apparmor-parser-lang-3.0.4-150500.11.9.1<>,Pe%p9|hi]`!餯!(1UdpW|}=IirT a\07qmYLKKAp&\l@%?U,.d@*k*ѱlH i5W-:Y<~Q4"CȨw`e$Z^ά(y;p-Pz/Z׉8F2uNK3<׿fgpj%;tV“liFbɩ u>T: "Bha^,C!_NmV>>?d + M  (.8?4? ? 0? ,? +? l?h???0D(89:%XFyG?H?I?XHYP\l?]h?^4bcdeflu,?v(z)<@PTX^Capparmor-parser-lang3.0.4150500.11.9.1Translations for package apparmorProvides translations for the "apparmor" package.e%h03-ch2cǺSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Localizationhttps://launchpad.net/apparmorlinuxnoarch2-L*>)J{%'G@L0E E+7X&,pzDnG1E/ (*6+o2++X9YI;vDDzT''́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-3.0.4-150500.11.9.1.src.rpmapparmor-parser-langapparmor-parser-lang-all    apparmor-parserrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.0.4-14.6.0-14.0-15.2-14.14.3ev@d@d@c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh03-ch2c 1696247589  !"#$%&'()*+,-./0123456789:;<=>?arbgbncacsdadedeelenenenenesesetfafafififrglguhehihrhuididitjakmkoltmkmrnbnlpaplptptptrororuruskslsqsrsvsvtathtrtrugukviwazhzh3.0.4-150500.11.9.13.0.4  !""#$$%%&'()**+,--./0123apparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.mo/usr/share/locale/ar/LC_MESSAGES//usr/share/locale/bg/LC_MESSAGES//usr/share/locale/bn/LC_MESSAGES//usr/share/locale/ca/LC_MESSAGES//usr/share/locale/cs/LC_MESSAGES//usr/share/locale/da/LC_MESSAGES//usr/share/locale/de/LC_MESSAGES//usr/share/locale/el/LC_MESSAGES//usr/share/locale/en_AU/LC_MESSAGES//usr/share/locale/en_CA/LC_MESSAGES//usr/share/locale/en_GB/LC_MESSAGES//usr/share/locale/es/LC_MESSAGES//usr/share/locale/et/LC_MESSAGES//usr/share/locale/fa/LC_MESSAGES//usr/share/locale/fi/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/gl/LC_MESSAGES//usr/share/locale/gu/LC_MESSAGES//usr/share/locale/he/LC_MESSAGES//usr/share/locale/hi/LC_MESSAGES//usr/share/locale/hr/LC_MESSAGES//usr/share/locale/hu/LC_MESSAGES//usr/share/locale/id/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/ja/LC_MESSAGES//usr/share/locale/km/LC_MESSAGES//usr/share/locale/ko/LC_MESSAGES//usr/share/locale/lt/LC_MESSAGES//usr/share/locale/mk/LC_MESSAGES//usr/share/locale/mr/LC_MESSAGES//usr/share/locale/nb/LC_MESSAGES//usr/share/locale/nl/LC_MESSAGES//usr/share/locale/pa/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