[pkg-apparmor] apparmor_2.11.1-4_sourceonly.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 07 Dec 2017 07:32:02 +0000
Source: apparmor
Binary: apparmor apparmor-utils apparmor-profiles libapparmor-dev libapparmor1 libapparmor-perl libapache2-mod-apparmor libpam-apparmor apparmor-notify python-libapparmor python3-libapparmor python-apparmor python3-apparmor dh-apparmor apparmor-easyprof
Architecture: source
Version: 2.11.1-4
Distribution: unstable
Urgency: medium
Maintainer: Debian AppArmor Team <pkg-apparmor-team at lists.alioth.debian.org>
Changed-By: intrigeri <intrigeri at debian.org>
Closes: 845232 877581 880078 880859 883682 883703
Description: 
 apparmor-easyprof - AppArmor easyprof profiling tool
 apparmor-notify - AppArmor notification system
 apparmor-profiles - profiles for AppArmor Security policies
 apparmor   - user-space parser utility for AppArmor
 apparmor-utils - utilities for controlling AppArmor
 dh-apparmor - AppArmor debhelper routines
 libapache2-mod-apparmor - changehat AppArmor library as an Apache module
 libapparmor1 - changehat AppArmor library
 libapparmor-dev - AppArmor development libraries and header files
 libapparmor-perl - AppArmor library Perl bindings
 libpam-apparmor - changehat AppArmor library as a PAM module
 python3-apparmor - AppArmor Python3 utility library
 python3-libapparmor - AppArmor library Python3 bindings
 python-apparmor - AppArmor Python utility library
 python-libapparmor - AppArmor library Python bindings
Changes:
 apparmor (2.11.1-4) unstable; urgency=medium
 .
   * Bump pinned feature set to linux-image-4.14.0-1's, version 4.14.2-1
     - Pinning a feature set without "mount", as we did before this change,
       breaks mount operations due to a bug in the kernel (Closes: #883703).
       Thanks to Fabian Grünbichler and Felix Geyer for reporting this.
     - AppArmor maintainers in Debian have been testing 4.14 without pinning
       for a while and all the known issues were fixed; it's time to enable
       4.14's features so we can learn what parts of our policy still need
       updates (Closes: #880078, #877581).
   * Move features file to /usr/share/apparmor-features (Closes: #883682).
     Thanks to Fabian Grünbichler <f.gruenbichler at proxmox.com> for the patch.
   * Document in apparmor/README.Debian where online documentation wrt. AppArmor
     on Debian lives (Closes: #845232). Thanks to Wouter Verhelst and Jean-Michel
     Vourgère for the suggestion.
   * Improve usability of apparmor-notify:
     - notify.conf: unset use_group.
       aa-notify checks that it can read the selected log file — and aborts
       if it can't — before it checks group membership vs. use_group, so in
       practice setting use_group is only useful for users who are allowed
       to read logs but don't want to see notifications. This seems to be
       a corner case, easily addressed per-user (~/.apparmor/notify.conf)
       or system-wide (by deinstalling apparmor-notify).
       So let's instead optimize for a more common use case, i.e. users who can
       read logs and want to see the notifications. This change does not
       impact the most common use case, i.e. desktop users who are not allowed
       to read logs (Closes:  #880859).
     - Document in apparmor-notify/README.Debian that one must be in the "adm"
       group to use aa-notify.
     Thanks to Lisandro Damián Nicanor Pérez Meyer and Salvatore Bonaccorso
     whose combined bug reports lead to this solution.
   * /lib/apparmor/functions: don't delete /etc/apparmor.d/cache/CACHEDIR.TAG
     ourselves (necessary, but not sufficient, to fix #883584).
   * Declare compliance with Standards-Version 4.1.2.
Checksums-Sha1: 
 e7d5c32e053fbb310a873c6320e6ebde5d5cf8bb 3405 apparmor_2.11.1-4.dsc
 f0afff370e122ed16d6c18d575ec5154aeba5e60 86264 apparmor_2.11.1-4.debian.tar.xz
Checksums-Sha256: 
 04dc5447fd89af241309418b21869692f11be178d655290fc64f59d1291ba0e0 3405 apparmor_2.11.1-4.dsc
 36b4623f0f1cf4b3d242b17a1b06837d58692af002d38c56141575548d9f1888 86264 apparmor_2.11.1-4.debian.tar.xz
Files: 
 e7082f1ccb8005a9ef6a9a9658520d20 3405 admin optional apparmor_2.11.1-4.dsc
 c960d046dbfcc1a298e5670c43bfe903 86264 admin optional apparmor_2.11.1-4.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=9zZO
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.