sledp1o-yast2-apparmor

Recommended update for yast2-apparmor, apparmor-profiles,

This is a update for SLE10 for package(s):yast2-apparmor,apparmor-profiles,apparmor-utils,a pparmor-parser modified (subpackage of) yast2-apparmor: ------------------------------- --- SLES10-GA-CHANGELOGS/yast2-apparmor 2007-03-08 16:45:51.826720000 +0100 +++ SLES10-SP1-CHANGELOGS/yast2-apparmor 2007-03-08 17:03:46.921305000 +0100 @@ -1,3 +1,32 @@ +* Fri Mar 02 2007 - ddrewelow@suse.de +- Bug fixes +- 159732 (Application Audit Report broken) +- 171260 (i18n text cut-off) +- 185614 (Access Type message box can't close with x-click) +- 185689 (unlocalized buttons) +- 185738 (unlocalized weekdays) +- 233114 (can't configure some valid email addresses) + +* Fri Feb 16 2007 - ddrewelow@suse.de +- Fix for translation bugs (#179656 & others) +- Updated locale files + +* Mon Feb 05 2007 - sreeves@suse.de +- Fix for #239821 - missing icons + +* Sun Feb 04 2007 - dreynolds@suse.de +- ddrewelow@suse.de +- Added feature (#300719) for profile mode control in yast +- Fixed notification bugs (#177039,#190891,#198359) +- Fixed (#242044) Setting Mode filter in AppArmor edit report wizard saves + the wrong mode +- Fixed (#242043) AppArmor fails to restart via configuration in the YaST + control panel +- Fixed (#218961) Added missing capabilities to yast interface + +* Fri Jan 12 2007 - dreynolds@suse.de +- Added feature (#300906) to add syntax checking to wizards- + * Thu Jun 01 2006 - dreynolds@suse.de - Fixes for #175388, #172061. Added support for new profile syntax Px/Ux/m. ------------------------------- modified (subpackage of) apparmor-profiles: ------------------------------- --- SLES10-GA-CHANGELOGS/apparmor-profiles 2007-03-08 16:46:05.481333000 +0100 +++ SLES10-SP1-CHANGELOGS/apparmor-profiles 2007-03-08 17:03:31.898892000 +0100 @@ -1,3 +1,31 @@ +* Sat Feb 03 2007 - srarnold@suse.de +- Bug 225615 - apparmor rejects glibc AT_PLATFORM directories +- Bug 240734 - Applications using nss_ldap need to have access to + ldap.secret + +* Sat Jan 20 2007 - srarnold@suse.de +- Bug 178073 - AppArmor - postfix - smtp - directive smtp_generic_maps +- Bug 219580 - some programs require 'm' access to /etc/ld.so.cache +- Bug 219583 - rejecting w access for syslog-ng +- Bug 202095 - useradd / userdel profiles incomplete +- Bug 197186 - apparmor breaks openntpd +- Bug 221111 - ntpd needs access to /proc/net/if_inet6 +- Bug 220331 - syslog-ng cannot log news messages +- Remove empty lines with spaces, trailing spaces +- Remove Px rules on ld.so; remove ld.so family of profiles +- New disabled profiles for clamav, passwd +- New enabled profile for syslog-ng +- Disable netstat profile +- Postfix + TLS fixes + SMTP write to rewrite pipe + permissions=paranoid +- sshd new audit requirements +- ntpd + /var/tmp and /tmp fixes + Support W32Time authentication +- Support GSS-TSIG authentication in bind + * Sun Jun 18 2006 - srarnold@suse.de - Bug 182344 - AppArmor prevents postfix to comunicate with amavis - Bug 183800 - AppArmor denies link in Maildir @@ -26,17 +54,17 @@ * Wed May 03 2006 - srarnold@suse.de - Bug 167798 - misc profile modifications from darix -- mlmmj, lighttpd, oidentd profiles in extras/ -- new postfix helpers + - mlmmj, lighttpd, oidentd profiles in extras/ + - new postfix helpers (postfix profiles now in extras/) -- broken postfix smtpd alternation expansion -- factor abstractions/nameservice -- new python, ruby, php5 abstractions -- new web-data and svn-repositories data-centric abstractions -- svn:keywords to do proper attribution + - broken postfix smtpd alternation expansion + - factor abstractions/nameservice + - new python, ruby, php5 abstractions + - new web-data and