[opensuse-factory] Fwd: [apparmor] AppArmor 2.7-beta1
Hello,
AppArmor 2.7 beta1 has been released and contains various bugfixes, for
example a working ;-) aa-notify and systemd support.
(See release announcement at the end of this mail and
http://wiki.apparmor.net/index.php/ReleaseNotes_2_7 for details)
Jeff, can you please update the package in Factory?
As you know, I commited many patches upstream. The following patches are
in 2.7 beta1 and can be removed from the openSUSE package:
apparmor-2.5.1-ntpd-sys_nice
apparmor-2.5.1-ssl-fix
apparmor-2.6.0-dhcpd
apparmor-compat-routines
apparmor-profiles-cupsd-fix
apparmor-profiles-dhclient
apparmor-profiles-sshd-fix (enhanced version with additional fixes)
apparmor-profiles-syslog-ng-fix
apparmor-profiles-usr.sbin.dnsmasq
apparmor-scripts
apparmor-securityfs-systemd.patch
apparmor-startproc.patch
apparmor-utils-add-log-types
apparmor-utils-filenames-in-slash
genprof-whitespace-in-profile-fix
klog-needs-CAP_SYSLOG
apparmor-remove-repo was implemented upstream in a different way and can
most probably be removed.
Some of your patches that were "hidden" in the 11.4:Update package (but
not in the Factory package) did not make it into 2.7 beta1:
- apparmor-profiles-dovecot (updated version that applies cleanly is
attached, but the new link permissions are still discussed upstream)
- apparmor-profiles-samba (updated version attached, with an additional
fix for bnc#679182#c8)
- apparmor-profiles-traceroute (still applies)
Please include these patches in the Factory package.
apparmor-2.5.1-ldapclient-profile and apparmor-2.5.1-edirectory-profile
are waiting for an answer from you on the AppArmor mailinglist
(see Steve's mail from 2011-08-08, "openSUSE profile patches - part 1").
The apparmor-utils-string-split patch wasn't liked too much because it
would hardcode the line length into the translations. Kees thinks that
the wrapping should be done by the code displaying the message. (Feel
free to discuss this on the AppArmor mailinglist.)
Some patches are intentionally not upstreamed.
For example, apparmor-utils-subdomain-compat should stay openSUSE-only
and be removed when it's no longer needed for YaST.
I have also attached "osc-diff" that adds some notes to the remaining
patches. It should apply to security:apparmor:factory without problems.
That all said, here's the upstream release announcement:
---------- Weitergeleitete Nachricht ----------
Betreff: [apparmor] AppArmor 2.7-beta1
Datum: Samstag, 20. August 2011 02:25
Von: John Johansen
On 08/21/2011 07:05 PM, Christian Boltz wrote:
Hello,
AppArmor 2.7 beta1 has been released and contains various bugfixes, for example a working ;-) aa-notify and systemd support. (See release announcement at the end of this mail and http://wiki.apparmor.net/index.php/ReleaseNotes_2_7 for details)
Jeff, can you please update the package in Factory?
As you know, I commited many patches upstream. The following patches are in 2.7 beta1 and can be removed from the openSUSE package:
apparmor-2.5.1-ntpd-sys_nice apparmor-2.5.1-ssl-fix apparmor-2.6.0-dhcpd apparmor-compat-routines apparmor-profiles-cupsd-fix apparmor-profiles-dhclient apparmor-profiles-sshd-fix (enhanced version with additional fixes) apparmor-profiles-syslog-ng-fix apparmor-profiles-usr.sbin.dnsmasq apparmor-scripts apparmor-securityfs-systemd.patch apparmor-startproc.patch apparmor-utils-add-log-types apparmor-utils-filenames-in-slash genprof-whitespace-in-profile-fix klog-needs-CAP_SYSLOG
apparmor-remove-repo was implemented upstream in a different way and can most probably be removed.
