mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-31 06:16:03 +00:00
Update Release_Notes_3.0.5
@@ -40,18 +40,62 @@ These release notes cover all changes between 3.0.4 (939530b2b89ee26bef52ccfe3d2
|
||||
|
||||
|
||||
## Init
|
||||
- Make the systemd unit a no-op in containers with no internal policy ([MR:840](https://gitlab.com/apparmor/apparmor/-/merge_requests/840), [LP:978297](https://bugs.launchpad.net/bugs/978297))
|
||||
- Import profile-load script from Debian ([MR:841](https://gitlab.com/apparmor/apparmor/-/merge_requests/841), [LP:1058356](https://bugs.launchpad.net/bugs/1058356))
|
||||
|
||||
## Library
|
||||
- fix handling of failed symlink traversal ([MR:850](https://gitlab.com/apparmor/apparmor/-/merge_requests/850), [AABUG:215](https://gitlab.com/apparmor/apparmor/-/issues/215))
|
||||
|
||||
## Policy Compiler (a.k.a apparmor_parser)
|
||||
- fix min length calculation for inverse character sets ([MR:872](https://gitlab.com/apparmor/apparmor/-/merge_requests/872))
|
||||
- fix missing <cstdint> include dependency ([MR:882](https://gitlab.com/apparmor/apparmor/-/merge_requests/882))
|
||||
- fix building with link time optimization (lto) ([MR:851](https://gitlab.com/apparmor/apparmor/-/merge_requests/851), [AABUG:214](https://gitlab.com/apparmor/apparmor/-/issues/214))
|
||||
|
||||
## Utils
|
||||
- aa-remove-unknown: abort on parser failure ([MR:859](https://gitlab.com/apparmor/apparmor/-/merge_requests/859))
|
||||
- aa-notify
|
||||
- Add .desktop file for aa-notify ([MR:839](https://gitlab.com/apparmor/apparmor/-/merge_requests/839))
|
||||
- Drop superfluous shebang from python module ([MR:846](https://gitlab.com/apparmor/apparmor/-/merge_requests/846))
|
||||
|
||||
## Policy
|
||||
|
||||
#### abstractions
|
||||
- apache2-common so that other processes can trace the hats that include ([MR:852](https://gitlab.com/apparmor/apparmor/-/merge_requests/852), [debug1003153](https://bugs.debian.org/1003153))
|
||||
- gtk
|
||||
- add support for gtk4. ([MR:857](https://gitlab.com/apparmor/apparmor/-/merge_requests/857))
|
||||
- ibus
|
||||
- Allow access to socket directory used by recent ibus-daemon ([MR:837](https://gitlab.com/apparmor/apparmor/-/merge_requests/837))
|
||||
- mesa
|
||||
- fix device query access ([MR:879](https://gitlab.com/apparmor/apparmor/-/merge_requests/879))
|
||||
- nss-systemd
|
||||
- Allow access for systemd-machined names ([MR:861](https://gitlab.com/apparmor/apparmor/-/merge_requests/861), [LP:1964325](https://bugs.launchpad.net/bugs/1964325))
|
||||
- php
|
||||
- add missing config accesses ([MR:876](https://gitlab.com/apparmor/apparmor/-/merge_requests/876), [AABUG:229](https://gitlab.com/apparmor/apparmor/-/issues/229), [BOO:1186267](https://bugzilla.opensuse.org/show_bug.cgi?id=1186267))
|
||||
- samba
|
||||
- quiet noise setsockopt calls ([MR:867](https://gitlab.com/apparmor/apparmor/-/merge_requests/867))
|
||||
- snap_browsers
|
||||
- add permissions required due to updates on snaps ([MR:877](https://gitlab.com/apparmor/apparmor/-/merge_requests/877))
|
||||
- ssh_certs
|
||||
- extend pki/trust directories ([MR:864](https://gitlab.com/apparmor/apparmor/-/merge_requests/864))
|
||||
|
||||
#### profiles
|
||||
- dovecot
|
||||
- add missing stat access ([MR:881](https://gitlab.com/apparmor/apparmor/-/merge_requests/881), [BOO:1199535](https://bugzilla.opensuse.org/show_bug.cgi?id=1199535))
|
||||
- Allow dovecot to use all signals ([MR:865](https://gitlab.com/apparmor/apparmor/-/merge_requests/865))
|
||||
- samba
|
||||
- support paths used by Arch Linux ([MR:883](https://gitlab.com/apparmor/apparmor/-/merge_requests/883))
|
||||
- add missing mmaps for aarch64 ([MR:880](https://gitlab.com/apparmor/apparmor/-/merge_requests/880), [BOO:1198309](https://bugzilla.opensuse.org/show_bug.cgi?id=1198309))
|
||||
- add profiles to support samba-4.16 new dcerpc subsystem ([MR:871](https://gitlab.com/apparmor/apparmor/-/merge_requests/871))
|
||||
- Fix read access denied on /proc/*/fd ([MR:860](https://gitlab.com/apparmor/apparmor/-/merge_requests/860))
|
||||
- allow reading openssl.cnf ([MR:862](https://gitlab.com/apparmor/apparmor/-/merge_requests/862), [BOO:1195463](https://bugzilla.opensuse.org/show_bug.cgi?id=1195463))
|
||||
- allow reading under /usr/share/samba ([MR:853](https://gitlab.com/apparmor/apparmor/-/merge_requests/853))
|
||||
- include snippet generated at runtime on Debian and openSUSE ([MR:838](https://gitlab.com/apparmor/apparmor/-/merge_requests/838))
|
||||
- statd
|
||||
- add missing config and hosts_access ([MR:866](https://gitlab.com/apparmor/apparmor/-/merge_requests/866))
|
||||
|
||||
## Tests
|
||||
- parser - error out on unexpected success ([MR:868](https://gitlab.com/apparmor/apparmor/-/merge_requests/868))
|
||||
- make test-aa-notify test_help_contents () less strict ([MR:848](https://gitlab.com/apparmor/apparmor/-/merge_requests/848), [AABUG:220](https://gitlab.com/apparmor/apparmor/-/issues/220), [AABUG:220](https://gitlab.com/apparmor/apparmor/-/issues/220))
|
||||
|
||||
|
||||
# Additional Note
|
||||
|
Reference in New Issue
Block a user