svn-repositories data-centric abstractions + - svn:keywords to do proper attribution - Bug 170154 - squid dies when setting auth_param basic program /usr/sbin/pam_auth -- also move squid to /etc/apparmor/profilex/extras + - also move squid to /etc/apparmor/profilex/extras - Add some text to the extras/README describing how to turn postfix profiles on again, as an example ------------------------------- modified (subpackage of) apparmor-utils: ------------------------------- --- SLES10-GA-CHANGELOGS/apparmor-utils 2007-03-08 16:45:49.856351000 +0100 +++ SLES10-SP1-CHANGELOGS/apparmor-utils 2007-03-08 17:03:35.732701000 +0100 @@ -1,3 +1,18 @@ +* Fri Feb 16 2007 - ddrewelow@suse.de +- Translation fixes (#179656 & others) +- Updated localization files + +* Mon Jan 29 2007 - dreynolds@suse.de +- Repackaged tarball - as the previous version included an archive + file not used for the build that still had proprietary headers. + Removed the old archive file in the tarball. Re: bug 129516 + +* Fri Jan 19 2007 - dreynolds@suse.de +- Fixed bug 129516 - proprietary license headers removed + +* Fri Jan 12 2007 - dreynolds@suse.de +- Added feature (#300906) to add syntax checking to wizards + * Thu Jun 01 2006 - jmichael@suse.de - add support for the new m mode (#175388) - add support for the new Px/Ux modes (#172061) ------------------------------- modified (subpackage of) apparmor-parser: ------------------------------- --- SLES10-GA-CHANGELOGS/apparmor-parser 2007-03-08 16:44:40.009825000 +0100 +++ SLES10-SP1-CHANGELOGS/apparmor-parser 2007-03-08 17:02:43.873085000 +0100 @@ -1,4 +1,42 @@ -* Wed May 31 2006 - sbeattie@suse.de +* Fri Feb 16 2007 - ddrewelow@suse.de +- Translation updates + +* Fri Feb 02 2007 - srarnold@suse.de +- Bug 240986 - apparmor generates bad policy for rules containing \\ + +* Wed Jan 31 2007 - srarnold@suse.de +- [sles 10 sp1 checkin; #218961 below also removed libcap build + dependency, as we now use the kernel's headers for our capability + numbers] + +* Mon Nov 20 2006 - dreynolds@suse.de +- More translation updates + +* Mon Nov 20 2006 - dreynolds@suse.de +- Updates from the translation team + +* Tue Nov 14 2006 - sbeattie@suse.de +- fix rc.aaeventd to depend on apparmor, not boot.apparmor (#214293) + +* Thu Nov 09 2006 - sbeattie@suse.de +- Add audit_write and audit_control capabilities (#218961) + (jjohansen@suse.de) +- pull translation updates from lcn (ddrewelow@suse.de) +- Use kernel's capability defines rather than libcap +- /lib/lsb/init-functions provides killproc(), use it instead. + +* Sat Oct 28 2006 - olh@suse.de +- boot.apparmor should start after boot.localfs (#215156) + +* Sun Oct 15 2006 - sbeattie@suse.de +- add support for #include'ing directories +- remove /subdomain (#160020) +- updated translation files (from SLE10) + +* Fri Jul 28 2006 - olh@suse.de +- make boot.localfs optional in boot.apparmor (#181972) + +* Mon Jun 05 2006 - sbeattie@suse.de - Add support for 'm' flag (mmap w/PROT_EXEC permission) (#175388) - Add Px and Ux flags to indicate to ld.so that sensitive environemnt variables should be filtered on exec() (#172061) The m, Px, and Ux @@ -6,6 +44,12 @@ corresponding support will just ignore them. - Fix segv if profiles directory does not exist (#160330) - Fix aaeventd initscript description (#172961) +- Add check to verify module supports pcre +- Add regression tests and run on every build +- Other minor fixups + +* Fri May 26 2006 - schwab@suse.de +- Don't strip binaries. * Mon Apr 03 2006 - dreynolds@suse.de - Fix upgrade problems from sles9/sl10.0 (#156990) ------------------------------- This is a update for SLE10 for package(s):yast2-apparmor,apparmor-profiles,apparmor-utils,a pparmor-parser modified (subpackage of) yast2-apparmor: ------------------------------- --- SLES10-GA-CHANGELOGS/yast2-apparmor 2007-03-08 16:45:51.826720000 +0100 +++ SLES10-SP1-CHANGELOGS/yast2-apparmor 2007-03-08 17:03:46.921305000 +0100 @@ -1,3 +1,32 @@ +* Fri Mar 02 2007 - ddrewelow@suse.de +- Bug fixes +- 159732 (Application Audit Report broken) +- 171260 (i18n text cut-off) +- 185614 (Access Type message box can't close with x-click) +- 185689 (unlocalized buttons) +- 185738 (unlocalized weekdays) +- 233114 (can't configure some valid email addresses) + +* Fri Feb 16 2007 - ddrewelow@suse.de +- Fix for translation bugs (#179656 & others) +- Updated locale files + +* Mon Feb 05 2007 - sreeves@suse.de +- Fix for #239821 - missing icons + +* Sun Feb 04 2007 - dreynolds@suse.de +- ddrewelow@suse.de +- Added feature (#300719) for profile mode control in yast +- Fixed notification bugs (#177039,#190891,#198359) +- Fixed (#242044) Setting Mode filter in AppArmor edit report wizard saves + the wrong mode +- Fixed (#242043) AppArmor fails to restart via configuration in the YaST + control panel +- Fixed (#218961) Added missing capabilities to yast interface + +* Fri Jan 12 2007 - dreynolds@suse.de +- Added feature (#300906) to add syntax checking to wizards- + * Thu Jun 01 2006 - dreynolds@suse.de - Fixes for #175388, #172061. Added support for new profile syntax Px/Ux/m. ------------------------------- modified (subpackage of) apparmor-profiles: ------------------------------- --- SLES10-GA-CHANGELOGS/apparmor-profiles 2007-03-08 16:46:05.481333000 +0100 +++ SLES10-SP1-CHANGELOGS/apparmor-profiles 2007-03-08 17:03:31.898892000 +0100 @@ -1,3 +1,31 @@ +* Sat Feb 03 2007 - srarnold@suse.de +- Bug 225615 - apparmor rejects glibc AT_PLATFORM directories +- Bug 240734 - Applications using nss_ldap need to have access to + ldap.secret + +* Sat Jan 20 2007 - srarnold@suse.de +- Bug 178073 - AppArmor - postfix - smtp - directive smtp_generic_maps +- Bug 219580 - some programs require 'm' access to /etc/ld.so.cache +- Bug 219583 - rejecting w access for syslog-ng +- Bug 202095 - useradd / userdel profiles incomplete +- Bug 197186 - apparmor breaks openntpd +- Bug 221111 - ntpd needs access to /proc/net/if_inet6 +- Bug 220331 - syslog-ng cannot log news messages +- Remove empty lines with spaces, trailing spaces +- Remove Px rules on ld.so; remove ld.so family of profiles +- New disabled profiles for clamav, passwd +- New enabled profile for syslog-ng +- Disable netstat profile +- Postfix + TLS fixes + SMTP write to rewrite pipe + permissions=paranoid +- sshd new audit requirements +- ntpd + /var/tmp and /tmp fixes + Support W32Time authentication +- Support GSS-TSIG authentication in bind + * Sun Jun 18 2006 - srarnold@suse.de - Bug 182344 - AppArmor prevents postfix to comunicate with amavis - Bug 183800 - AppArmor denies link in Maildir @@ -26,17 +54,17 @@ * Wed May 03 2006 - srarnold@suse.de - Bug 167798 - misc profile modifications from darix -- mlmmj, lighttpd, oidentd profiles in extras/ -- new postfix helpers + - mlmmj, lighttpd, oidentd profiles in extras/ + - new postfix helpers (postfix profiles now in extras/) -- broken postfix smtpd alternation expansion -- factor abstractions/nameservice -- new python, ruby, php5 abstractions -- new web-data and svn-repositories data-centric abstractions -- svn:keywords to do proper attribution + - broken postfix smtpd alternation expansion + - factor abstractions/nameservice + - new python, ruby, php5 abstractions + - new web-data and svn-repositories data-centric abstractions + - svn:keywords to do proper attribution - Bug 170154 - squid dies when setting auth_param basic program /usr/sbin/pam_auth -- also move squid to /etc/apparmor/profilex/extras + - also move squid to /etc/apparmor/profilex/extras - Add some text to the extras/README describing how to turn postfix profiles on again, as an example ------------------------------- modified (subpackage of) apparmor-utils: ------------------------------- --- SLES10-GA-CHANGELOGS/apparmor-utils 2007-03-08 16:45:49.856351000 +0100 +++ SLES10-SP1-CHANGELOGS/apparmor-utils 2007-03-08 17:03:35.732701000 +0100 @@ -1,3 +1,18 @@ +* Fri Feb 16 2007 - ddrewelow@suse.de +- Translation fixes (#179656 & others) +- Updated localization files + +* Mon Jan 29 2007 - dreynolds@suse.de +- Repackaged tarball - as the previous version included an archive + file not used for the build that still had proprietary headers. + Removed the old archive file in the tarball. Re: bug 129516 + +* Fri Jan 19 2007 - dreynolds@suse.de +- Fixed bug 129516 - proprietary license headers removed + +* Fri Jan 12 2007 - dreynolds@suse.de +- Added feature (#300906) to add syntax checking to wizards + * Thu Jun 01 2006 - jmichael@suse.de - add support for the new m mode (#175388) - add support for the new Px/Ux modes (#172061) ------------------------------- modified (subpackage of) apparmor-parser: ------------------------------- --- SLES10-GA-CHANGELOGS/apparmor-parser 2007-03-08 16:44:40.009825000 +0100 +++ SLES10-SP1-CHANGELOGS/apparmor-parser 2007-03-08 17:02:43.873085000 +0100 @@ -1,4 +1,42 @@ -* Wed May 31 2006 - sbeattie@suse.de +* Fri Feb 16 2007 - ddrewelow@suse.de +- Translation updates + +* Fri Feb 02 2007 - srarnold@suse.de +- Bug 240986 - apparmor generates bad policy for rules containing \\ + +* Wed Jan 31 2007 - srarnold@suse.de +- [sles 10 sp1 checkin; #218961 below also removed libcap build + dependency, as we now use the kernel's headers for our capability + numbers] + +* Mon Nov 20 2006 - dreynolds@suse.de +- More translation updates + +* Mon Nov 20 2006 - dreynolds@suse.de +- Updates from the translation team + +* Tue Nov 14 2006 - sbeattie@suse.de +- fix rc.aaeventd to depend on apparmor, not boot.apparmor (#214293) + +* Thu Nov 09 2006 - sbeattie@suse.de +- Add audit_write and audit_control capabilities (#218961) + (jjohansen@suse.de) +- pull translation updates from lcn (ddrewelow@suse.de) +- Use kernel's capability defines rather than libcap +- /lib/lsb/init-functions provides killproc(), use it instead. + +* Sat Oct 28 2006 - olh@suse.de +- boot.apparmor should start after boot.localfs (#215156) + +* Sun Oct 15 2006 - sbeattie@suse.de +- add support for #include'ing directories +- remove /subdomain (#160020) +- updated translation files (from SLE10) + +* Fri Jul 28 2006 - olh@suse.de +- make boot.localfs optional in boot.apparmor (#181972) + +* Mon Jun 05 2006 - sbeattie@suse.de - Add support for 'm' flag (mmap w/PROT_EXEC permission) (#175388) - Add Px and Ux flags to indicate to ld.so that sensitive environemnt variables should be filtered on exec() (#172061) The m, Px, and Ux @@ -6,6 +44,12 @@ corresponding support will just ignore them. - Fix segv if profiles directory does not exist (#160330) - Fix aaeventd initscript description (#172961) +- Add check to verify module supports pcre +- Add regression tests and run on every build +- Other minor fixups + +* Fri May 26 2006 - schwab@suse.de +- Don't strip binaries. * Mon Apr 03 2006 - dreynolds@suse.de - Fix upgrade problems from sles9/sl10.0 (#156990) ------------------------------- recommended apparmor-parser i586 cb0464f0be0637af59497353286111550096c021 apparmor-profiles noarch 253d3bf1f4ef01e54db46f1d82c2d3ad3a0af3a4 apparmor-utils noarch 291a5f9b1d09c5d45ddc8c75a503b7cc2afa0dee libapparmor i586 475ef3b5c1d0befb8374de829d9a3470caa3f6e8 yast2-apparmor noarch 039694d08f56c322aa59a9e04c4f3974acd71389