Package "libapparmor-dev"

  apparmor (4.0.1really4.0.1-0ubuntu0.24.04.6) noble; urgency=medium

  * This is an SRU, tracked in LP: #2143863
  * Add patch to remove the busybox and nautilus profiles (LP: #2142792):
    - d/p/u/delete-the-busybox-and-nautilus-profiles.patch
  * d/apparmor.install, d/apparmor.maintscript: account for removal of
    the busybox and nautilus profiles
  * Add patches to fix socketpair regression test (LP: #2124206):
    - d/p/u/-0002-tests-regression-fix-regression-test-for-upstream.patch
    - d/p/u/-0001-tests-regressions-fix-unix_socket_pathname.sh-for.patch
    - d/p/u/0000-tests-regression-increase-unix-socket-test-timeout.patch
    - d/p/u/0001-tests-regression-Update-socketpair-test-for-upstream.patch
    - d/p/u/0002-tests-regression-update-socketpair-tests-to-detect-d.patch
    - d/p/u/0003-tests-regression-update-tests-requires-for-v9-af_unix.patch
    - d/p/u/0004-tests-regression-Improve-output-of-require_any_of_k.patch
    - d/p/u/0005-tests-regression-update-network-requirements-for-v9.patch
    - d/p/u/0006-regression-tests-update-logic-to-support-v9-af_unix-.patch
    - d/p/u/0007-tests-regressions-Fix-socket-pair-for-v7-semantics.patch
  * Add patches to fix libapparmor features parsing (LP: #2105986):
    - d/p/u/libapparmor-feature-match-prefixes.patch
    - d/p/u/libapparmor-bump-patch-version-for-features-prefix.patch
    - d/p/u/libapparmor-add-test-for-libapparmor-features-prefix.patch
  * Add patch to fix parser handling of norelatime mount flag
    (LP: #2110688):
    - d/p/u/parser-fix-handling-of-norelatime-mount-rule-flag.patch
  * Add patch to fix incorrect man page information (LP: #2110630)
    - d/p/u/fix-incorrect-mount-flag-apparmor.d-docs.patch
  * Add patch to add regression tests for the above two patches:
    - d/p/u/regression-verify-documented-mount-flag-behavior.patch

 -- Ryan Lee <email address hidden> Fri, 20 Feb 2026 15:51:51 -0800

  apparmor (4.0.1really4.0.1-0ubuntu0.24.04.5) noble; urgency=medium

  * profiles: make /sys/devices PCI paths hex-aware (LP: #2115234)

 -- Keifer Snedeker <email address hidden> Fri, 15 Aug 2025 13:16:02 +0100

  apparmor (4.0.1really4.0.1-0ubuntu0.24.04.4) noble; urgency=medium

  * d/p/u/fix-redefinition-of-ignored-var.patch Fixes a regression caused by a
    commit that changed the number of return values for the
    get_next_to_profile() function. This patch is backported from upstream
    (LP: #2078467)

 -- Bryan Fraschetti <email address hidden> Wed, 19 Mar 2025 18:09:43 +0000

  apparmor (4.0.1really4.0.1-0ubuntu0.24.04.3) noble; urgency=medium

  * Revert to version 4.0.1-0ubuntu0.24.04.2 except for the patch
    that enables the bwrap-userns-restrict profile (LP: #2072811).
  * New upstream release.
    (LP: #2064672, LP: #2046844, LP: #2060100, LP: #2056297)
  * Drop patches which have now been applied upstream
    - d/p/u/parser-fix-issues-appointed-by-coverity.patch
    - d/p/u/profiles-add-unconfined-profile-for-tuxedo-control-c.patch
    - d/p/u/parser-support-uin128_t-key-as-a-pair-of-uint64_t-nu.patch
    - d/p/u/Minor-improvements-for-MountRule.patch
  * Add patch to add balena-etcher profile (LP: #2046844)
    - d/p/u/profiles-add-unconfined-balena-etcher-profile.patch
  * Add upstream patch to relax mount rules to fix use of virtiofs and
    other file-system types
    - d/p/u/mountrule-relaxing-constraints-on-fstype.patch
  * Refresh
    - d/p/u/samba-systemd-interaction.patch
    - d/p/u/parser-add-support-for-prompting.patch
      - Add condition in policydb serialization to only encode xtable if
      kernel_supports_permstable32
  * Fix d/p/u/userns-runtime-disable.patch to work when
    kernel.apparmor_restrict_unprivileged_userns does not exist by adding
    -e to sysctl.
  * d/apparmor-profiles.install
    - install new profile
      - unshare-userns-restrict
      - bwrap-userns-restrict
  * d/apparmor.install
    - install new profiles
      - wike - changed installation from apparmor to apparmor.d
      - foliate
      - balena-etcher
      - transmission
  * d/control: Remove obsolete lsb-base Depends and swap pkg-config to
    pkgconf for Build-Depends

 -- Georgia Garcia <email address hidden> Thu, 18 Jul 2024 15:28:46 -0300

  apparmor (4.0.1really4.0.0-beta3-0ubuntu0.1) noble; urgency=medium

  * Due to regression, revert changes in previous update back to a
    source tree equivalent to 4.0.0-beta3-0ubuntu3 (LP: #2072811).
  * This drops /etc/apparmor.d/bwrap-userns-restrict, allowing various
    Flatpak apps to save files again.
  * d/apparmor.maintscript: rm_conffile on the following in
    /etc/apparmor.d/ to properly revert conffiles introduced in the
    update being reverted:
    - abstractions/transmission-common
    - balena-etcher
    - bwrap-userns-restrict
    - foliate
    - transmission
    - wike

 -- Robie Basak <email address hidden> Sun, 14 Jul 2024 22:25:31 +0000