2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-05 00:35:13 +00:00

Update Release_Notes_2.13.3

John Johansen
2019-06-15 02:21:51 +00:00
parent bb5c541d2c
commit a7ab0cd89c

@@ -58,8 +58,12 @@ Utils
----- -----
- genprof/logprof - genprof/logprof
- Ensure there is always a fallback falue for the logfile location - drop failing corner-case check in logparser.py ([bso1120472][bso1120472], [MR297][MR297])
- fix handling of log stream when the suggestion of creating a new hat is rejected - drop unused `get_profile_filename()` from logparser.py ([MR297][MR297])
- fix error `KeyError: 'logfiles'` when no logprof.conf exists ([MR365][MR365])
- don't drop later events when user selects to deny a hat ([MR378][MR378])
- update network keyword list and add corresponding tests ([MR350][MR350])
Policy Policy
------ ------
@@ -72,14 +76,12 @@ Policy
- add abstractions/ssl_certs to lmtp - add abstractions/ssl_certs to lmtp
- allow master to use SIGTERM on children that are slow to die - allow master to use SIGTERM on children that are slow to die
- align {pop3,managesieve}-login to imap-login - align {pop3,managesieve}-login to imap-login
- identd - identd: allow network netlink dgram ([MR353][MR353])
- allow network netlink dgram - syslog-ng: add abstractions/python for python-parser
- syslog-ng
- add abstractions/python for python-parser
- lsb_release profile: new abstraction - lsb_release profile: new abstraction
- dnsmasq: - dnsmasq:
- allow peer=libvirtd to support named profile - allow peer=libvirtd to support named profile
- Work around breakage caused by {bin,sbin} alternation - Work around breakage caused by {bin,sbin} alternation ([bso1127073][bso1127073], [MR346][MR346])
- Revert /usr/{bin,sbin}/ alternation in dnsmasq profile name - Revert /usr/{bin,sbin}/ alternation in dnsmasq profile name
- msqld: - msqld:
- add mmap permission for mysqld (4.8 semantic change) - add mmap permission for mysqld (4.8 semantic change)
@@ -100,9 +102,9 @@ Policy
- qt5: allow reading user configuration - qt5: allow reading user configuration
- qt5-settings-write: fix anonymous shared memory access - qt5-settings-write: fix anonymous shared memory access
- qt5-compose-cache-write: fix anonymous shared memory access - qt5-compose-cache-write: fix anonymous shared memory access
- nameservice: allow access to /run/netconfig/resolv.conf - nameservice: allow access to /run/netconfig/resolv.conf ([bso1097370][bso1097370])
- mesa: allow reading drirc.d - mesa: allow reading drirc.d
- vulcan: allow reading /etc/vulkan/icd.d/ - vulcan: allow reading /etc/vulkan/icd.d/ ([MR329][MR329])
- nvidia: allow reading nvidia application profiles - nvidia: allow reading nvidia application profiles
- postfix-common: make compatible with updated postfix profiles naming - postfix-common: make compatible with updated postfix profiles naming
- python: allow reading /usr/local/lib/python3 - python: allow reading /usr/local/lib/python3
@@ -110,15 +112,15 @@ Policy
- ubuntu-browsers.d/multimedia: allow creating/writing config dirs - ubuntu-browsers.d/multimedia: allow creating/writing config dirs
- audio: - audio:
- fix alsa settings access - fix alsa settings access
- grant read access to the system-wide asound.conf - grant read access to the system-wide asound.conf ([dbug920669][dbug920669], [MR320][MR320])
- grant read access to the libao configuration files - grant read access to the libao configuration files ([dbug920670][dbug920670], [MR320][MR320])
- fonts: - fonts:
- Allow to read conf-avail dir itself. - Allow to read conf-avail dir itself.
- Add various openSUSE-specific font config directories - Add various openSUSE-specific font config directories
- allow creating/writing config dirs - allow creating/writing config dirs
- kde: - kde:
- allow access to common KDE-specific settings - allow access to common KDE-specific settings ([MR327][MR327])
- allow access to global KDE settings - allow access to global KDE settings ([MR327][MR327])
- gnome: - gnome:
- allow reading gtk-3.0 cache files - allow reading gtk-3.0 cache files
- allow creating config dirs - allow creating config dirs
@@ -126,8 +128,8 @@ Policy
Tests Tests
----- -----
- fix mount test to use next available loop device - fix mount test to use next available loop device ([MR379][MR379])
- update tests to support distros with user-merge where /bin and /sbin are symlinks - update tests to support distros with user-merge where /bin and /sbin are symlinks ([MR331][MR331])
- fix regression test failures around new binary cache layout - fix regression test failures around new binary cache layout
- update tests for new network domain keywords - update tests for new network domain keywords
- update tests for base abstraction changes - update tests for base abstraction changes
@@ -136,8 +138,8 @@ Tests
Documentation Documentation
------------- -------------
- apparmor.d (7): - apparmor.d (7):
- update list of network domain keywords - update list of network domain keywords ([MR349][MR349])
- drop unsupported 'to' option for link rules from manpage - drop unsupported 'to' option for link rules from manpage ([MR368][MR368])
Note Note
==== ====