diff --git a/Release_Notes_4.0-beta3.md b/Release_Notes_4.0-beta3.md index e0d9a83..c6f9523 100644 --- a/Release_Notes_4.0-beta3.md +++ b/Release_Notes_4.0-beta3.md @@ -28,15 +28,99 @@ This Release contains only Bug Fixes to AppArmor 4.0 beta2 # Features ## libraries +- fix syntax in configure ([MR:1184](https://gitlab.com/apparmor/apparmor/-/merge_requests/1184)) ## policy compiler (aka apparmor_parser) +- Fix network test regression on kernels that support af_unix ([MR:1183](https://gitlab.com/apparmor/apparmor/-/merge_requests/1183),[AABUG:374](https://gitlab.com/apparmor/apparmor/-/issues/374)) ## Utils +- mount rules Fix _is_covered_localvars ([MR:1182](https://gitlab.com/apparmor/apparmor/-/merge_requests/1182)) +- MountRule to fix make check failure ([MR:1176](https://gitlab.com/apparmor/apparmor/-/merge_requests/1176),[AABUG:370](https://gitlab.com/apparmor/apparmor/-/issues/370)) +- aa-notify + - Fix test-aa-notify on openSUSE Tumbleweed (new 'last') ([MR:1180](https://gitlab.com/apparmor/apparmor/-/merge_requests/1180)) +## Policy + +#### abstractions +- authentication + - Allow pam_unix to execute unix_chkpwd ([MR:1181](https://gitlab.com/apparmor/apparmor/-/merge_requests/1181),[BOO:1219139](https://bugzilla.opensuse.org/show_bug.cgi?id=1219139)) +- crypto ([MR:1178](https://gitlab.com/apparmor/apparmor/-/merge_requests/1178),[LP:2056747](https://bugs.launchpad.net/ubuntu/+source/chrony/+bug/2056747),[LP:2056739](https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/2056739)) + - allow read of openssl config + - allow read of gnutls config +- kde-open5 + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) + +#### profiles +- new unix_chkpwd - required by authentication ([MR:1181](https://gitlab.com/apparmor/apparmor/-/merge_requests/1181),[BOO:1219139](https://bugzilla.opensuse.org/show_bug.cgi?id=1219139)) +- php-fpm + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- samba-bgqd + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- sbin.syslog-ng + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.lib.dovecot.auth + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.lib.dovecot.dict + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.lib.dovecot.imap-login + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.lib.dovecot.lmtp + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.lib.dovecot.managesieve-login + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.lib.dovecot.pop3-login + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.sbin.ntpd + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.sbin.smbd + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- postfix-proxymap + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- postfix-smtp + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- postfix-smtpd + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- postfix-tlsmgr + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- sbin.dhclient + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.bin.freshclam + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.sbin.clamd + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.sbin.haproxy + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.sbin.httpd2-prefork + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.sbin.imapd + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.sbin.ipop2d + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) +- usr.sbin.ipop3d + - Clean superfluous openssl abstraction includes ([MR:1179](https://gitlab.com/apparmor/apparmor/-/merge_requests/1179)) + +#### unconfined profiles +- update + - firefox ([MR:1185](https://gitlab.com/apparmor/apparmor/-/merge_requests/1185),[LP:2046844](https://bugs.launchpad.net/bugs/2046844)) +- new + - goldendict ([MR:1186](https://gitlab.com/apparmor/apparmor/-/merge_requests/1186),[LP2046844:](https://bugs.launchpad.net/ubuntu/+source/pageedit/+bug/2046844)) + - kchmviewer ([MR:1186](https://gitlab.com/apparmor/apparmor/-/merge_requests/1186),[LP2046844:](https://bugs.launchpad.net/ubuntu/+source/pageedit/+bug/2046844)) + - notepadqq ([MR:1186](https://gitlab.com/apparmor/apparmor/-/merge_requests/1186),[LP2046844:](https://bugs.launchpad.net/ubuntu/+source/pageedit/+bug/2046844)) + - pageedit ([MR:1186](https://gitlab.com/apparmor/apparmor/-/merge_requests/1186),[LP2046844:](https://bugs.launchpad.net/ubuntu/+source/pageedit/+bug/2046844)) + - privacybrowser ([MR:1186](https://gitlab.com/apparmor/apparmor/-/merge_requests/1186),[LP2046844:](https://bugs.launchpad.net/ubuntu/+source/pageedit/+bug/2046844)) + - qmapshack ([MR:1186](https://gitlab.com/apparmor/apparmor/-/merge_requests/1186),[LP2046844:](https://bugs.launchpad.net/ubuntu/+source/pageedit/+bug/2046844)) + - qutebrowser ([MR:1186](https://gitlab.com/apparmor/apparmor/-/merge_requests/1186),[LP2046844:](https://bugs.launchpad.net/ubuntu/+source/pageedit/+bug/2046844)) + - rssguard ([MR:1186](https://gitlab.com/apparmor/apparmor/-/merge_requests/1186),[LP2046844:](https://bugs.launchpad.net/ubuntu/+source/pageedit/+bug/2046844)) + - scide ([MR:1186](https://gitlab.com/apparmor/apparmor/-/merge_requests/1186),[LP2046844:](https://bugs.launchpad.net/ubuntu/+source/pageedit/+bug/2046844)) + - geary ([MR:1185](https://gitlab.com/apparmor/apparmor/-/merge_requests/1185),[LP:2046844](https://bugs.launchpad.net/bugs/2046844)) + - loupe ([MR:1185](https://gitlab.com/apparmor/apparmor/-/merge_requests/1185),[LP:2046844](https://bugs.launchpad.net/bugs/2046844)) + + +## Infrastructure +- don't ship /var in downstream packages ([MR:1167](https://gitlab.com/apparmor/apparmor/-/merge_requests/1167)) -## Documentation