mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-09-05 00:35:13 +00:00
Update Release_Notes_2.13.3
@@ -58,8 +58,12 @@ Utils
|
|||||||
-----
|
-----
|
||||||
|
|
||||||
- genprof/logprof
|
- genprof/logprof
|
||||||
- Ensure there is always a fallback falue for the logfile location
|
- drop failing corner-case check in logparser.py ([bso1120472][bso1120472], [MR297][MR297])
|
||||||
- fix handling of log stream when the suggestion of creating a new hat is rejected
|
- drop unused `get_profile_filename()` from logparser.py ([MR297][MR297])
|
||||||
|
- fix error `KeyError: 'logfiles'` when no logprof.conf exists ([MR365][MR365])
|
||||||
|
- don't drop later events when user selects to deny a hat ([MR378][MR378])
|
||||||
|
- update network keyword list and add corresponding tests ([MR350][MR350])
|
||||||
|
|
||||||
|
|
||||||
Policy
|
Policy
|
||||||
------
|
------
|
||||||
@@ -72,14 +76,12 @@ Policy
|
|||||||
- add abstractions/ssl_certs to lmtp
|
- add abstractions/ssl_certs to lmtp
|
||||||
- allow master to use SIGTERM on children that are slow to die
|
- allow master to use SIGTERM on children that are slow to die
|
||||||
- align {pop3,managesieve}-login to imap-login
|
- align {pop3,managesieve}-login to imap-login
|
||||||
- identd
|
- identd: allow network netlink dgram ([MR353][MR353])
|
||||||
- allow network netlink dgram
|
- syslog-ng: add abstractions/python for python-parser
|
||||||
- syslog-ng
|
|
||||||
- add abstractions/python for python-parser
|
|
||||||
- lsb_release profile: new abstraction
|
- lsb_release profile: new abstraction
|
||||||
- dnsmasq:
|
- dnsmasq:
|
||||||
- allow peer=libvirtd to support named profile
|
- allow peer=libvirtd to support named profile
|
||||||
- Work around breakage caused by {bin,sbin} alternation
|
- Work around breakage caused by {bin,sbin} alternation ([bso1127073][bso1127073], [MR346][MR346])
|
||||||
- Revert /usr/{bin,sbin}/ alternation in dnsmasq profile name
|
- Revert /usr/{bin,sbin}/ alternation in dnsmasq profile name
|
||||||
- msqld:
|
- msqld:
|
||||||
- add mmap permission for mysqld (4.8 semantic change)
|
- add mmap permission for mysqld (4.8 semantic change)
|
||||||
@@ -100,9 +102,9 @@ Policy
|
|||||||
- qt5: allow reading user configuration
|
- qt5: allow reading user configuration
|
||||||
- qt5-settings-write: fix anonymous shared memory access
|
- qt5-settings-write: fix anonymous shared memory access
|
||||||
- qt5-compose-cache-write: fix anonymous shared memory access
|
- qt5-compose-cache-write: fix anonymous shared memory access
|
||||||
- nameservice: allow access to /run/netconfig/resolv.conf
|
- nameservice: allow access to /run/netconfig/resolv.conf ([bso1097370][bso1097370])
|
||||||
- mesa: allow reading drirc.d
|
- mesa: allow reading drirc.d
|
||||||
- vulcan: allow reading /etc/vulkan/icd.d/
|
- vulcan: allow reading /etc/vulkan/icd.d/ ([MR329][MR329])
|
||||||
- nvidia: allow reading nvidia application profiles
|
- nvidia: allow reading nvidia application profiles
|
||||||
- postfix-common: make compatible with updated postfix profiles naming
|
- postfix-common: make compatible with updated postfix profiles naming
|
||||||
- python: allow reading /usr/local/lib/python3
|
- python: allow reading /usr/local/lib/python3
|
||||||
@@ -110,15 +112,15 @@ Policy
|
|||||||
- ubuntu-browsers.d/multimedia: allow creating/writing config dirs
|
- ubuntu-browsers.d/multimedia: allow creating/writing config dirs
|
||||||
- audio:
|
- audio:
|
||||||
- fix alsa settings access
|
- fix alsa settings access
|
||||||
- grant read access to the system-wide asound.conf
|
- grant read access to the system-wide asound.conf ([dbug920669][dbug920669], [MR320][MR320])
|
||||||
- grant read access to the libao configuration files
|
- grant read access to the libao configuration files ([dbug920670][dbug920670], [MR320][MR320])
|
||||||
- fonts:
|
- fonts:
|
||||||
- Allow to read conf-avail dir itself.
|
- Allow to read conf-avail dir itself.
|
||||||
- Add various openSUSE-specific font config directories
|
- Add various openSUSE-specific font config directories
|
||||||
- allow creating/writing config dirs
|
- allow creating/writing config dirs
|
||||||
- kde:
|
- kde:
|
||||||
- allow access to common KDE-specific settings
|
- allow access to common KDE-specific settings ([MR327][MR327])
|
||||||
- allow access to global KDE settings
|
- allow access to global KDE settings ([MR327][MR327])
|
||||||
- gnome:
|
- gnome:
|
||||||
- allow reading gtk-3.0 cache files
|
- allow reading gtk-3.0 cache files
|
||||||
- allow creating config dirs
|
- allow creating config dirs
|
||||||
@@ -126,8 +128,8 @@ Policy
|
|||||||
|
|
||||||
Tests
|
Tests
|
||||||
-----
|
-----
|
||||||
- fix mount test to use next available loop device
|
- fix mount test to use next available loop device ([MR379][MR379])
|
||||||
- update tests to support distros with user-merge where /bin and /sbin are symlinks
|
- update tests to support distros with user-merge where /bin and /sbin are symlinks ([MR331][MR331])
|
||||||
- fix regression test failures around new binary cache layout
|
- fix regression test failures around new binary cache layout
|
||||||
- update tests for new network domain keywords
|
- update tests for new network domain keywords
|
||||||
- update tests for base abstraction changes
|
- update tests for base abstraction changes
|
||||||
@@ -136,8 +138,8 @@ Tests
|
|||||||
Documentation
|
Documentation
|
||||||
-------------
|
-------------
|
||||||
- apparmor.d (7):
|
- apparmor.d (7):
|
||||||
- update list of network domain keywords
|
- update list of network domain keywords ([MR349][MR349])
|
||||||
- drop unsupported 'to' option for link rules from manpage
|
- drop unsupported 'to' option for link rules from manpage ([MR368][MR368])
|
||||||
|
|
||||||
Note
|
Note
|
||||||
====
|
====
|
||||||
|
Reference in New Issue
Block a user