Your message dated Tue, 17 Jul 2012 17:02:13 +0000
with message-id <e1srba5-0007r1...@franck.debian.org>
and subject line Bug#679597: fixed in apparmor 2.7.103-4
has caused the Debian Bug report #679597,
regarding apparmor: AppArmor totally broken
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
679597: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=679597
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: apparmor
Version: 2.7.103-3
Severity: grave
X-Debbugs-CC: john.johan...@canonical.com, k...@debian.org, mi...@riseup.net
Hi,
(following-up on #676515)
John Johansen wrote (26 Jun 2012 17:48:38 GMT) :
> Okay, there are 4 kernel patches, not all of them are needed depending on
> whether
> the network patch is applied or not.
> If you don't want to apply the networking patch
> 0001-apparmor-remove-advertising-the-support-of-network-r.patch
> Stops the kernel interface from incorrectly advertising that it
> supports network rules. A further patch (not attached) to
> userspace will also have to be applied
Thanks, John, for your work on this.
For those who did not follow the entire saga, this patch was applied
in the linux 3.2.21-3 source package, to complement the incomplete
AppArmor compatibility patch, so Debian bug #676515 was closed,
as the kernel side is now sorted out. So far, so good.
However, as expected, this is not enough to make AppArmor usable, so
the current state in current sid is still a regression compared to
when the compatibility patch was not applied to the kernel: it used to
be bad, but relatively usable, and it's now totally unusable.
This bug is here to track the additional patch against userspace,
that John mentioned was needed, which is confirmed by my experience.
--- End Message ---
--- Begin Message ---
Source: apparmor
Source-Version: 2.7.103-4
We believe that the bug you reported is fixed in the latest version of
apparmor, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 679...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Kees Cook <k...@debian.org> (supplier of updated apparmor package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 16 Jul 2012 11:52:42 -0700
Source: apparmor
Binary: apparmor apparmor-utils apparmor-profiles apparmor-docs libapparmor-dev
libapparmor1 libapparmor-perl libapache2-mod-apparmor libpam-apparmor
apparmor-notify python-libapparmor dh-apparmor
Architecture: source amd64 all
Version: 2.7.103-4
Distribution: unstable
Urgency: low
Maintainer: Kees Cook <k...@debian.org>
Changed-By: Kees Cook <k...@debian.org>
Description:
apparmor - User-space parser utility for AppArmor
apparmor-docs - Documentation for AppArmor
apparmor-notify - AppArmor notification system
apparmor-profiles - Profiles for AppArmor Security policies
apparmor-utils - Utilities for controlling AppArmor
dh-apparmor - AppArmor debhelper routines
libapache2-mod-apparmor - changehat AppArmor library as an Apache module
libapparmor-dev - AppArmor development libraries and header files
libapparmor-perl - AppArmor library Perl bindings
libapparmor1 - changehat AppArmor library
libpam-apparmor - changehat AppArmor library as a PAM module
python-libapparmor - AppArmor library Python bindings
Closes: 679597
Changes:
apparmor (2.7.103-4) unstable; urgency=low
.
* debian/apparmor-profiles.dirs: add directories we might collide
with apparmor on during purge.
* debian/patches/fix-network-rule-support.patch: handle lack of
networking features correctly (Closes: 679597).
Checksums-Sha1:
cad3000b8d25ed9191512159024f10e3d9afd67b 2636 apparmor_2.7.103-4.dsc
41e418b293892870a2d465dca5e030f241d159de 68803 apparmor_2.7.103-4.debian.tar.gz
bf28a3a738f12e93865cc3967c964ffcdc505971 390832 apparmor_2.7.103-4_amd64.deb
3badab684a159aad6bbbdb384ab553f7041b5c92 136240
