apparmor-profiles-2.10.2-9.1.noarch.rpm


Advertisement

Description

apparmor-profiles - AppArmor profiles that are loaded into the apparmor kernel module

Distribution: openSUSE 42.1
Repository: openSUSE Update Oss all
Package name: apparmor-profiles
Package version: 2.10.2
Package release: 9.1
Package architecture: noarch
Package type: rpm
Installed size: 175.50 KB
Download size: 80.79 KB
Official Mirror: ftp.gwdg.de
Base profiles. AppArmor is a file and network mandatory access control mechanism. AppArmor confines processes to the resources allowed by the systems administrator and can constrain the scope of potential security vulnerabilities. This package is part of a suite of tools that used to be named SubDomain.

Provides

  • apparmor-profiles = 2.10.2-9.1
  • config(apparmor-profiles) = 2.10.2-9.1
  • subdomain-profiles = 2.10.2

Obsoletes

  • subdomain-profiles < 2.10.2

    Download

    Install Howto

    Install apparmor-profiles rpm package:

    # zypper install apparmor-profiles

    Files

    • /etc/apparmor.d/bin.ping
    • /etc/apparmor.d/sbin.klogd
    • /etc/apparmor.d/sbin.syslog-ng
    • /etc/apparmor.d/sbin.syslogd
    • /etc/apparmor.d/usr.bin.lessopen.sh
    • /etc/apparmor.d/usr.lib.apache2.mpm-prefork.apache2
    • /etc/apparmor.d/usr.lib.dovecot.anvil
    • /etc/apparmor.d/usr.lib.dovecot.auth
    • /etc/apparmor.d/usr.lib.dovecot.config
    • /etc/apparmor.d/usr.lib.dovecot.deliver
    • /etc/apparmor.d/usr.lib.dovecot.dict
    • /etc/apparmor.d/usr.lib.dovecot.dovecot-auth
    • /etc/apparmor.d/usr.lib.dovecot.dovecot-lda
    • /etc/apparmor.d/usr.lib.dovecot.imap
    • /etc/apparmor.d/usr.lib.dovecot.imap-login
    • /etc/apparmor.d/usr.lib.dovecot.lmtp
    • /etc/apparmor.d/usr.lib.dovecot.log
    • /etc/apparmor.d/usr.lib.dovecot.managesieve
    • /etc/apparmor.d/usr.lib.dovecot.managesieve-login
    • /etc/apparmor.d/usr.lib.dovecot.pop3
    • /etc/apparmor.d/usr.lib.dovecot.pop3-login
    • /etc/apparmor.d/usr.lib.dovecot.ssl-params
    • /etc/apparmor.d/usr.sbin.apache2
    • /etc/apparmor.d/usr.sbin.avahi-daemon
    • /etc/apparmor.d/usr.sbin.dnsmasq
    • /etc/apparmor.d/usr.sbin.dovecot
    • /etc/apparmor.d/usr.sbin.identd
    • /etc/apparmor.d/usr.sbin.mdnsd
    • /etc/apparmor.d/usr.sbin.nmbd
    • /etc/apparmor.d/usr.sbin.nscd
    • /etc/apparmor.d/usr.sbin.ntpd
    • /etc/apparmor.d/usr.sbin.smbd
    • /etc/apparmor.d/usr.sbin.smbldap-useradd
    • /etc/apparmor.d/usr.sbin.traceroute
    • /etc/apparmor.d/usr.sbin.winbindd
    • /etc/apparmor.d/apache2.d/phpsysinfo
    • /etc/apparmor.d/local/README
    • /etc/apparmor.d/local/bin.ping
    • /etc/apparmor.d/local/sbin.klogd
    • /etc/apparmor.d/local/sbin.syslog-ng
    • /etc/apparmor.d/local/sbin.syslogd
    • /etc/apparmor.d/local/usr.bin.lessopen.sh
    • /etc/apparmor.d/local/usr.lib.apache2.mpm-prefork.apache2
    • /etc/apparmor.d/local/usr.lib.dovecot.anvil
    • /etc/apparmor.d/local/usr.lib.dovecot.auth
    • /etc/apparmor.d/local/usr.lib.dovecot.config
    • /etc/apparmor.d/local/usr.lib.dovecot.deliver
    • /etc/apparmor.d/local/usr.lib.dovecot.dict
    • /etc/apparmor.d/local/usr.lib.dovecot.dovecot-auth
    • /etc/apparmor.d/local/usr.lib.dovecot.dovecot-lda
    • /etc/apparmor.d/local/usr.lib.dovecot.imap
    • /etc/apparmor.d/local/usr.lib.dovecot.imap-login
    • /etc/apparmor.d/local/usr.lib.dovecot.lmtp
    • /etc/apparmor.d/local/usr.lib.dovecot.log
    • /etc/apparmor.d/local/usr.lib.dovecot.managesieve
    • /etc/apparmor.d/local/usr.lib.dovecot.managesieve-login
    • /etc/apparmor.d/local/usr.lib.dovecot.pop3
    • /etc/apparmor.d/local/usr.lib.dovecot.pop3-login
    • /etc/apparmor.d/local/usr.lib.dovecot.ssl-params
    • /etc/apparmor.d/local/usr.sbin.apache2
    • /etc/apparmor.d/local/usr.sbin.avahi-daemon
    • /etc/apparmor.d/local/usr.sbin.dnsmasq
