Prepare for AppArmor 3.0.6 release

- update version file Signed-off-by: John Johansen <john.johansen@canonical.com>
Merge abstraction/exo-open: Remove dbus deny rule
2025-09-01 06:45:38 +00:00 · 2022-08-01 01:22:42 -07:00 · 2022-07-26 23:23:49 -07:00 · 2022-07-25 17:36:05 -03:00 · 2022-07-25 20:09:30 +00:00
5 changed files with 7 additions and 11 deletions
--- a/common/Version
+++ b/common/Version
@@ -1 +1 @@
-3.0.5
+3.0.6
--- a/parser/Makefile
+++ b/parser/Makefile
@@ -60,7 +60,7 @@ WARNINGS = -Wall
 CXX_WARNINGS = ${WARNINGS} ${EXTRA_WARNINGS}
 CPP_WARNINGS =
 ifndef CFLAGS
-CFLAGS	= -g -O2 -pipe -flto-partition=none
+CFLAGS	= -g -O2 -pipe

 ifdef DEBUG
 CFLAGS += -pg -D DEBUG
@@ -70,6 +70,8 @@ CFLAGS = -g -pg -fprofile-arcs -ftest-coverage
 endif
 endif #CFLAGS

+CFLAGS	+= -flto-partition=none
+
 EXTRA_CXXFLAGS = ${CFLAGS} ${CPPFLAGS} ${CXX_WARNINGS} -std=gnu++0x
 EXTRA_CFLAGS = ${EXTRA_CXXFLAGS} ${CPP_WARNINGS}

--- a/parser/tst/dirtest.sh
+++ b/parser/tst/dirtest.sh
@@ -31,8 +31,9 @@ do_tst() {
 	shift 2
 	#global tmpdir

-	${APPARMOR_PARSER} "$@" > "$tmpdir/out" 2>/dev/null
+	${APPARMOR_PARSER} "$@" > "$tmpdir/out.unsorted" 2>/dev/null
 	rc=$?
+	LC_ALL=C sort "$tmpdir/out.unsorted" > "$tmpdir/out"
 	if [ $rc -ne 0 ] && [ "$expected" != "fail" ] ; then
 		echo "failed: expected \"$expected\" but parser returned error"
 		return 1
--- a/parser/tst/dirtest/dirtest.out
+++ b/parser/tst/dirtest/dirtest.out
@@ -1,3 +1,3 @@
-good_target
 a_profile
 b_profile
+good_target
--- a/profiles/apparmor.d/abstractions/exo-open
+++ b/profiles/apparmor.d/abstractions/exo-open
@@ -51,13 +51,6 @@

  /{,usr/}bin/which rix,

-  # Deny DBus
-
-  # for GTK error message dialog, not required exo-open to work.
-  deny dbus send
-    bus=session
-    path=/org/gtk/vfs/mounttracker,
-
  # System files

  /etc/xdg/{,xdg-*/}xfce4/helpers.rc r,
Author	SHA1	Message	Date
John Johansen	702c282325	Prepare for AppArmor 3.0.6 release - update version file Signed-off-by: John Johansen <john.johansen@canonical.com>	2022-08-01 01:22:42 -07:00
John Johansen	822db765c6	Merge abstraction/exo-open: Remove dbus deny rule Abstractions should not generally include deny rules as this can unduly constrain profiles which include them due to the precedent matching rules between deny vs allow rules. Also as per the comment, this is not required for exo-open to work, so simply omit it from the abstraction for now. Finally, in Ubuntu, the evince profile includes the exo-open abstraction and this deny rule causes evince to fail to initialise correctly as it then assumes it cannot use gvfs. Signed-off-by: Alex Murray <alex.murray@canonical.com> MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/884 Approved-by: John Johansen <john@jjmx.net> Merged-by: John Johansen <john@jjmx.net> (cherry picked from commit `d7e3f33aa8`) Signed-off-by: John Johansen <john.johansen@canonical.com>	2022-07-26 23:23:49 -07:00
Georgia Garcia	e34149546d	parser: fix LTO build The previous fix for LTO builds in `b6d3daa7` did not take into consideration that LTO support could be added through CFLAGS,in which case the fix would not be applied. This patch applied the fix -flto-partition=none even if CFLAGS is already defined. Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com> Closes #214 MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/901 Acked-by: John Johansen <john@jjmx.net> Merged-by: Georgia Garcia <georgia.garcia@canonical.com> (cherry picked from commit `0afc2cbb84`)	2022-07-25 17:36:05 -03:00
Christian Boltz	8668d4a456	Merge dirtest.sh: don't rely on apparmor_parser -N's output sort order to be deterministic I've seen this test fail because "apparmor_parser -N" returned the expected lines, but in a different order than what's expected (dirtest.out). To fix this, sort both the expected and actual output. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/900 Approved-by: Jon Tourville <jon.tourville@canonical.com> Approved-by: Christian Boltz <apparmor@cboltz.de> Merged-by: Christian Boltz <apparmor@cboltz.de> (cherry picked from commit `1f3a817c11`) `c0815d0e` dirtest.sh: don't rely on apparmor_parser -N's output sort order to be deterministic	2022-07-25 20:09:30 +00:00
@@ -1 +1 @@
 .0.5
 .0.6