apparmor 2.8.0-0ubuntu25 source package in Ubuntu

Changelog

apparmor (2.8.0-0ubuntu25) saucy; urgency=low

  [ Tyler Hicks ]
  * Add support for mediation of D-Bus messages and services. AppArmor D-Bus
    rules are described in the apparmor.d(5) man page. dbus-daemon will use
    libapparmor to perform queries against the AppArmor policies to determine
    if a connection should be able to send messages to another connection, if
    a connection should be able to receive messages from another connection,
    and if a connection should be able to bind to a well-known name.
    - 0042-Fix-mount-rule-preprocessor-output.patch,
      0043-libapparmor-Safeguard-aa_getpeercon-buffer-reallocat.patch,
      0044-libapparmor-fix-return-value-of-aa_getpeercon_raw.patch,
      0045-libapparmor-Move-mode-parsing-into-separate-function.patch,
      0046-libapparmor-Parse-mode-from-confinement-string-in-ge.patch,
      0047-libapparmor-Make-aa_getpeercon_raw-similar-to-aa_get.patch,
      0048-libapparmor-Update-aa_getcon-man-page-to-reflect-get.patch:
      Backport parser and libapparmor pre-requisites for D-Bus mediation
    - 0049-parser-Update-man-page-for-DBus-rules.patch: Update apparmor.d man
      page
    - 0050-parser-Add-support-for-DBus-rules.patch,
      0051-parser-Regression-tests-for-DBus-rules.patch,
      0052-parser-Binary-profile-equality-tests-for-DBus-rules.patch: Add
      apparmor_parser support for D-Bus mediation rules
    - 0053-libapparmor-Export-a-label-based-query-interface.patch,
      debian/libapparmor1.symbols: Provide the libapparmor interface necessary
      for trusted helpers to make security decisions based upon AppArmor
      policy
    - 0054-libaalogparse-Parse-dbus-daemon-audit-messages.patch,
      0055-libaalogparse-Regression-tests-for-dbus-daemon-audit.patch: Allow
      applications to parse denials, generated by dbus-daemon, using
      libaalogparse and add a set of regression tests
    - 0056-tests-Add-an-optional-final-check-to-checktestfg.patch,
      0057-tests-Add-required-features-check.patch,
      0058-tests-Add-regression-tests-for-dbus.patch: Add regression tests
      which start their own dbus-daemon, load profiles containing D-Bus rules,
      and confine simple D-Bus service and client applications
    - 0059-dbus-rules-for-dbus-abstractions.patch: Add bus-specific, but
      otherwise permissive, D-Bus rules to the dbus and dbus-session
      abstractions. Confined applications that use D-Bus should already be
      including these abstractions in their profiles so this should be a
      seamless transition for those profiles.
  * 0060-utils-make_clean_fixup.patch: Clean up the Python cache in the
    AppArmor tests directory
  * 0061-profiles-dnsmasq-needs-dbus-abstraction.patch: Dnsmasq uses the
    system D-Bus when it is started with --enable-dbus, so its AppArmor
    profile needs to include the system bus abstraction
  * 0062-fix-clone-test-on-arm.patch: Fix compiler error when building
    regression tests on ARM
  * 0063-utils-ignore-unsupported-rules.patch: Utilities that use the
    Immunix::AppArmor perl module, such as aa-logprof and aa-genprof, error
    out when they encounter rules unsupported by the perl module. This patch
    ignores unsupported rules.

  [ Jamie Strandboge ]
  * debian/control: don't have easyprof Depends on apparmor-easyprof-ubuntu
 -- Tyler Hicks <email address hidden>   Mon, 26 Aug 2013 15:32:12 -0700