mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
Update Release_Notes_2.13.3
parent
bb5c541d2c
commit
a7ab0cd89c
1 changed files with 19 additions and 17 deletions
|
@ -58,8 +58,12 @@ Utils
|
|||
-----
|
||||
|
||||
- genprof/logprof
|
||||
- Ensure there is always a fallback falue for the logfile location
|
||||
- fix handling of log stream when the suggestion of creating a new hat is rejected
|
||||
- drop failing corner-case check in logparser.py ([bso1120472][bso1120472], [MR297][MR297])
|
||||
- drop unused `get_profile_filename()` from logparser.py ([MR297][MR297])
|
||||
- fix error `KeyError: 'logfiles'` when no logprof.conf exists ([MR365][MR365])
|
||||
- don't drop later events when user selects to deny a hat ([MR378][MR378])
|
||||
- update network keyword list and add corresponding tests ([MR350][MR350])
|
||||
|
||||
|
||||
Policy
|
||||
------
|
||||
|
@ -72,14 +76,12 @@ Policy
|
|||
- add abstractions/ssl_certs to lmtp
|
||||
- allow master to use SIGTERM on children that are slow to die
|
||||
- align {pop3,managesieve}-login to imap-login
|
||||
- identd
|
||||
- allow network netlink dgram
|
||||
- syslog-ng
|
||||
- add abstractions/python for python-parser
|
||||
- identd: allow network netlink dgram ([MR353][MR353])
|
||||
- syslog-ng: add abstractions/python for python-parser
|
||||
- lsb_release profile: new abstraction
|
||||
- dnsmasq:
|
||||
- allow peer=libvirtd to support named profile
|
||||
- Work around breakage caused by {bin,sbin} alternation
|
||||
- Work around breakage caused by {bin,sbin} alternation ([bso1127073][bso1127073], [MR346][MR346])
|
||||
- Revert /usr/{bin,sbin}/ alternation in dnsmasq profile name
|
||||
- msqld:
|
||||
- add mmap permission for mysqld (4.8 semantic change)
|
||||
|
@ -100,9 +102,9 @@ Policy
|
|||
- qt5: allow reading user configuration
|
||||
- qt5-settings-write: fix anonymous shared memory access
|
||||
- qt5-compose-cache-write: fix anonymous shared memory access
|
||||
- nameservice: allow access to /run/netconfig/resolv.conf
|
||||
- nameservice: allow access to /run/netconfig/resolv.conf ([bso1097370][bso1097370])
|
||||
- mesa: allow reading drirc.d
|
||||
- vulcan: allow reading /etc/vulkan/icd.d/
|
||||
- vulcan: allow reading /etc/vulkan/icd.d/ ([MR329][MR329])
|
||||
- nvidia: allow reading nvidia application profiles
|
||||
- postfix-common: make compatible with updated postfix profiles naming
|
||||
- python: allow reading /usr/local/lib/python3
|
||||
|
@ -110,15 +112,15 @@ Policy
|
|||
- ubuntu-browsers.d/multimedia: allow creating/writing config dirs
|
||||
- audio:
|
||||
- fix alsa settings access
|
||||
- grant read access to the system-wide asound.conf
|
||||
- grant read access to the libao configuration files
|
||||
- grant read access to the system-wide asound.conf ([dbug920669][dbug920669], [MR320][MR320])
|
||||
- grant read access to the libao configuration files ([dbug920670][dbug920670], [MR320][MR320])
|
||||
- fonts:
|
||||
- Allow to read conf-avail dir itself.
|
||||
- Add various openSUSE-specific font config directories
|
||||
- allow creating/writing config dirs
|
||||
- kde:
|
||||
- allow access to common KDE-specific settings
|
||||
- allow access to global KDE settings
|
||||
- allow access to common KDE-specific settings ([MR327][MR327])
|
||||
- allow access to global KDE settings ([MR327][MR327])
|
||||
- gnome:
|
||||
- allow reading gtk-3.0 cache files
|
||||
- allow creating config dirs
|
||||
|
@ -126,8 +128,8 @@ Policy
|
|||
|
||||
Tests
|
||||
-----
|
||||
- fix mount test to use next available loop device
|
||||
- update tests to support distros with user-merge where /bin and /sbin are symlinks
|
||||
- fix mount test to use next available loop device ([MR379][MR379])
|
||||
- update tests to support distros with user-merge where /bin and /sbin are symlinks ([MR331][MR331])
|
||||
- fix regression test failures around new binary cache layout
|
||||
- update tests for new network domain keywords
|
||||
- update tests for base abstraction changes
|
||||
|
@ -136,8 +138,8 @@ Tests
|
|||
Documentation
|
||||
-------------
|
||||
- apparmor.d (7):
|
||||
- update list of network domain keywords
|
||||
- drop unsupported 'to' option for link rules from manpage
|
||||
- update list of network domain keywords ([MR349][MR349])
|
||||
- drop unsupported 'to' option for link rules from manpage ([MR368][MR368])
|
||||
|
||||
Note
|
||||
====
|
||||
|
|
Loading…
Add table
Reference in a new issue