UbuntuUpdates.org

Package "apparmor-utils"

Name: apparmor-utils

Description:

utilities for controlling AppArmor

Latest version: 5.0.0~beta1-0ubuntu7
Release: resolute (26.04)
Level: proposed
Repository: main
Head package: apparmor
Homepage: https://apparmor.net/

Links


Download "apparmor-utils"


Other versions of "apparmor-utils" in Resolute

Repository Area Version
base main 5.0.0~beta1-0ubuntu6

Changelog

Version: 5.0.0~beta1-0ubuntu7 2026-04-16 18:38:34 UTC

  apparmor (5.0.0~beta1-0ubuntu7) resolute; urgency=medium

  * Add patches to fix skb and v9 network iface mediation (LP: #2147551):
    - d/p/u/0006-parser-name-ns_domain-and-network_v9-classes.patch
    - d/p/u/0007-Set-parser-network.h-ip_conds-ptrs-to-null-in-its-fr.patch
    - d/p/u/0008-parser-move-to-encode-an-alternation-of-a-null-trans.patch
    - d/p/u/0009-parser-disable-ability-to-specify-interface-on-peer-.patch
    - d/p/u/0010-parser-fix-iface-perms-to-work-when-v9-and-v9_skb-ar.patch
    - d/p/u/0011-utils-add-support-for-iface-an-label-in-network-rule.patch
    - d/p/u/0012-parser-fix-label-match-for-default-label-values.patch
    - d/p/u/0013-parser-fix-FTBFS-due-to-missing-merge-edit.patch
    - d/p/u/0014-tests-check-if-skb-mediation-is-enabled.patch
  * Add patch to fix snap browser invocation from Evince and papers
    (LP: #2127874):
    - d/p/u/snap-browser-add-missing-perms-when-opening-from-link.patch
  * Add patch to pull the Rygel profile (LP: #2137088):
    - d/p/u/profiles-pull-rygel-profile.patch
  * Add patch to pull the openvpn profile (LP: #2146874):
    - d/p/u/profiles-pull-openvpn-profile.patch
  * d/apparmor.install,d/apparmor-profiles.install,d/apparmor.maintscript:
    account for the new location of the rygel and openvpn profile
  * Add patch to fix lsusb hwdb access (LP: #2148047):
    - d/p/u/lsusb-allow-reading-etc-udev-hwdb-bin.patch
  * Add patch for unix socket access in sanitized_helper (LP: #2148177):
    - d/p/u/profiles-grant-unix-domain-socket-access-to-sanitize.patch
  * Add patch to fix compressed cache mtime issues (LP: #2147986):
    - d/p/u/0001-parser-fix-rewriting-of-cache-after-zstd-recompressi.patch
    - d/p/u/0002-parser-refactor-compressed-policy-cache.patch
    - d/p/u/0003-parser-handle-compressed-cache-on-kernels-without-de.patch
    - d/p/u/0004-regression-fix-the-e2e-test-for-compressed-caches.patch
  * apparmor.postinst: remove separately generated compressed cache
    (LP: #2147986)

 -- Ryan Lee <email address hidden> Wed, 08 Apr 2026 10:26:51 -0700

2147551 skb mediation causes denials on kernels that support both v9 and skb
2127874 Clicking a hyperlink in Evince fails to open it if the default browser is a snap
2137088 apparmor denies acces at rygel in ubuntu 25.10 (and 26.04)
2146874 OpenVPN fails to execute update-systemd-resolved scripts due to restrictive AppArmor profile
2148047 lsusb AppArmor profile blocks access to /etc/udev/hwdb.bin, causing incomplete device identification
2148177 papers cannot open help
2147986 apparmor_parser: Failed to set the mtime of cache file



About   -   Send Feedback to @ubuntu_updates