openSUSE Recommended Update: apparmor: Update to 2.8.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1588-1 Rating: low References: #777471 #798183 #807104 #822277 #824577 #845867 #846054 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This udpate fixes the following issues with apparmor: - update AppArmmor to 2.8.2 + several fixes for python3 compability + several profile improvements: * various additions to abstractions/fonts * move poppler's cMaps from gnome to fonts; gnome includes fonts * deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict * add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base (bnc#824577) * update pulseaudio directory and cookie file paths * add missing permissions to the nscd profile (bnc#807104) * deny capability block_suspend to nscd (bnc#807104) * MariaDB compatability in abstractions/mysql (bnc#798183) + see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details - additional patches: + update apparmor/__init__.py to support the new tools developed in GSoC + fix aa-unconfined to work in all languages - additional profile updates: + fix ntp profile by allowing read access to openssl.cnf + update samba profiles for samba 4.x (bnc#845867, bnc#846054) + abstractions/p11-kit needs access to /usr/share/p11-kit/modules + allow reading /etc/machine-id in the dbus-session abstraction - enable python and ruby subpackages - some other small changes, see changelog for all details Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-793 - openSUSE 12.2: zypper in -t patch openSUSE-2013-793 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): apache2-mod_apparmor-2.8.2-3.4.1 apache2-mod_apparmor-debuginfo-2.8.2-3.4.1 apparmor-debugsource-2.8.2-3.4.1 apparmor-parser-2.8.2-3.4.1 apparmor-parser-debuginfo-2.8.2-3.4.1 libapparmor-devel-2.8.2-3.4.1 libapparmor1-2.8.2-3.4.1 libapparmor1-debuginfo-2.8.2-3.4.1 pam_apparmor-2.8.2-3.4.1 pam_apparmor-debuginfo-2.8.2-3.4.1 perl-apparmor-2.8.2-3.4.1 perl-apparmor-debuginfo-2.8.2-3.4.1 python3-apparmor-2.8.2-3.4.1 python3-apparmor-debuginfo-2.8.2-3.4.1 ruby-apparmor-2.8.2-3.4.1 ruby-apparmor-debuginfo-2.8.2-3.4.1 - openSUSE 12.3 (x86_64): libapparmor1-32bit-2.8.2-3.4.1 libapparmor1-debuginfo-32bit-2.8.2-3.4.1 pam_apparmor-32bit-2.8.2-3.4.1 pam_apparmor-debuginfo-32bit-2.8.2-3.4.1 - openSUSE 12.3 (noarch): apparmor-docs-2.8.2-3.4.1 apparmor-parser-lang-2.8.2-3.4.1 apparmor-profiles-2.8.2-3.4.1 apparmor-utils-2.8.2-3.4.1 apparmor-utils-lang-2.8.2-3.4.1 - openSUSE 12.2 (i586 x86_64): apache2-mod_apparmor-2.8.2-2.11.1 apache2-mod_apparmor-debuginfo-2.8.2-2.11.1 apparmor-debugsource-2.8.2-2.11.1 apparmor-parser-2.8.2-2.11.1 apparmor-parser-debuginfo-2.8.2-2.11.1 libapparmor-devel-2.8.2-2.11.1 libapparmor1-2.8.2-2.11.1 libapparmor1-debuginfo-2.8.2-2.11.1 pam_apparmor-2.8.2-2.11.1 perl-apparmor-2.8.2-2.11.1 perl-apparmor-debuginfo-2.8.2-2.11.1 python-apparmor-2.8.2-2.11.1 python-apparmor-debuginfo-2.8.2-2.11.1 ruby-apparmor-2.8.2-2.11.1 ruby-apparmor-debuginfo-2.8.2-2.11.1 - openSUSE 12.2 (x86_64): libapparmor1-32bit-2.8.2-2.11.1 libapparmor1-debuginfo-32bit-2.8.2-2.11.1 pam_apparmor-32bit-2.8.2-2.11.1 - openSUSE 12.2 (noarch): apparmor-docs-2.8.2-2.11.1 apparmor-parser-lang-2.8.2-2.11.1 apparmor-profiles-2.8.2-2.11.1 apparmor-utils-2.8.2-2.11.1 apparmor-utils-lang-2.8.2-2.11.1 References: https://bugzilla.novell.com/777471 https://bugzilla.novell.com/798183 https://bugzilla.novell.com/807104 https://bugzilla.novell.com/822277 https://bugzilla.novell.com/824577 https://bugzilla.novell.com/845867 https://bugzilla.novell.com/846054