-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 07 Dec 2017 07:32:02 +0000 Source: apparmor Binary: apparmor apparmor-utils apparmor-profiles libapparmor-dev libapparmor1 libapparmor-perl libapache2-mod-apparmor libpam-apparmor apparmor-notify python-libapparmor python3-libapparmor python-apparmor python3-apparmor dh-apparmor apparmor-easyprof Architecture: source Version: 2.11.1-4 Distribution: unstable Urgency: medium Maintainer: Debian AppArmor Team <pkg-apparmor-team@lists.alioth.debian.org> Changed-By: intrigeri <intrigeri@debian.org> Closes: 845232 877581 880078 880859 883682 883703 Description: apparmor-easyprof - AppArmor easyprof profiling tool apparmor-notify - AppArmor notification system apparmor-profiles - profiles for AppArmor Security policies apparmor - user-space parser utility for AppArmor apparmor-utils - utilities for controlling AppArmor dh-apparmor - AppArmor debhelper routines libapache2-mod-apparmor - changehat AppArmor library as an Apache module libapparmor1 - changehat AppArmor library libapparmor-dev - AppArmor development libraries and header files libapparmor-perl - AppArmor library Perl bindings libpam-apparmor - changehat AppArmor library as a PAM module python3-apparmor - AppArmor Python3 utility library python3-libapparmor - AppArmor library Python3 bindings python-apparmor - AppArmor Python utility library python-libapparmor - AppArmor library Python bindings Changes: apparmor (2.11.1-4) unstable; urgency=medium . * Bump pinned feature set to linux-image-4.14.0-1's, version 4.14.2-1 - Pinning a feature set without "mount", as we did before this change, breaks mount operations due to a bug in the kernel (Closes: #883703). Thanks to Fabian Grünbichler and Felix Geyer for reporting this. - AppArmor maintainers in Debian have been testing 4.14 without pinning for a while and all the known issues were fixed; it's time to enable 4.14's features so we can learn what parts of our policy still need updates (Closes: #880078, #877581). * Move features file to /usr/share/apparmor-features (Closes: #883682). Thanks to Fabian Grünbichler <f.gruenbichler@proxmox.com> for the patch. * Document in apparmor/README.Debian where online documentation wrt. AppArmor on Debian lives (Closes: #845232). Thanks to Wouter Verhelst and Jean-Michel Vourgère for the suggestion. * Improve usability of apparmor-notify: - notify.conf: unset use_group. aa-notify checks that it can read the selected log file — and aborts if it can't — before it checks group membership vs. use_group, so in practice setting use_group is only useful for users who are allowed to read logs but don't want to see notifications. This seems to be a corner case, easily addressed per-user (~/.apparmor/notify.conf) or system-wide (by deinstalling apparmor-notify). So let's instead optimize for a more common use case, i.e. users who can read logs and want to see the notifications. This change does not impact the most common use case, i.e. desktop users who are not allowed to read logs (Closes: #880859). - Document in apparmor-notify/README.Debian that one must be in the "adm" group to use aa-notify. Thanks to Lisandro Damián Nicanor Pérez Meyer and Salvatore Bonaccorso whose combined bug reports lead to this solution. * /lib/apparmor/functions: don't delete /etc/apparmor.d/cache/CACHEDIR.TAG ourselves (necessary, but not sufficient, to fix #883584). * Declare compliance with Standards-Version 4.1.2. Checksums-Sha1: e7d5c32e053fbb310a873c6320e6ebde5d5cf8bb 3405 apparmor_2.11.1-4.dsc f0afff370e122ed16d6c18d575ec5154aeba5e60 86264 apparmor_2.11.1-4.debian.tar.xz Checksums-Sha256: 04dc5447fd89af241309418b21869692f11be178d655290fc64f59d1291ba0e0 3405 apparmor_2.11.1-4.dsc 36b4623f0f1cf4b3d242b17a1b06837d58692af002d38c56141575548d9f1888 86264 apparmor_2.11.1-4.debian.tar.xz Files: e7082f1ccb8005a9ef6a9a9658520d20 3405 admin optional apparmor_2.11.1-4.dsc c960d046dbfcc1a298e5670c43bfe903 86264 admin optional apparmor_2.11.1-4.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcMAxqZeuB0p8dimNy2kI2AAOzf4FAlopdtcACgkQy2kI2AAO zf4eNw//U0wDx6XNTv5EHKOFBKNOpApDQdB1L5ykAwUu4DssiqPD6iKEO/xRkU78 mv5sPjkNvCLRSydMylVSl7AyHQbyrpGO0J561o7cpD/zf7oWmZdGPs/Hj8p60U4i yS7FE6Tsh79xDurKN9ANP3TURG9Dk+zYVg76347mnE7Lo3/Ag/8jjcQBLQXSVrmf bcIFe3vr1kKYK4xUPWrqkXe5vcbcOdxb8KNm+1kmBLyVAVLk7GsgITd83qNgk7nZ JYz197g/oQovVPdFlunoPJCi0obms2EVNZGvqgm+pi3EQRfIpbSFUn2c2j5EP5ku R+4/dXomg6BcDaJYX7x148mew5b96zqLg+nOUn2maKYsvZyttI0xFTdGMNp5O2bf DGJFoV/4+lklSKrsCcrc1LFzDEJMTRhpuvzVjUMOYFs0MI82yXpa12DZC/coJN/1 zU3hLbuL7AWBWNaxUD0ygPlv8xKFVtHh/Xztn7oSPh1kJqYJ+BS7B47OVviv8aJE 8fH9fFbFREI65SIdV/t2Neaw2zaHpSNDY4boEv/bsTNfUGyZd7gveW9QgWH55Qqf qyhgXNDiAZGgqYcWf8Mrd1/chLaTDwHvTF3aaTc48aiw1WllVy3dP4PYJRCIlSYq NmIdE3xVNAWFX7nyynmsvqtU288x+ynZkwW2go+FiFkavnwoeMo= =9zZO -----END PGP SIGNATURE-----
