UbuntuUpdates.org

Package "apparmor-docs"

Name: apparmor-docs

Description:

documentation for AppArmor

Latest version: 2.10.95-0ubuntu2.6~14.04.4
Release: trusty (14.04)
Level: updates
Repository: main
Head package: apparmor
Homepage: http://apparmor.net/

Links


Download "apparmor-docs"


Other versions of "apparmor-docs" in Trusty

Repository Area Version
base main 2.8.95~2430-0ubuntu5
security main 2.10.95-0ubuntu2.6~14.04.4

Changelog

Version: 2.8.95~2430-0ubuntu5.2 2015-06-15 18:06:45 UTC

  apparmor (2.8.95~2430-0ubuntu5.2) trusty-proposed; urgency=medium

  * debian/patches/php5-Zend_semaphore-lp1401084.patch: allow php5
    abstraction access to Zend opcache files (LP: #1401084)
  * debian/patches/dnsmasq-lxc_networking-lp1403468.patch: update
    profile for lxc support (LP: #1403468)
  * debian/patches/profiles-texlive_font_generation-lp1010909.patch:
    allow generation of texlive fonts by sanitized-helpers
    (LP: #1010909)
  * debian/apport/source_apparmor.py: fix the apparmor apport hook
    so it does not raise an exception if a non-unicode character is
    found in /var/log/kern.log or in /var/log/syslog. This should
    work under python3 or python2.7 (LP: #1304447)
  * debian/patches/profiles-dovecot-updates-lp1296667.patch: update
    dovecot profiles to address several missing permissions.
    (LP: #1296667)
  * debian/patches/profiles-adjust_X_for_lightdm-lp1339727.patch:
    adjust X abstraction for LightDM xauthority location (LP: #1339727)
  * debian/patches/libapparmor-fix_memory_leaks-lp1340927.patch; fix
    memory leaks in log parsing component of libapparmor (LP: #1340927)
  * debian/patches/libapparmor-another_audit_format-lp1399027.patch:
    add support for another log format style (LP: #1399027)
  * debian/patches/tests-workaround_for_unix_socket_change-lp1425398.patch:
    work around apparmor kernel behavioral change in regression tests
    (LP: #1425398)
  * debian/control: add breaks on python3-apparmor against older
    apparmor-utils that used to be where python bits lived
    (LP: #1373259)
  * debian/patches/utils-update_to_2.9.2.patch: update the python
    utilities to the upstream 2.9.2 (LP: #1449769, incorporating a
    large number of fixes and improvements, including:
    - fix aa-genprof traceback with apparmor 2.8.95 (LP: #1294797)
    - fix aa-genprof crashing when selecting scan on Ubuntu 14.04 server
      (LP: #1319829)
    - make aa-logprof read profile instead of program binary
      (LP: #1317176, LP: #1324154)
    - aa-complain: don't traceback when marking multiple profiles
      (LP: #1378095)
    - make python tools able to parse mounts with UTF-8 non-ascii
      characters (LP: #1310598)

 -- Steve Beattie <email address hidden> Thu, 30 Apr 2015 12:18:08 -0700

Source diff to previous version
1401084 Missing rules in php5 abstraction
1403468 dnsmasq profile incomplete for lxc usage
1010909 permission denied: /usr/bin/{mktexpk,mktextfm}
1304447 apport-bug crashing on server install
1296667 dovecot/apparmor: profile not found
1339727 lightdm xauthority path is wrong
1340927 libapparmor aalogparse memory leak
1399027 logparser doesn't understand /var/log/messages format
1425398 Apparmor uses rsyslogd profile for different processes - utopic HWE
1373259 package python3-apparmor 2.8.95~2430-0ubuntu5 failed to install/upgrade: pr\u00f3ba nadpisania \
1449769 Update apparmor python utils to 2.9.2 version in trusty
1294797 aa-genprof traceback with apparmor 2.8.95
1319829 aa-genprof will crash when select scan on Ubuntu 14.04 server
1317176 aa-logprof attempts to read program binary instead of profile
1324154 aa-logprof is trying to process a binary instead of the profile attached to the binary
1378095 aa-complain traceback when marking multiple profiles
1310598 AppArmor python tools fail to parse mounts with UTF-8 non-ascii characters

Version: 2.8.95~2430-0ubuntu5.1 2014-11-20 22:06:37 UTC

  apparmor (2.8.95~2430-0ubuntu5.1) trusty-security; urgency=medium

  * SECURITY UPDATE: An AppArmor profile compilation bug may result in
    applications being confined in a way that is inconsistent with the profile
    author's intent. The compilation bug is specific to certain combinations
    of AppArmor rule types and conditionals of those rule types.
    (LP: #1390592)
    - debian/patches/fix-esc-seq-interp.patch: Fix the profile compilation bug
      by limiting the number of bytes that are consumed when interpreting
      hexadecimal, octal, and decimal escape sequences
    - debian/patches/tests-allow-arbitrary-profile-names.patch,
      debian/patches/tests-add-ptrace-tests-for-lp1390592.patch: Add
      regression tests for the profile compilation bug
    - CVE-2014-1424
 -- Tyler Hicks <email address hidden> Fri, 14 Nov 2014 13:46:22 -0600

1390592 'ptrace peer=@{profile_name}' does not work on 14.04 (at least) with docker
CVE-2014-1424 RESERVED



About   -   Send Feedback to @ubuntu_updates