    • /etc/apparmor.d/local/usr.sbin.dovecot
    • /etc/apparmor.d/local/usr.sbin.identd
    • /etc/apparmor.d/local/usr.sbin.mdnsd
    • /etc/apparmor.d/local/usr.sbin.nmbd
    • /etc/apparmor.d/local/usr.sbin.nscd
    • /etc/apparmor.d/local/usr.sbin.ntpd
    • /etc/apparmor.d/local/usr.sbin.smbd
    • /etc/apparmor.d/local/usr.sbin.smbd-shares
    • /etc/apparmor.d/local/usr.sbin.smbldap-useradd
    • /etc/apparmor.d/local/usr.sbin.traceroute
    • /etc/apparmor.d/local/usr.sbin.winbindd
    • /usr/share/apparmor/extra-profiles/README
    • /usr/share/apparmor/extra-profiles/bin.netstat
    • /usr/share/apparmor/extra-profiles/etc.cron.daily.logrotate
    • /usr/share/apparmor/extra-profiles/etc.cron.daily.slocate.cron
    • /usr/share/apparmor/extra-profiles/etc.cron.daily.tmpwatch
    • /usr/share/apparmor/extra-profiles/sbin.dhclient
    • /usr/share/apparmor/extra-profiles/sbin.dhclient-script
    • /usr/share/apparmor/extra-profiles/sbin.dhcpcd
    • /usr/share/apparmor/extra-profiles/sbin.portmap
    • /usr/share/apparmor/extra-profiles/sbin.resmgrd
    • /usr/share/apparmor/extra-profiles/sbin.rpc.lockd
    • /usr/share/apparmor/extra-profiles/sbin.rpc.statd
    • /usr/share/apparmor/extra-profiles/usr.NX.bin.nxclient
    • /usr/share/apparmor/extra-profiles/usr.bin.acroread
    • /usr/share/apparmor/extra-profiles/usr.bin.apropos
    • /usr/share/apparmor/extra-profiles/usr.bin.evolution-2.10
    • /usr/share/apparmor/extra-profiles/usr.bin.fam
    • /usr/share/apparmor/extra-profiles/usr.bin.freshclam
    • /usr/share/apparmor/extra-profiles/usr.bin.gaim
    • /usr/share/apparmor/extra-profiles/usr.bin.man
    • /usr/share/apparmor/extra-profiles/usr.bin.mlmmj-bounce
    • /usr/share/apparmor/extra-profiles/usr.bin.mlmmj-maintd
    • /usr/share/apparmor/extra-profiles/usr.bin.mlmmj-make-ml.sh
    • /usr/share/apparmor/extra-profiles/usr.bin.mlmmj-process
    • /usr/share/apparmor/extra-profiles/usr.bin.mlmmj-receive
    • /usr/share/apparmor/extra-profiles/usr.bin.mlmmj-recieve
    • /usr/share/apparmor/extra-profiles/usr.bin.mlmmj-send
    • /usr/share/apparmor/extra-profiles/usr.bin.mlmmj-sub
    • /usr/share/apparmor/extra-profiles/usr.bin.mlmmj-unsub
    • /usr/share/apparmor/extra-profiles/usr.bin.opera
    • /usr/share/apparmor/extra-profiles/usr.bin.passwd
    • /usr/share/apparmor/extra-profiles/usr.bin.procmail
    • /usr/share/apparmor/extra-profiles/usr.bin.skype
    • /usr/share/apparmor/extra-profiles/usr.bin.spamc
    • /usr/share/apparmor/extra-profiles/usr.bin.svnserve
    • /usr/share/apparmor/extra-profiles/usr.bin.wireshark
    • /usr/share/apparmor/extra-profiles/usr.bin.xfs
    • /usr/share/apparmor/extra-profiles/usr.lib.GConf.2.gconfd-2
    • /usr/share/apparmor/extra-profiles/usr.lib.RealPlayer10.realplay
    • /usr/share/apparmor/extra-profiles/usr.lib.bonobo.bonobo-activation-server
    • /usr/share/apparmor/extra-profiles/usr.lib.evolution-data-server.evolution-data-server-1.10
    • /usr/share/apparmor/extra-profiles/usr.lib.firefox.firefox
    • /usr/share/apparmor/extra-profiles/usr.lib.firefox.firefox.sh
    • /usr/share/apparmor/extra-profiles/usr.lib.firefox.mozilla-xremote-client
    • /usr/share/apparmor/extra-profiles/usr.lib.man-db.man
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.anvil
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.bounce
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.cleanup
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.discard
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.error
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.flush
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.lmtp
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.local
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.master
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.nqmgr
