lp://qastaging/~apparmor-dev/apparmor/aa-fixes

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp://qastaging/~apparmor-dev/apparmor/apparmor-ubuntu-citrain at revision 1500

Jamie Strandboge: Approve on 2014-03-28

Diff: 1166 lines (+1101/-2)

10 files modified

debian/changelog (+26/-2)
debian/patches/bare-capability-rule-support.patch (+89/-0)
debian/patches/check-config-for-sysctl.patch (+274/-0)
debian/patches/fix-typo-in-dbus_write.patch (+22/-0)
debian/patches/increase-swap-size.patch (+30/-0)
debian/patches/initialize-mount-flags.patch (+17/-0)
debian/patches/limited-mount-rule-support.patch (+222/-0)
debian/patches/series (+8/-0)
debian/patches/test-mount-mediation.patch (+266/-0)
debian/patches/test-v6-policy.patch (+147/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

1507. By Tyler Hicks on 2014-03-27

debian/changelog: Fix spelling and readability errors

1506. By Tyler Hicks on 2014-03-27

debian/changelog: Set distribution name

1505. By Tyler Hicks on 2014-03-27

debian/patches/test-v6-policy.patch,
debian/patches/test-mount-mediation.patch: Improve the regression tests
increasing the mount rule test coverage

1504. By Tyler Hicks on 2014-03-27

debian/patches/check-config-for-sysctl.patch,
debian/patches/increase-swap-size.patch: Fix bugs in the regression test
suite that caused errors when running on ppc64el

1503. By Tyler Hicks on 2014-03-27

debian/patches/bare-capability-rule-support.patch: Fix a bug in the
apparmor/aa.py module that caused the utilities in the apparmor-utils
package to traceback when encountering a bare capability rule
(LP: #1294819)

1502. By Tyler Hicks on 2014-03-27

debian/patches/limited-mount-rule-support.patch: Fix a bug in the
apparmor/aa.py module that caused the utilities in the apparmor-utils
package to traceback when encountering a mount rule (LP: #1294825)

1501. By Tyler Hicks on 2014-03-27

debian/patches/fix-typo-in-dbus_write.patch: Fix a bug in the
apparmor/aa.py module that caused the utilities in the apparmor-utils
package to write out network rules instead of dbus rules

1500. By Tyler Hicks on 2014-03-27

debian/patches/initialize-mount-flags.patch: Initialize the variables
containing mount rule flags to zero. Otherwise, the parser may set
unexpected bits in the mount flags field for rules that do not specify
mount flags. The unitialized mount flag variables may have caused
unexpected AppArmor denials during mount mediation. (LP: #1296459)

1499. By Jamie Strandboge on 2014-03-26

* autostart aa-notify via /etc/xdg/autostart instead of /etc/X11/Xsession.d
  (LP: #1288241)
  - remove debian/notify/90apparmor-notify
  - add debian/notify/apparmor-notify.desktop
  - debian/apparmor-notify.install: adjust for the above
  - add debian/apparmor-notify.maintscript to remove 90apparmor-notify
* debian/notify/notify.conf: use_group should be set to "sudo" instead of
  "admin" (LP: #1009666)

1498. By Jamie Strandboge on 2014-03-26

debian/lib/apparmor/functions: properly calculate number of profiles in
/var/lib/apparmor/profiles (LP: #1295816)