Hello,
AppArmor 2.7 beta1 has been released and contains various bugfixes, for
example a working ;-) aa-notify and systemd support.
(See release announcement at the end of this mail and
http://wiki.apparmor.net/index.php/ReleaseNotes_2_7 for details)
Jeff, can you please update the package in Factory?
As you know, I commited many patches upstream. The following patches are
in 2.7 beta1 and can be removed from the openSUSE package:
apparmor-2.5.1-ntpd-sys_nice
apparmor-2.5.1-ssl-fix
apparmor-2.6.0-dhcpd
apparmor-compat-routines
apparmor-profiles-cupsd-fix
apparmor-profiles-dhclient
apparmor-profiles-sshd-fix (enhanced version with additional fixes)
apparmor-profiles-syslog-ng-fix
apparmor-profiles-usr.sbin.dnsmasq
apparmor-scripts
apparmor-securityfs-systemd.patch
apparmor-startproc.patch
apparmor-utils-add-log-types
apparmor-utils-filenames-in-slash
genprof-whitespace-in-profile-fix
klog-needs-CAP_SYSLOG
apparmor-remove-repo was implemented upstream in a different way and can
most probably be removed.
Some of your patches that were "hidden" in the 11.4:Update package (but
not in the Factory package) did not make it into 2.7 beta1:
- apparmor-profiles-dovecot (updated version that applies cleanly is
attached, but the new link permissions are still discussed upstream)
- apparmor-profiles-samba (updated version attached, with an additional
fix for bnc#679182#c8)
- apparmor-profiles-traceroute (still applies)
Please include these patches in the Factory package.
apparmor-2.5.1-ldapclient-profile and apparmor-2.5.1-edirectory-profile
are waiting for an answer from you on the AppArmor mailinglist
(see Steve's mail from 2011-08-08, "openSUSE profile patches - part 1").
The apparmor-utils-string-split patch wasn't liked too much because it
would hardcode the line length into the translations. Kees thinks that
the wrapping should be done by the code displaying the message. (Feel
free to discuss this on the AppArmor mailinglist.)
Some patches are intentionally not upstreamed.
For example, apparmor-utils-subdomain-compat should stay openSUSE-only
and be removed when it's no longer needed for YaST.
I have also attached "osc-diff" that adds some notes to the remaining
patches. It should apply to security:apparmor:factory without problems.
That all said, here's the upstream release announcement:
---------- Weitergeleitete Nachricht ----------
Betreff: [apparmor] AppArmor 2.7-beta1
Datum: Samstag, 20. August 2011 02:25
Von: John Johansen