On 08/21/2011 07:05 PM, Christian Boltz wrote:
Hello,
AppArmor 2.7 beta1 has been released and contains various bugfixes, for example a working ;-) aa-notify and systemd support. (See release announcement at the end of this mail and http://wiki.apparmor.net/index.php/ReleaseNotes_2_7 for details)
Jeff, can you please update the package in Factory?
As you know, I commited many patches upstream. The following patches are in 2.7 beta1 and can be removed from the openSUSE package:
apparmor-2.5.1-ntpd-sys_nice apparmor-2.5.1-ssl-fix apparmor-2.6.0-dhcpd apparmor-compat-routines apparmor-profiles-cupsd-fix apparmor-profiles-dhclient apparmor-profiles-sshd-fix (enhanced version with additional fixes) apparmor-profiles-syslog-ng-fix apparmor-profiles-usr.sbin.dnsmasq apparmor-scripts apparmor-securityfs-systemd.patch apparmor-startproc.patch apparmor-utils-add-log-types apparmor-utils-filenames-in-slash genprof-whitespace-in-profile-fix klog-needs-CAP_SYSLOG
apparmor-remove-repo was implemented upstream in a different way and can most probably be removed.
Some of your patches that were "hidden" in the 11.4:Update package (but not in the Factory package) did not make it into 2.7 beta1: - apparmor-profiles-dovecot (updated version that applies cleanly is attached, but the new link permissions are still discussed upstream) - apparmor-profiles-samba (updated version attached, with an additional fix for bnc#679182#c8) - apparmor-profiles-traceroute (still applies) Please include these patches in the Factory package.
apparmor-2.5.1-ldapclient-profile and apparmor-2.5.1-edirectory-profile are waiting for an answer from you on the AppArmor mailinglist (see Steve's mail from 2011-08-08, "openSUSE profile patches - part 1").
The apparmor-utils-string-split patch wasn't liked too much because it would hardcode the line length into the translations. Kees thinks that the wrapping should be done by the code displaying the message. (Feel free to discuss this on the AppArmor mailinglist.)
Some patches are intentionally not upstreamed. For example, apparmor-utils-subdomain-compat should stay openSUSE-only and be removed when it's no longer needed for YaST.
I have also attached "osc-diff" that adds some notes to the remaining patches. It should apply to security:apparmor:factory without problems.
That all said, here's the upstream release announcement:
---------- Weitergeleitete Nachricht ----------
Betreff: [apparmor] AppArmor 2.7-beta1 Datum: Samstag, 20. August 2011 02:25 Von: John Johansen
An: apparmor The AppArmor development team is pleased to announce the 2.7-beta1 of the AppArmor user space components. This release is an incremental improvement over the AppArmor 2.6.2 release, focusing on fixing bugs in the userspace code.
The release is available from
http://launchpad.net/apparmor/2.7/2.7.beta1/+download/apparmor-2.7.0~beta1.t...
or
http://kernel.org/pub/linux/security/apparmor/AppArmor-2.7/apparmor-2.7.0~be...
and has the following md5sum
1f543d99868d640b1c4574ee33493087
A detached gnupg signature is available at
http://launchpad.net/apparmor/2.7/2.7.beta1/+download/apparmor-2.7.0~beta1.t...
which should indicate it was signed with the john johansen's signing key having the fingerprint
D926 7844 5CD9 BFA5 6C74 EC8E C405 7122 C10A 23E6
The release notes for the 2.7-beta1 release are available at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_7
Please report any bugs you may find via the Launchpad AppArmor project on Launchpad at https://launchpad.net/apparmor/ .
Thanks!
-- John Johansen
Thanks for that informations, I will wait 10 days before putting the bug apparmor + factory 12.1 is not working a least in yast2 the module just freeze ... -- Bruno Friedmann Ioda-Net Sàrl www.ioda-net.ch openSUSE Member & Ambassador GPG KEY : D5C9B751C4653227 irc: tigerfoot -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org