Some of your patches that were "hidden" in the 11.4:Update package (but not in the Factory package) did not make it into 2.7 beta1: - apparmor-profiles-dovecot (updated version that applies cleanly is attached, but the new link permissions are still discussed upstream) - apparmor-profiles-samba (updated version attached, with an additional fix for bnc#679182#c8) - apparmor-profiles-traceroute (still applies) Please include these patches in the Factory package.
apparmor-2.5.1-ldapclient-profile and apparmor-2.5.1-edirectory-profile are waiting for an answer from you on the AppArmor mailinglist (see Steve's mail from 2011-08-08, "openSUSE profile patches - part 1").
The apparmor-utils-string-split patch wasn't liked too much because it would hardcode the line length into the translations. Kees thinks that the wrapping should be done by the code displaying the message. (Feel free to discuss this on the AppArmor mailinglist.)
Some patches are intentionally not upstreamed. For example, apparmor-utils-subdomain-compat should stay openSUSE-only and be removed when it's no longer needed for YaST.
I have also attached "osc-diff" that adds some notes to the remaining patches. It should apply to security:apparmor:factory without problems.
That all said, here's the upstream release announcement:
---------- Weitergeleitete Nachricht ----------
Betreff: [apparmor] AppArmor 2.7-beta1 Datum: Samstag, 20. August 2011 02:25 Von: John Johansen
An: apparmor The AppArmor development team is pleased to announce the 2.7-beta1 of the AppArmor user space components. This release is an incremental improvement over the AppArmor 2.6.2 release, focusing on fixing bugs in the userspace code.
The release is available from
http://launchpad.net/apparmor/2.7/2.7.beta1/+download/apparmor-2.7.0~beta1.t...
or
http://kernel.org/pub/linux/security/apparmor/AppArmor-2.7/apparmor-2.7.0~be...
and has the following md5sum
1f543d99868d640b1c4574ee33493087
A detached gnupg signature is available at
http://launchpad.net/apparmor/2.7/2.7.beta1/+download/apparmor-2.7.0~beta1.t...
which should indicate it was signed with the john johansen's signing key having the fingerprint
D926 7844 5CD9 BFA5 6C74 EC8E C405 7122 C10A 23E6
The release notes for the 2.7-beta1 release are available at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_7
Please report any bugs you may find via the Launchpad AppArmor project on Launchpad at https://launchpad.net/apparmor/ .
Thanks!
-- John Johansen
Thanks for that informations, I will wait 10 days before putting the bug apparmor + factory 12.1 is not working a least in yast2 the module just freeze ... -- Bruno Friedmann Ioda-Net Sàrl www.ioda-net.ch openSUSE Member & Ambassador GPG KEY : D5C9B751C4653227 irc: tigerfoot -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Hello, on Sonntag, 21. August 2011, Bruno Friedmann wrote:
Thanks for that informations, I will wait 10 days before putting the bug apparmor + factory 12.1 is not working a least in yast2 the module just freeze ...
You really (try to) use the YaST modules? I always considered the aa-* commandline tools easier to handle and even easier to understand. That said: do the aa-* commandline tools also freeze? If the problem only exists with YaST, please file your bugreport without waiting (attach y2logs as usual) - the YaST modules are not related to the AppArmor release. Regards, Christian Boltz --
sdfgsdfg sind denn die Schreibmaschinenkurse an der VHS echt so überbelegt, daß man die Liste damit behelligen muß? [> Georg Poetting und Michael Schulz in suse-linux] -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
On 08/21/2011 11:58 PM, Christian Boltz wrote:
Hello,
on Sonntag, 21. August 2011, Bruno Friedmann wrote:
Thanks for that informations, I will wait 10 days before putting the bug apparmor + factory 12.1 is not working a least in yast2 the module just freeze ...
You really (try to) use the YaST modules? I always considered the aa-* commandline tools easier to handle and even easier to understand.
That said: do the aa-* commandline tools also freeze?
If the problem only exists with YaST, please file your bugreport without waiting (attach y2logs as usual) - the YaST modules are not related to the AppArmor release.
Regards,
Christian Boltz
ok the aa-* tools seems to work, and definitively a Yast bug reported as https://bugzilla.novell.com/show_bug.cgi?id=713408 -- Bruno Friedmann Ioda-Net Sàrl www.ioda-net.ch openSUSE Member & Ambassador GPG KEY : D5C9B751C4653227 irc: tigerfoot -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
participants (2)
-
Bruno Friedmann
-
Christian Boltz