Created by James Westby and last modified
Get this branch:
bzr branch lp://staging/ubuntu/natty/apparmor
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Ubuntu branches

Recent revisions

123. By Jamie Strandboge

* debian/patches/0003-add-debian-integration-to-lighttpd.patch: updates for
  lighttpd example profile to work in Debian/Ubuntu (LP: #582814)
* debian/patches/0004-lp754889.patch: add several image viewers to
  ubuntu-browsers.d/multimedia abstraction (LP: #754889)
* debian/patches/0005-lp761217.patch: abstractions/private-files updates for
  zsh and several other shells (LP: #761217)
* debian/patches/0001-add-chromium-browser.patch: fixes for multiarch and
  crash reporter (LP: #764786)

122. By Jamie Strandboge

debian/patches/0002-lp750381.path: adjust ubuntu-media-players abstraction
to allow reading of configs required by gnash and owner writing of
@{HOME}/.gnash (LP: #750381)

121. By Steve Beattie

* New upstream release.
  - Fixes breakage of mod_apparmor apache2 module (LP: #737074)
  - Fixes profile matching when an attachement doesn't contain a
    regex (LP: #731155)
  - Fixes parser acceptance of missing network protocols (LP: #732837)
  - Patches taken upstream and dropped:
    + debian/patches/0002-lp727478.patch
    + debian/patches/0003-test-lp727478.patch
    + debian/patches/0004-lp736870.patch
* debian/apparmor.install, debian/apparmor.dirs: add new multiarch
  tunable file and directory
* debian/python-libapparmor.install: loosen directory specification
  for resiliancy against different python versions

120. By Steve Langasek

* Update debian/patches/0004-lp736870.patch (LP: #736870):
  - armel triplet doesn't match '*-linux-gnu'
  - /lib/tls for libc6-xen needs handling
  - gnome, kde, kerberosclient, and authentication abstractions also need
    updating for multiarch.

119. By Jamie Strandboge

debian/patches/0004-lp736870.patch: add multiarch support to abstractions
(LP: #736870)

118. By Jamie Strandboge

* debian/patches/0002-lp727478.patch: Override AF_MAX for kernels that don't
  support proper masking. Patch thanks to John Johansen (LP: #727478)
* debian/patches/0003-test-lp727478.patch: add tcp.sh test as partial
  networking test

117. By Steve Beattie

[ Steve Beattie ]
* New upstream 2.6.0 release (LP: #724193)
  - Patches taken upstream and dropped:
    + 0001-ubuntu-buildd.patch
    + 0003-add-libvirt-support-to-dnsmasq.patch
    + 0004-lp698194.patch
    + 0005-aa-disable.patch
  - debian/rules: remove library path settings for mod_apparmor and
    pam_apprmor builds; upstream handles this properly now.
  - debian/apparmor-utils.install: handle upstream SubDomain.pm =>
    AppArmor.pm renaming
* debian/lib/apparmor/functions: handle profile names with embedded
  spaces (LP: #655523)
* debian/rules, debian/control, debian/python-libapparmor: build
  a python-libapparmor package.

[ Jamie Strandboge ]
* debian/copyright: update and reformat according to DEP-5
* debian/lib/apparmor/functions: don't unload dynamically generated libvirt
  profiles on reload, restart, and force-reload (LP: #702774)
* debian/control: use Section: python for python-libapparmor

116. By Jamie Strandboge

* debian/patches/0005-aa-disable.patch: add aa-disable
* debian/apparmor-utils.install: install aa-disable
* debian/apparmor-utils.manpages: install aa-disable man page

115. By Jamie Strandboge

* Merge with upstream bzr revision 1617. Closes the following bugs:
  - LP: #692406: temporarily disable the defunct repository until an
    alternative can be used
  - LP: #649497: add ibus abstraction
  - LP: #652562: allow 'rw' to /var/log/samba/cores/
  - LP: #658135: allow access to /usr/lib32 and /usr/lib64 for dri modules
* 0002-add-chromium-browser.patch: add /dev/shm/.org.chromium.*
  (LP: #692866)
* rename debian/patches/0010-ubuntu-buildd.patch to 0001-ubuntu-buildd.patch
  and adjust debian/patches/series
* debian/patches/0003-add-libvirt-support-to-dnsmasq.patch (LP: #697239):
  - allow read and write access to libvirt pid files for dnsmasq
  - allow net_admin capability for DHCP server
  - allow net_raw and network inet raw for ICMP pings when used as a DHCP
* debian/patches/0004-lp698194 (LP: #698194):
  - abstractions/private-files: don't allow wl to autostart directories
  - abstractions/private-files-strict: don't allow access to chromium,
    kwallet and popular mail clients

114. By Kees Cook

* Merge with upstream bzr revision 1601 to gain parser speed
  improvements and man page fixes. Closes the following bugs:
  - LP: #349049: document audit, deny and owner rule qualifiers
  - LP: #466228: ubuntu-browsers.d/multimedia: allow flash printing
  - LP: #644983: add ubuntu-browsers.d/ubuntu-integration-xul
  - LP: #692216: use aa_change_hat() instead of change_hat()
  - LP: #692217: add aa_change_profile.pod manpage
* debian/control: explicitly depend on gettext module.
* ship apparmor vim syntax file (LP: #646800):
  - debian/vim-apparmor.yaml: vim addon definition file.
  - debian/apparmor-utils.install: add apparmor.vim and vim-apparmor.yaml.
* debian/libapparmor1.manpages: ship aa_change_profile manpage.

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
This branch contains Public information 
Everyone can see this information.