| 1 | debathena-apparmor-config (1.2.1) unstable; urgency=low |
|---|
| 2 | |
|---|
| 3 | * ensure local/usr.sbin/cupsd and local/usr.sbin.ntpd files exist even |
|---|
| 4 | if those packages aren't installed (Trac: #737) |
|---|
| 5 | |
|---|
| 6 | -- Jonathan Reed <jdreed@mit.edu> Tue, 28 Jun 2011 17:27:26 -0400 |
|---|
| 7 | |
|---|
| 8 | debathena-apparmor-config (1.2) unstable; urgency=low |
|---|
| 9 | |
|---|
| 10 | * Transform <abstractions/nameservice> to allow reading |
|---|
| 11 | /etc/nsswitch.conf.debathena and /etc/hesiod.conf.debathena. (Trac: |
|---|
| 12 | #610) |
|---|
| 13 | * Pseudo-transform /etc/apparmor.d/usr.sbin.ntpd to allow reading |
|---|
| 14 | /etc/ntp.conf.debathena. (Trac: #611) |
|---|
| 15 | * Fix the <abstractions/X> patch to get the right Xauthority path |
|---|
| 16 | (/var/run/athena-sessions/xauth-*) |
|---|
| 17 | * In <tunables/home.d/debathena>, only whitelist canonical paths, not |
|---|
| 18 | symlinked ones, because AppArmor resolves symlinks. |
|---|
| 19 | |
|---|
| 20 | -- Evan Broder <broder@mit.edu> Sun, 20 Jun 2010 22:05:16 -0400 |
|---|
| 21 | |
|---|
| 22 | debathena-apparmor-config (1.1) unstable; urgency=low |
|---|
| 23 | |
|---|
| 24 | * Break old versions of kerberos-config to try and force the correct |
|---|
| 25 | upgrade order. |
|---|
| 26 | * Change permissions on lpr in <abstractions/cups-client> to make |
|---|
| 27 | AppArmor whine less, and possibly even be more secure. |
|---|
| 28 | * Cleanup /etc/apparmor.d/tunables/home diversion when we upgrade to a |
|---|
| 29 | release that has <tunables/home.d> (i.e. Lucid) |
|---|
| 30 | |
|---|
| 31 | -- Evan Broder <broder@mit.edu> Sun, 13 Jun 2010 10:07:36 -0400 |
|---|
| 32 | |
|---|
| 33 | debathena-apparmor-config (1.0) unstable; urgency=low |
|---|
| 34 | |
|---|
| 35 | [ Greg Brockman ] |
|---|
| 36 | * Initial release. |
|---|
| 37 | |
|---|
| 38 | [ Evan Broder ] |
|---|
| 39 | * Only restart apparmor if it was previously running. (Trac: #506) |
|---|
| 40 | * Reload apparmor in the prerm instead of the postrm, since that's where |
|---|
| 41 | the diversions are removed |
|---|
| 42 | * Run debhelper- and config-package-dev-generated postinst/prerm code |
|---|
| 43 | before reloading apparmor, so the diversions are actually in place |
|---|
| 44 | when we do. |
|---|
| 45 | * Include AFS homedirs in the list of home directories. (Trac: #601) |
|---|
| 46 | * Allow X applications to read /var/run/xauth-*. (Trac: #602) |
|---|
| 47 | * Bump Debian standards version and debhelper compatibility level. |
|---|
| 48 | |
|---|
| 49 | -- Evan Broder <broder@mit.edu> Sat, 12 Jun 2010 19:09:21 -0400 |
|---|
