From be8686f5fc7e9f157e4b082cc63ea51ffc2689ad Mon Sep 17 00:00:00 2001 From: Georgia Garcia Date: Fri, 2 Feb 2024 22:12:01 +0000 Subject: [PATCH] Create Release_Notes_3.1.7 --- Release_Notes_3.1.7.md | 75 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 75 insertions(+) create mode 100644 Release_Notes_3.1.7.md diff --git a/Release_Notes_3.1.7.md b/Release_Notes_3.1.7.md new file mode 100644 index 0000000..bdc4f00 --- /dev/null +++ b/Release_Notes_3.1.7.md @@ -0,0 +1,75 @@ +AppArmor 3.1.7 was released 2024-02-02. + +# Introduction + +AppArmor 3.1.7 is a bug fix release of the user space components of the AppArmor security project. The kernel portion of the project is maintained and pushed separately. + +This version of the userspace should work with all kernel versions from +2.6.15 and later (some earlier version of the kernel if they have the +apparmor patches applied). + +# Important Note + +This release fixes a regression in 3.1.5 introduced by its fix to mount rule generations. + +# Obtaining the Release + +There are two ways to obtain this release either through gitlab or a tarball in launchpad. + +**Important note:** the gitlab release tarballs differ from the launchpad release tarballs. The launchpad release tarball has a couple processing steps already performed: + +* libapparmor `autogen.sh` is already done, meaning distros only need to use ./configure in their build setup +* the docs for everything but libapparmor have already been built + +### gitlab +- https://gitlab.com/apparmor/apparmor/-/releases/v3.1.7 + +# Changes in this Release + +These release notes cover all changes between 3.1.6 (tag v3.1.6) ) and 3.1.7 (tag v3.1.7) on the [apparmor-3.1 branch](https://gitlab.com/apparmor/apparmor/tree/apparmor-3.1). + + +## Policy Compiler (a.k.a apparmor_parser) +- Fix subprofile name in profile serialization ([MR:1127](https://gitlab.com/apparmor/apparmor/-/merge_requests/1127) +- Fix typo in apparmor_parser manpage ([MR:1128](https://gitlab.com/apparmor/apparmor/-/merge_requests/1128) + + +## Policy + +#### abstractions +- kde + - Allow reading global Debian KDE settings ([MR:1056](https://gitlab.com/apparmor/apparmor/-/merge_requests/1056)) + - Fix plasma-browser-integration ([MR:1115](https://gitlab.com/apparmor/apparmor/-/merge_requests/1115)) +- fonts + - Allow locking fontconfig user cache files ([MR:1057](https://gitlab.com/apparmor/apparmor/-/merge_requests/1057)) + - Allow writing to fontconfig user cache files ([MR:1059](https://gitlab.com/apparmor/apparmor/-/merge_requests/1059)) +- pipewire + - Allow use of client-rt.conf file ([MR:1113](https://gitlab.com/apparmor/apparmor/-/merge_requests/1113)) +- nameservice + - Allow reading /etc/authselect/nsswitch.conf ([MR:1119](https://gitlab.com/apparmor/apparmor/-/merge_requests/1119)) +- wutmp + - Allow reading /run/systemd/sessions/ ([MR:1121](https://gitlab.com/apparmor/apparmor/-/merge_requests/1121)) +#### profiles +- dovecot + - Allow for the default dovecot libexecdir ([MR:1080](https://gitlab.com/apparmor/apparmor/-/merge_requests/1080)) + +## Tests + +- Fail iopl/ioperm with lockdown on the syscall test ([MR:1063](https://gitlab.com/apparmor/apparmor/-/merge_requests/1063)) +- Fix regression tests to run on kernels that only have network_v8 ([MR:1120](https://gitlab.com/apparmor/apparmor/-/merge_requests/1120)) + +## Tools + +- Attach null-* events to correct target profile ([MR:1092](https://gitlab.com/apparmor/apparmor/-/merge_requests/1092)) +- Ignore ยด//null-` peers in signal and ptrace events ([MR:1107](https://gitlab.com/apparmor/apparmor/-/merge_requests/1107)) +- Fix aa-cleanprof to work with named profiles ([MR:1108](https://gitlab.com/apparmor/apparmor/-/merge_requests/1108)) +- Remove unnecessary regex backslashes and resolve string escape sequence DeprecationWarnings ([MR:1130](https://gitlab.com/apparmor/apparmor/-/merge_requests/1130)) +- No longer skip exec events in hats ([MR:1134](https://gitlab.com/apparmor/apparmor/-/merge_requests/1134)) +- Prevent ANSI terminal injection in aa-unconfined ([MR:1142](https://gitlab.com/apparmor/apparmor/-/merge_requests/1142)) + +## Misc + +- Install systemd unit on fedora/redhat systems ([MR:1101](https://gitlab.com/apparmor/apparmor/-/merge_requests/1101)) +- Handle Incus in rc.apparmor ([MR:1112](https://gitlab.com/apparmor/apparmor/-/merge_requests/1112)) +- Add ENOPROTOOPT error in aa_getcon() manpage ([MR:1143](https://gitlab.com/apparmor/apparmor/-/merge_requests/1143)) +- Fix wrong syntax for profile stacking ([MR:1141](https://gitlab.com/apparmor/apparmor/-/merge_requests/1141)) \ No newline at end of file