apparmor-utils_2.7.103-4_amd64.deb
26870cf473d24d363bd844a4e32febb4aedb84d0 48436
libapparmor-dev_2.7.103-4_amd64.deb
f57c0f309148c4320b5fba0f8923b72858cc10df 58748 libapparmor1_2.7.103-4_amd64.deb
77e7fd52523722c19e3acf84c37e0a3c63438b0b 57446
libapparmor-perl_2.7.103-4_amd64.deb
a163a6ea8a3bea9f0ad51d1723ec8135793c1424 36452
libapache2-mod-apparmor_2.7.103-4_amd64.deb
acc5f65963bba3ce42542bcbb4c3e987a3694ef3 32200
libpam-apparmor_2.7.103-4_amd64.deb
44f865a2f2cb655bcf17fced738cb4e48869435e 52104
python-libapparmor_2.7.103-4_amd64.deb
a04fa5b1ab90601e0ef04dadae926962ae6eddee 58128
apparmor-profiles_2.7.103-4_all.deb
9b7e563fa42571c5cb8ef6e8a0d20c08e5f2f9cc 254726 apparmor-docs_2.7.103-4_all.deb
0e878fb618c797c8fb5bdfc241aaaa08ed51201e 36536
apparmor-notify_2.7.103-4_all.deb
8fac42c261479d07d41cc80f0c52095425f02cd2 30314 dh-apparmor_2.7.103-4_all.deb
Checksums-Sha256:
863fcc923d7c49a2ed171ea879e3020a4e1396019a347c700bd90f3c1211412c 2636
apparmor_2.7.103-4.dsc
e2f4cfc1fb496b11c1b1b4ca297444a5ccafce1d19dde8ce2ba072689b632442 68803
apparmor_2.7.103-4.debian.tar.gz
9b05a22f70381185a9fdd8f6c9c23eaea0e08ee9423b88122bb5d07d451cbe61 390832
apparmor_2.7.103-4_amd64.deb
9d3af4a24113bd9f5828f40bf9686aba868f1fde79a69300476ee21331e8397b 136240
apparmor-utils_2.7.103-4_amd64.deb
539c8b546416f85ce5b701a87519953321c71791f337614483773e0a9cda8d10 48436
libapparmor-dev_2.7.103-4_amd64.deb
b26dec6903586ca118b8006b1dcb43745ec084055042de172d31be86573288a7 58748
libapparmor1_2.7.103-4_amd64.deb
f1eb5fcfe6b68efd7b4f0337a773c2ced56b188c75f90c950f816ea2ab566fde 57446
libapparmor-perl_2.7.103-4_amd64.deb
54801091bce316950d191436856a946faba8a2e84fbc21380507f4049cdd4548 36452
libapache2-mod-apparmor_2.7.103-4_amd64.deb
1c336f69b9e0ea032434308e1d359eb1fb440c904e565d14d243104e5f4f318e 32200
libpam-apparmor_2.7.103-4_amd64.deb
f5a083741f4c817659ef4486ac220e748ee7b26468b59f0edf0dca9956e58f58 52104
python-libapparmor_2.7.103-4_amd64.deb
4279eaa352518d120dcc83bf48cdc91d4895906dfe530c74c00d3ab274b536f3 58128
apparmor-profiles_2.7.103-4_all.deb
711417a03af5a247ef6446c74d0c1797a243f12f23822afcce64d1c8e1a39409 254726
apparmor-docs_2.7.103-4_all.deb
0972314d5a70ef99a1ca36e254f9ba918cabd213b6c3b5a3e99801ce461556f0 36536
apparmor-notify_2.7.103-4_all.deb
df238d4d4f11f3584c4108b0ba833135b46a7acfccbb7c0f2ae8d84714ac55e8 30314
dh-apparmor_2.7.103-4_all.deb
Files:
8acfa27f57c1824fa9de0d38ceb8674b 2636 admin extra apparmor_2.7.103-4.dsc
842c87b5a813485f4545805e586a5a91 68803 admin extra
apparmor_2.7.103-4.debian.tar.gz
52c5066f9655cdcbf9e5937679e591c1 390832 admin extra
apparmor_2.7.103-4_amd64.deb
023e869a647802b0dc7264b14c29f450 136240 admin extra
apparmor-utils_2.7.103-4_amd64.deb
771f789f2f659c2abefab569e6050747 48436 libdevel extra
libapparmor-dev_2.7.103-4_amd64.deb
fd03e6b1e46d2ce40c2858f27f00784b 58748 libs extra
libapparmor1_2.7.103-4_amd64.deb
27a1d1fa47e27f79d0702607e37f0a18 57446 perl extra
libapparmor-perl_2.7.103-4_amd64.deb
093f56cdae949b16df4e0db7b4a69f24 36452 libs extra
libapache2-mod-apparmor_2.7.103-4_amd64.deb
03630ba54e8499f76fd8182a7c8cf03d 32200 libs extra
libpam-apparmor_2.7.103-4_amd64.deb
8f81e7cfd43e1ba8fbd29b958bc170ec 52104 python extra
python-libapparmor_2.7.103-4_amd64.deb
a22217c68f121cd072223c2481bc1dfb 58128 admin extra
apparmor-profiles_2.7.103-4_all.deb
8a1377412b792ae2ea3e9d6c04cba7ca 254726 doc extra
apparmor-docs_2.7.103-4_all.deb
5655c024d39a358e3009a8c9c8bb1fd0 36536 admin extra
apparmor-notify_2.7.103-4_all.deb
388cc26ae01a36e04a46ad313f274dfc 30314 devel extra
dh-apparmor_2.7.103-4_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Kees Cook <k...@outflux.net>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=4AxP
-----END PGP SIGNATURE-----
--- End Message ---