Create Release_Notes_4.0 beta4

John Johansen 2024-04-08 09:15:14 +00:00
parent 560dc61b94
commit 09eacf3974

@ -0,0 +1,71 @@
WARNING this is a beta - NOT a final release
================================================
AppArmor 4.0-beta4 was released 2024-04-08.
# Introduction
AppArmor 4.0 is a major new release of the AppArmor that is in development.
Apprmor 4.0 is a bridge release between older AppArmor 3.x policy and the newer AppArmor 4 style policy which introduces several new features that are not backwards compatible. As such AppArmor 4.0 will be a short lived release, and will not receive long term support. The following AppArmor 4.1 feature release is planned to be a regular release, please take this into account when including AppArmor 4.0 into a distro release. For questions around compatibility see the compatibility matrix.
These release notes cover changes between ```AppArmor-4.0~beta2 and AppArmor-4.0~beta4```
# Notes
* **new** dependency build dependency ** autoconf-archive **
This Release contains only Bug Fixes to AppArmor 4.0 beta3
## Misc
* Some features will work with older kernels but many of the features in apparmor 4 with require a development kernel.
* The kernel portion of the project is maintained and pushed separately.
* AppArmor 4.0 contains all bug fixes and policy updates from apparmor 3.1
* Some new features will not be fully supported in some utilities. In these cases it was decided that releasing a new feature earlier had more benefit than delaying it for full utility support. Please see the feature support matrix.
# Bug Fixes
## policy compiler (aka apparmor_parser)
- fix coverity static analysis failure ([MR:1188](https://gitlab.com/apparmor/apparmor/-/merge_requests/1188))
- fix getattr and setattr perm mapping on mqueue rules ([MR:1197](https://gitlab.com/apparmor/apparmor/-/merge_requests/1197), [AABUG:377](https://gitlab.com/apparmor/apparmor/-/issues/377), [AABUG:378](https://gitlab.com/apparmor/apparmor/-/issues/378))
## Utils
- allow mount destination globbing ([MR:1195](https://gitlab.com/apparmor/apparmor/-/merge_requests/1195), [AABUG:381](https://gitlab.com/apparmor/apparmor/-/issues/381))
## Policy
#### abstractions
- Move pam-related permissions to abstractions/authentication ([MR:1191](https://gitlab.com/apparmor/apparmor/-/merge_requests/1191), [BOO:1220032](https://bugzilla.opensuse.org/show_bug.cgi?id=1220032))
#### profiles
- new bwrap ([MR:1204](https://gitlab.com/apparmor/apparmor/-/merge_requests/1204),[MR:1206](https://gitlab.com/apparmor/apparmor/-/merge_requests/1206), [AABUG:382](https://gitlab.com/apparmor/apparmor/-/issues/382), [LP:2046844](https://bugs.launchpad.net/ubuntu/+source/pageedit/+bug/2046844))
- new unshare ([MR:1204](https://gitlab.com/apparmor/apparmor/-/merge_requests/1204),[MR:1206](https://gitlab.com/apparmor/apparmor/-/merge_requests/1206), [AABUG:382](https://gitlab.com/apparmor/apparmor/-/issues/382), [LP:2046844](https://bugs.launchpad.net/ubuntu/+source/pageedit/+bug/2046844))
- firefox
- allow locking of *.sqlite-shm files in user cache area ([MR:1193](https://gitlab.com/apparmor/apparmor/-/merge_requests/1193), [AABUG:380](https://gitlab.com/apparmor/apparmor/-/issues/380))
- samba
- allow /etc/gnutls/config & @{HOMEDIRS} ([MR:1200](https://gitlab.com/apparmor/apparmor/-/merge_requests/1200), [AABUG:379](https://gitlab.com/apparmor/apparmor/-/issues/379))
-sshd
- Add new permissions needed on Ubuntu 24.04 ([MR:1196](https://gitlab.com/apparmor/apparmor/-/merge_requests/1196), [LP:2060100](https://bugs.launchpad.net/bugs/2060100))
#### unconfined profiles
- update
- firefox
- adjust unconfined firefox profile to support mozilla.org download ([MR:1203](https://gitlab.com/apparmor/apparmor/-/merge_requests/1203), [LP:2056297](https://bugs.launchpad.net/bugs/2056297))
- new
- tuxedo-control-center ([MR:1187](https://gitlab.com/apparmor/apparmor/-/merge_requests/1187), [LP:2046844](https://bugs.launchpad.net/bugs/2046844))
## Regression Tests
- fix inet tests ([MR:1192](https://gitlab.com/apparmor/apparmor/-/merge_requests/1192), [AABUG:376](https://gitlab.com/apparmor/apparmor/-/issues/376))