Novell is now a part of Micro Focus

Recommended update for yast2-apparmor, apparmor-profiles, apparmor-utils and apparmor-parser

Knowledgebase

(Last modified: 15MAR2007)


solutions Recommended update for yast2-apparmor, apparmor-profiles, apparmor-utils and apparmor-parser SuSE Linux Maintenance Web (da104629d31868f7d380eadcd635c06c)

Applies to

Package: yast2-apparmor
apparmor-profiles
apparmor-utils
apparmor-parser
Product(s): SUSE Linux Enterprise Desktop 10 SP1 Upgrade for x86
SUSE Linux Enterprise Desktop 10 SP1 Upgrade for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP1 Upgrade for x86
SUSE Linux Enterprise Server 10 SP1 Upgrade for IPF
SUSE Linux Enterprise Server 10 SP1 Upgrade for IBM POWER
SUSE Linux Enterprise Server 10 SP1 Upgrade for IBM zSeries 64bit
SUSE Linux Enterprise Server 10 SP1 Upgrade for AMD64 and Intel EM64T
Zypp-Patch-Number: 2795
Release: 20070315
Obsoletes: none

Indications

These packages are the updates for Service Pack 1 of SUSE Linux Enterprise
10. Install them to have your system at SP1 level.

Contraindications

None.

Problem description

yast2-apparmor
  • Bug fixes
  • 159732 (Application Audit Report broken)
  • 171260 (i18n text cut-off)
  • 185614 (Access Type message box can't close with x-click)
  • 185689 (unlocalized buttons)
  • 185738 (unlocalized weekdays)
  • 233114 (can't configure some valid email addresses)
  • Fix for translation bugs (#179656 & others)
  • Updated locale files
  • Fix for #239821 - missing icons
  • Added feature (#300719) for profile mode control in yast
  • Fixed notification bugs (#177039,#190891,#198359)
  • Fixed (#242044) Setting Mode filter in AppArmor edit report wizard saves the wrong mode
  • Fixed (#242043) AppArmor fails to restart via configuration in the YaST control panel
  • Fixed (#218961) Added missing capabilities to yast interface
  • Added feature (#300906) to add syntax checking to wizards-
apparmor-profiles
  • Bug 225615 - apparmor rejects glibc AT_PLATFORM directories
  • Bug 240734 - Applications using nss_ldap need to have access to ldap.secret
  • Bug 178073 - AppArmor - postfix - smtp - directive smtp_generic_maps
  • Bug 219580 - some programs require 'm' access to /etc/ld.so.cache
  • Bug 219583 - rejecting w access for syslog-ng
  • Bug 202095 - useradd / userdel profiles incomplete
  • Bug 197186 - apparmor breaks openntpd
  • Bug 221111 - ntpd needs access to /proc/net/if_inet6
  • Bug 220331 - syslog-ng cannot log news messages
  • Remove empty lines with spaces, trailing spaces
  • Remove Px rules on ld.so; remove ld.so family of profiles
  • New disabled profiles for clamav, passwd
  • New enabled profile for syslog-ng
  • Disable netstat profile
  • Postfix
    • TLS fixes
    • SMTP write to rewrite pipe
    • permissions=paranoid
  • sshd new audit requirements
  • ntpd
    • /var/tmp and /tmp fixes
    • Support W32Time authentication
  • Support GSS-TSIG authentication in bind
apparmor-utils
  • Translation fixes (#179656 & others)
  • Updated localization files
  • Repackaged tarball - as the previous version included an archive file not used for the build that still had proprietary headers. Removed the old archive file in the tarball. Re: bug 129516
  • Fixed bug 129516 - proprietary license headers removed
  • Added feature (#300906) to add syntax checking to wizards
apparmor-parser
  • Translation updates
  • Bug 240986 - apparmor generates bad policy for rules containing \\
  • [sles 10 sp1 checkin; #218961 below also removed libcap build dependency, as we now use the kernel's headers for our capability numbers]
  • More translation updates
  • Updates from the translation team
  • fix rc.aaeventd to depend on apparmor, not boot.apparmor (#214293)
  • Add audit_write and audit_control capabilities (#218961) (jjohansen@suse.de)
  • pull translation updates from lcn (ddrewelow@suse.de)
  • Use kernel's capability defines rather than libcap
  • /lib/lsb/init-functions provides killproc(), use it instead.
  • boot.apparmor should start after boot.localfs (#215156)
  • add support for #include'ing directories
  • remove /subdomain (#160020)
  • updated translation files (from SLE10)
  • make boot.localfs optional in boot.apparmor (#181972)

Solution

Please install the updates provided at the location noted below.

Installation notes

This update is provided as an RPM package that can easily be installed onto a running system by using this command:
rpm -Fvh yast2-apparmor.rpm apparmor-profiles.rpm apparmor-utils.rpm apparmor-parser.rpm

links to download packages

Download Source Packages

Download the source code of the patches for maintained products.


Disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.

Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.

© Micro Focus