2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 06:16:03 +00:00

Update Release_Notes_3.0.5

John Johansen
2022-06-22 10:57:47 +00:00
parent 2feb48ed2e
commit 6c62c71e43

@@ -40,18 +40,62 @@ These release notes cover all changes between 3.0.4 (939530b2b89ee26bef52ccfe3d2
## Init
- Make the systemd unit a no-op in containers with no internal policy ([MR:840](https://gitlab.com/apparmor/apparmor/-/merge_requests/840), [LP:978297](https://bugs.launchpad.net/bugs/978297))
- Import profile-load script from Debian ([MR:841](https://gitlab.com/apparmor/apparmor/-/merge_requests/841), [LP:1058356](https://bugs.launchpad.net/bugs/1058356))
## Library
- fix handling of failed symlink traversal ([MR:850](https://gitlab.com/apparmor/apparmor/-/merge_requests/850), [AABUG:215](https://gitlab.com/apparmor/apparmor/-/issues/215))
## Policy Compiler (a.k.a apparmor_parser)
- fix min length calculation for inverse character sets ([MR:872](https://gitlab.com/apparmor/apparmor/-/merge_requests/872))
- fix missing <cstdint> include dependency ([MR:882](https://gitlab.com/apparmor/apparmor/-/merge_requests/882))
- fix building with link time optimization (lto) ([MR:851](https://gitlab.com/apparmor/apparmor/-/merge_requests/851), [AABUG:214](https://gitlab.com/apparmor/apparmor/-/issues/214))
## Utils
- aa-remove-unknown: abort on parser failure ([MR:859](https://gitlab.com/apparmor/apparmor/-/merge_requests/859))
- aa-notify
- Add .desktop file for aa-notify ([MR:839](https://gitlab.com/apparmor/apparmor/-/merge_requests/839))
- Drop superfluous shebang from python module ([MR:846](https://gitlab.com/apparmor/apparmor/-/merge_requests/846))
## Policy
#### abstractions
- apache2-common so that other processes can trace the hats that include ([MR:852](https://gitlab.com/apparmor/apparmor/-/merge_requests/852), [debug1003153](https://bugs.debian.org/1003153))
- gtk
- add support for gtk4. ([MR:857](https://gitlab.com/apparmor/apparmor/-/merge_requests/857))
- ibus
- Allow access to socket directory used by recent ibus-daemon ([MR:837](https://gitlab.com/apparmor/apparmor/-/merge_requests/837))
- mesa
- fix device query access ([MR:879](https://gitlab.com/apparmor/apparmor/-/merge_requests/879))
- nss-systemd
- Allow access for systemd-machined names ([MR:861](https://gitlab.com/apparmor/apparmor/-/merge_requests/861), [LP:1964325](https://bugs.launchpad.net/bugs/1964325))
- php
- add missing config accesses ([MR:876](https://gitlab.com/apparmor/apparmor/-/merge_requests/876), [AABUG:229](https://gitlab.com/apparmor/apparmor/-/issues/229), [BOO:1186267](https://bugzilla.opensuse.org/show_bug.cgi?id=1186267))
- samba
- quiet noise setsockopt calls ([MR:867](https://gitlab.com/apparmor/apparmor/-/merge_requests/867))
- snap_browsers
- add permissions required due to updates on snaps ([MR:877](https://gitlab.com/apparmor/apparmor/-/merge_requests/877))
- ssh_certs
- extend pki/trust directories ([MR:864](https://gitlab.com/apparmor/apparmor/-/merge_requests/864))
#### profiles
- dovecot
- add missing stat access ([MR:881](https://gitlab.com/apparmor/apparmor/-/merge_requests/881), [BOO:1199535](https://bugzilla.opensuse.org/show_bug.cgi?id=1199535))
- Allow dovecot to use all signals ([MR:865](https://gitlab.com/apparmor/apparmor/-/merge_requests/865))
- samba
- support paths used by Arch Linux ([MR:883](https://gitlab.com/apparmor/apparmor/-/merge_requests/883))
- add missing mmaps for aarch64 ([MR:880](https://gitlab.com/apparmor/apparmor/-/merge_requests/880), [BOO:1198309](https://bugzilla.opensuse.org/show_bug.cgi?id=1198309))
- add profiles to support samba-4.16 new dcerpc subsystem ([MR:871](https://gitlab.com/apparmor/apparmor/-/merge_requests/871))
- Fix read access denied on /proc/*/fd ([MR:860](https://gitlab.com/apparmor/apparmor/-/merge_requests/860))
- allow reading openssl.cnf ([MR:862](https://gitlab.com/apparmor/apparmor/-/merge_requests/862), [BOO:1195463](https://bugzilla.opensuse.org/show_bug.cgi?id=1195463))
- allow reading under /usr/share/samba ([MR:853](https://gitlab.com/apparmor/apparmor/-/merge_requests/853))
- include snippet generated at runtime on Debian and openSUSE ([MR:838](https://gitlab.com/apparmor/apparmor/-/merge_requests/838))
- statd
- add missing config and hosts_access ([MR:866](https://gitlab.com/apparmor/apparmor/-/merge_requests/866))
## Tests
- parser - error out on unexpected success ([MR:868](https://gitlab.com/apparmor/apparmor/-/merge_requests/868))
- make test-aa-notify test_help_contents () less strict ([MR:848](https://gitlab.com/apparmor/apparmor/-/merge_requests/848), [AABUG:220](https://gitlab.com/apparmor/apparmor/-/issues/220), [AABUG:220](https://gitlab.com/apparmor/apparmor/-/issues/220))
# Additional Note