[pkg-apparmor] [apparmor-profiles-extra] 01/02: Drop ntpd profile and tunable: they are shipped by the ntp package starting with 1:4.2.8p7+dfsg-1 (Closes: #768415, #799084).

Intrigeri intrigeri at moszumanska.debian.org
Sat Apr 30 11:01:10 UTC 2016


This is an automated email from the git hooks/post-receive script.

intrigeri pushed a commit to branch master
in repository apparmor-profiles-extra.

commit 237e8f5d2cca1e5f2e14f7407174414c489fbed1
Author: intrigeri <intrigeri at boum.org>
Date:   Sat Apr 30 10:47:33 2016 +0000

    Drop ntpd profile and tunable: they are shipped by the ntp package starting with 1:4.2.8p7+dfsg-1 (Closes: #768415, #799084).
---
 debian/README.Debian   |  4 +--
 debian/copyright       | 22 --------------
 profiles/tunables/ntpd | 15 ----------
 profiles/usr.sbin.ntpd | 80 --------------------------------------------------
 4 files changed, 1 insertion(+), 120 deletions(-)

diff --git a/debian/README.Debian b/debian/README.Debian
index 33181b1..7780427 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -7,8 +7,6 @@ Included profiles
   as of revision 146.
 - irssi: taken from the apparmor-profiles repository at revision 132.
   Still up-to-date as of revision 146.
-- ntpd: taken from Ubuntu's ntp 1:4.2.8p4+dfsg-3ubuntu4.
-  Still up-to-date as of 4.7.4-1ubuntu1.
 - Pidgin: taken from the apparmor-profiles repository at revision 153,
   modified with the changes submitted upstream via
   https://code.launchpad.net/~intrigeri/apparmor-profiles/pidgin-vs-gstreamer-1.6/+merge/277499
@@ -24,4 +22,4 @@ apparmor-profiles repository
 
 https://code.launchpad.net/~apparmor-dev/apparmor-profiles/master
 
- -- intrigeri <intrigeri at debian.org>, Thu, 28 Apr 2016 11:21:02 +0200
+ -- intrigeri <intrigeri at debian.org>, Sat, 30 Apr 2016 12:46:46 +0200
diff --git a/debian/copyright b/debian/copyright
index 266590f..9d2c812 100644
--- a/debian/copyright
+++ b/debian/copyright
@@ -25,11 +25,6 @@ Files: profiles/usr.sbin.tcpdump
 Copyright: 2008-2014 AppArmor developers <apparmor at lists.ubuntu.com>
 License: GPL-2+
 
-Files: profiles/usr.sbin.ntpd profiles/tunables/ntpd
-Copyright: 2002-2005 Novell/SUSE
-           2009-2012 Canonical Ltd.
-License: GPL-2
-
 License: GPL-2+
  This program is free software; you can redistribute it and/or modify
  it under the terms of the GNU General Public License as published by
@@ -47,20 +42,3 @@ License: GPL-2+
  .
  On Debian systems, the complete text of the GNU General
  Public License can be found in `/usr/share/common-licenses/GPL-2'.
-
-License: GPL-2
- This program is free software; you can redistribute it and/or modify
- it under the terms of version 2 of the GNU General Public License as
- published by the Free Software Foundation.
- .
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- GNU General Public License for more details.
- .
- You should have received a copy of the GNU General Public License along
- with this program; if not, write to the Free Software Foundation, Inc.,
- 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
- .
- On Debian systems, the complete text of the GNU General
- Public License can be found in `/usr/share/common-licenses/GPL-2'.
diff --git a/profiles/tunables/ntpd b/profiles/tunables/ntpd
deleted file mode 100644
index 1fc2d8f..0000000
--- a/profiles/tunables/ntpd
+++ /dev/null
@@ -1,15 +0,0 @@
-# vim:syntax=apparmor
-# ------------------------------------------------------------------
-#
-#    Copyright (C) 2002-2005 Novell/SUSE
-#    Copyright (C) 2011 Canonical, Ltd.
-#
-#    This program is free software; you can redistribute it and/or
-#    modify it under the terms of version 2 of the GNU General Public
-#    License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-#Add your ntpd devices here eg. if you have a DCF clock
-# @{NTPD_DEVICE}="/dev/ttyS1"
-@{NTPD_DEVICE}="/dev/null"
diff --git a/profiles/usr.sbin.ntpd b/profiles/usr.sbin.ntpd
deleted file mode 100644
index aec86fb..0000000
--- a/profiles/usr.sbin.ntpd
+++ /dev/null
@@ -1,80 +0,0 @@
-# vim:syntax=apparmor
-# Updated for Ubuntu by: Jamie Strandboge <jamie at canonical.com>
-# ------------------------------------------------------------------
-#
-#    Copyright (C) 2002-2005 Novell/SUSE
-#    Copyright (C) 2009-2012 Canonical Ltd.
-#
-#    This program is free software; you can redistribute it and/or
-#    modify it under the terms of version 2 of the GNU General Public
-#    License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-#include <tunables/global>
-#include <tunables/ntpd>
-/usr/sbin/ntpd {
-  #include <abstractions/base>
-  #include <abstractions/nameservice>
-  #include <abstractions/user-tmp>
-
-  capability ipc_lock,
-  capability net_bind_service,
-  capability setgid,
-  capability setuid,
-  capability sys_chroot,
-  capability sys_resource,
-  capability sys_time,
-  capability sys_nice,
-
-  # ntp uses AF_INET, AF_INET6 and AF_UNSPEC
-  network dgram,
-  network stream,
-
-  @{PROC}/net/if_inet6 r,
-  @{PROC}/*/net/if_inet6 r,
-  @{NTPD_DEVICE} rw,
-
-  /{,s}bin/      r,
-  /usr/{,s}bin/  r,
-  /usr/sbin/ntpd rmix,
-
-  /etc/ntp.conf r,
-  /etc/ntp.conf.dhcp r,
-  /etc/ntpd.conf r,
-  /etc/ntpd.conf.tmp r,
-  /var/lib/ntp/ntp.conf.dhcp r,
-
-  /etc/ntp.keys r,
-  /etc/ntp/** r,
-
-  /etc/ntp.drift rwl,
-  /etc/ntp.drift.TEMP rwl,
-  /etc/ntp/drift* rwl,
-  /var/lib/ntp/*drift rw,
-  /var/lib/ntp/*drift.TEMP rw,
-
-  /var/log/ntp w,
-  /var/log/ntp.log w,
-  /var/log/ntpd w,
-  /var/log/ntpstats/clockstats* rwl,
-  /var/log/ntpstats/loopstats*  rwl,
-  /var/log/ntpstats/peerstats*  rwl,
-  /var/log/ntpstats/protostats* rwl,
-  /var/log/ntpstats/rawstats*   rwl,
-  /var/log/ntpstats/sysstats*   rwl,
-
-  /{,var/}run/ntpd.pid w,
-
-  # samba4 ntp signing socket
-  /{,var/}run/samba/ntp_signd/socket rw,
-
-  # For use with clocks that report via shared memory (e.g. gpsd),
-  # you may need to give ntpd access to all of shared memory, though
-  # this can be considered dangerous. See https://launchpad.net/bugs/722815
-  # for details. To enable, add this to local/usr.sbin.ntpd:
-  #     capability ipc_owner,
-
-  # Site-specific additions and overrides. See local/README for details.
-  #include <local/usr.sbin.ntpd>
-}

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/collab-maint/apparmor-profiles-extra.git



More information about the pkg-apparmor-team mailing list