: AppArmor library Perl bindings

 This provides the Perl module that contains the language bindings
 for the AppArmor library, libapparmor, which were autogenerated via
 SWIG.

libapparmor1: changehat AppArmor library

 This package provides the shared library used for making use of the
 AppArmor profile and changehat functionality, as well as common log
 parsing routines.

libpam-apparmor: changehat AppArmor library as a PAM module

 This provides the PAM module needed to declare various differing
 confinement policies when starting PAM sessions by using the
 changehat abilities exposed through libapparmor.

python-apparmor: No summary available for python-apparmor in ubuntu utopic.

No description available for python-apparmor in ubuntu utopic.

python-libapparmor: AppArmor library Python bindings

 This provides the Python module that contains the language bindings
 for the AppArmor library, libapparmor, which were autogenerated via
 SWIG.

python3-apparmor: AppArmor Python3 utility library

 This provides the Python3 modules that implement the higher-level AppArmor
 applications.

python3-libapparmor: AppArmor library Python3 bindings

 This provides the Python3 module that contains the language bindings
 for the AppArmor library, libapparmor, which were autogenerated via
 SWIG.