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.oqmgr
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.pickup
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.pipe
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.proxymap
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.qmgr
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.qmqpd
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.scache
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.showq
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.smtp
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.smtpd
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.spawn
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.tlsmgr
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.trivial-rewrite
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.verify
    • /usr/share/apparmor/extra-profiles/usr.lib.postfix.virtual
    • /usr/share/apparmor/extra-profiles/usr.lib64.GConf.2.gconfd-2
    • /usr/share/apparmor/extra-profiles/usr.sbin.cupsd
    • /usr/share/apparmor/extra-profiles/usr.sbin.dhcpd
    • /usr/share/apparmor/extra-profiles/usr.sbin.httpd2-prefork
    • /usr/share/apparmor/extra-profiles/usr.sbin.imapd
    • /usr/share/apparmor/extra-profiles/usr.sbin.in.fingerd
    • /usr/share/apparmor/extra-profiles/usr.sbin.in.ftpd
    • /usr/share/apparmor/extra-profiles/usr.sbin.in.ntalkd
    • /usr/share/apparmor/extra-profiles/usr.sbin.ipop2d
    • /usr/share/apparmor/extra-profiles/usr.sbin.ipop3d
    • /usr/share/apparmor/extra-profiles/usr.sbin.lighttpd
    • /usr/share/apparmor/extra-profiles/usr.sbin.mysqld
    • /usr/share/apparmor/extra-profiles/usr.sbin.nmbd
    • /usr/share/apparmor/extra-profiles/usr.sbin.oidentd
    • /usr/share/apparmor/extra-profiles/usr.sbin.popper
    • /usr/share/apparmor/extra-profiles/usr.sbin.postalias
    • /usr/share/apparmor/extra-profiles/usr.sbin.postdrop
    • /usr/share/apparmor/extra-profiles/usr.sbin.postmap
    • /usr/share/apparmor/extra-profiles/usr.sbin.postqueue
    • /usr/share/apparmor/extra-profiles/usr.sbin.sendmail
    • /usr/share/apparmor/extra-profiles/usr.sbin.sendmail.postfix
    • /usr/share/apparmor/extra-profiles/usr.sbin.sendmail.sendmail
    • /usr/share/apparmor/extra-profiles/usr.sbin.smbd
    • /usr/share/apparmor/extra-profiles/usr.sbin.spamd
    • /usr/share/apparmor/extra-profiles/usr.sbin.squid
    • /usr/share/apparmor/extra-profiles/usr.sbin.sshd
    • /usr/share/apparmor/extra-profiles/usr.sbin.useradd
    • /usr/share/apparmor/extra-profiles/usr.sbin.userdel
    • /usr/share/apparmor/extra-profiles/usr.sbin.vsftpd
    • /usr/share/apparmor/extra-profiles/usr.sbin.xinetd

    Changelog

    2017-02-01 - suse-beta@cboltz.de - Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)

    2017-01-30 - suse-beta@cboltz.de - add profile-updates-2.10r3381..3384.diff with updates for abstractions/base, abstractions/apache2-common and dovecot profiles

    2017-01-24 - suse-beta@cboltz.de - package apparmor.service also in Leap where it was missing thanks to a wrong/outdated if statement (boo#1017260) Note: If you manually disabled AppArmor, this change will re-enable it.

    2017-01-24 - suse-beta@cboltz.de - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net

    2017-01-10 - suse-beta@cboltz.de - update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff

    2016-10-23 - suse-beta@cboltz.de - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)

    2016-10-13 - suse-beta@cboltz.de - add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile

    2016-08-26 - suse-beta@cboltz.de - add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests

    2016-05-24 - suse-beta@cboltz.de - add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)

    Advertisement
    Advertisement