Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2016-04-28 16:51:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "apparmor" Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2015-10-17 16:38:04.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.apparmor.new/apparmor.changes 2016-04-28 16:51:58.000000000 +0200 @@ -1,0 +2,30 @@ +Fri Apr 22 20:49:24 UTC 2016 - suse-beta@cboltz.de + +- update to AppArmor 2.10.1 (2.10 branch r3326): + - fix incorrect output of child profile names (apparmor_parser -N) which + caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) + - fix a crash in aa-logprof / logparser.py for change_hat log events + (lp#1523297) and log events that look like file events, but aren't + (lp#1540562, lp#1525119, lp#1466812) + - write unix rules when saving a profile (lp#1522938, boo#954104#c3) + - several fixes for variable handling in aa-logprof + - map c (create) log events to w instead of a + - add python to the "no Px rule" list in logprof.conf + - let aa-logprof check for duplicate profiles + - let aa-status work without the apparmor.fail python module (boo#971917, + lp#1480492) + - add permissions in several profiles (including boo#948584, boo#948753, + boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and + boo#921098#c15). + - and many more fixes, see the full changelog at + http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 +- drop upstream(ed) patches: + - fix-initscript-aa_log_end_msg.diff + - syslog-ng-profile-boo948584.diff + - upstream-profile-updates-r3205-3241.diff +- refresh patches: + - apparmor-abstractions-no-multiline.diff + - apparmor-samba-include-permissions-for-shares.diff +- drop libapparmor autogen.sh call (broke the build) and remove libtool BR + +------------------------------------------------------------------- Old: ---- apparmor-2.10.tar.gz apparmor-2.10.tar.gz.asc fix-initscript-aa_log_end_msg.diff syslog-ng-profile-boo948584.diff upstream-profile-updates-r3205-3241.diff New: ---- apparmor-2.10.1.tar.gz apparmor-2.10.1.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.nNodXj/_old 2016-04-28 16:51:59.000000000 +0200 +++ /var/tmp/diff_new_pack.nNodXj/_new 2016-04-28 16:51:59.000000000 +0200 @@ -1,8 +1,8 @@ # # spec file for package apparmor # -# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. -# Copyright (c) 2011-2015 Christian Boltz +# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2011-2016 Christian Boltz # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -60,7 +60,7 @@ %if ! %{?distro:1}0 %define distro suse %endif -Version: 2.10 +Version: 2.10.1 Release: 0 Summary: AppArmor userlevel parser utility License: GPL-2.0+ @@ -92,15 +92,6 @@ # bug 906858 - confine lessopen.sh (submitted upstream 2014-12-21) Patch7: apparmor-lessopen-profile.patch -# boo#862170 - fix ugly initscript output (commited upstream trunk r3208) -Patch8: fix-initscript-aa_log_end_msg.diff - -# additional syslog-ng permissions (submitted upstream 2015-10-07) (boo#948584, boo#948753) -Patch9: syslog-ng-profile-boo948584.diff - -# several profile updates taken from upstream bzr trunk r3205..3241 -Patch10: upstream-profile-updates-r3205-3241.diff - Url: https://launchpad.net/apparmor PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -113,7 +104,6 @@ BuildRequires: flex BuildRequires: gcc-c++ BuildRequires: latex2html -BuildRequires: libtool BuildRequires: pcre-devel BuildRequires: pkg-config BuildRequires: python @@ -449,9 +439,6 @@ %patch6 %patch7 -p1 -%patch8 -%patch9 -%patch10 # search for left-over multiline rules test -z "$(grep -r '^\s*\(unix\|dbus\)[^,]\(([^)]*)\)*[^,]*$' profiles/apparmor.d/)" @@ -472,7 +459,6 @@ # libapparmor: ( cd ./libraries/libapparmor - sh ./autogen.sh %configure \ %if %{with perl} --with-perl \ ++++++ apparmor-2.10.tar.gz -> apparmor-2.10.1.tar.gz ++++++ ++++ 38576 lines of diff (skipped) ++++++ apparmor-abstractions-no-multiline.diff ++++++ --- /var/tmp/diff_new_pack.nNodXj/_old 2016-04-28 16:52:00.000000000 +0200 +++ /var/tmp/diff_new_pack.nNodXj/_new 2016-04-28 16:52:00.000000000 +0200 @@ -1,16 +1,20 @@ === modified file 'profiles/apparmor.d/abstractions/X' Index: profiles/apparmor.d/abstractions/X =================================================================== ---- profiles/apparmor.d/abstractions/X.orig 2014-10-18 13:11:18.498652324 +0200 -+++ profiles/apparmor.d/abstractions/X 2014-10-18 13:11:31.097494817 +0200 -@@ -24,9 +24,7 @@ +--- profiles/apparmor.d/abstractions/X.orig 2016-04-22 22:35:12.416535187 +0200 ++++ profiles/apparmor.d/abstractions/X 2016-04-22 22:35:46.556500929 +0200 +@@ -24,12 +24,8 @@ # the unix socket to use to connect to the display /tmp/.X11-unix/* w, - unix (connect, receive, send) - type=stream - peer=(addr="@/tmp/.X11-unix/X[0-9]*"), +- unix (connect, receive, send) +- type=stream +- peer=(addr="@/tmp/.ICE-unix/[0-9]*"), + unix (connect, receive, send) type=stream peer=(addr="@/tmp/.X11-unix/X[0-9]*"), ++ unix (connect, receive, send) type=stream peer=(addr="@/tmp/.ICE-unix/[0-9]*"), /usr/include/X11/ r, /usr/include/X11/** r, ++++++ apparmor-samba-include-permissions-for-shares.diff ++++++ --- /var/tmp/diff_new_pack.nNodXj/_old 2016-04-28 16:52:00.000000000 +0200 +++ /var/tmp/diff_new_pack.nNodXj/_new 2016-04-28 16:52:00.000000000 +0200 @@ -20,7 +20,7 @@ === modified file 'profiles/apparmor.d/usr.sbin.smbd' --- profiles/apparmor.d/usr.sbin.smbd 2011-08-27 18:50:42 +0000 +++ profiles/apparmor.d/usr.sbin.smbd 2011-10-19 09:37:04 +0000 -@@ -46,6 +46,10 @@ +@@ -47,6 +47,10 @@ @{HOMEDIRS}/** lrwk,