/pt/LC_MESSAGES//usr/share/locale/pt_BR/LC_MESSAGES//usr/share/locale/ro/LC_MESSAGES//usr/share/locale/ru/LC_MESSAGES//usr/share/locale/sk/LC_MESSAGES//usr/share/locale/sl/LC_MESSAGES//usr/share/locale/sq/LC_MESSAGES//usr/share/locale/sr/LC_MESSAGES//usr/share/locale/sv/LC_MESSAGES//usr/share/locale/ta/LC_MESSAGES//usr/share/locale/th/LC_MESSAGES//usr/share/locale/tr/LC_MESSAGES//usr/share/locale/ug/LC_MESSAGES//usr/share/locale/uk/LC_MESSAGES//usr/share/locale/vi/LC_MESSAGES//usr/share/locale/wa/LC_MESSAGES//usr/share/locale/zh_CN/LC_MESSAGES//usr/share/locale/zh_TW/LC_MESSAGES/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30900/SUSE_SLE-15-SP5_Update/bf7fc34cc3d034d75e6790157f5ae668-apparmor.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linux!TN^CLA;apparmor-parserutf-88161b17f3a2cce876da0926860d3e672770a3eb3f09ba2c47046186ab827a998? 7zXZ !t/N9"T]"k%αCQZuGQ>)1p n3CH.o$ xG>`try/gVsW7H+:D'EkcGR@ a&.3Omos炩]~4\0E<{Ei$ր '-\mLƞ>r> P^39I,Q)%wn|-t86VJQVjp^<؄z-|OY1zpJ8g%w&cPElryJAi5Ïn[bOP g[BIi &*W3FBvhFRWl<-I Wl됦Ȯ*.i!MZ qMl鬲>XSp'_0D1zW3oC4d 鼱هRh`mUƄʁf+]GChɷvl4Y~ODEݧ66$E>>~+ RG&ܛYTKh.no;Pf҃S_P2pj:A+z,k߄(o|1az _Z7m ;m;qDb ⶵ̳5NJ+0LԤV083*u'_Td.HAuOh7k_3\NsMD!5𠥄ܒlk;a2L=72%6x0I+ A)5c!vD 9 ǫX@d~#K6bGc|1sOV6ke_Tp)}!En LD ? ؆~?fEX.RE6%Jۼ>4$UcXяW&ڤdJTvP՛/WV IK# ʄ{NVB1ؖ=t$qP|l@0mkS#/O20N`YԈi?K{:G./ƒ~aJ?rǂ.-`eOD?7N-t1Ű$NfNH̹Bռ=Kgxrp ٝm\.̌vֱ)_? XE]fVgˈ hEQM羻WV B3?^XVnj>[HapasaYY*aԨ~(5C%,d !XWsN_<"|kFo|9}-I[ĭxJ9S< 𠫩}eŕ˚[>e߯$IkBF?Lʴ2d`DyvBhw_s;Я@fVT(ĵH<yfdX58v̛GR9#@7\莊r/cX9a!CZW[Hfi`D-[ %. K8gY'&oBy^t|7EBV㼣,X"z:u@=k4~m혉ֹ_EʰeY.ض؈uӬ-b*fa%y@c R~ʮQR'hBT>R2\ );O}1jb9fIu$F[]0zjx<3+e5X M@GBs 1[*l6W!ޯ P;| Xkw 'lRPTO猇*!˓{e:,kvu+~5S-9nԣ*ӓҶ۫W0]a˗6'eh*lJ 'HoO[X r!49OPХ_XZJcPZhf#7D >FAJO$ο' M<M~o#AkV0AE#/"ղ(Ҭ[t8x$z,d?1cC@2b $c}c L 4w   ] {INlciRvI6M]aS=Z *Ls`3.6;UwDc~VRJcThp|ٹ{ʖO+ 0~}EO4}DNEO0և(8/R;ݍgԴUP#,fu 0KwQ2z1+`PxSeh̫0j~_:t~I Z ;㈁60WؤIO/:W[0Wj&i$N !(Gp=7t8xGϨy/XʒV ;ƌ$ԞY/2?V:XEKU(42"T}460!]Wn`ctQz^K.Q\9m^BmM)Yf[C1Ī@{7>],l $2@G*.#w[VZ_[8$PQoݵ&Oѝ5X8;.X}?xt8﬘@;'T2hK"3'[CZTXy<]'qƀ '0!2Ń .3qfuOAĘFՓӝP-(϶NW¤*`|-P2 !#z=ծ1@4>xf^%xy0?PxDv0Ѿw S"}ag) FxvTbTe9#6GiH$3DΠ\\h@8ӕCap \=g$GOLf';+FMZeμX,mf:6ex6j Y |Ò(K׍>o<[,X[p^ף/ k]#l@8F^u86PV| dUq@4=N$ǹ/ҎqjR)jߚ+M Z>8LeRIz̉~'&UClRKgaD펎:RƤ34!>TAOMl3rQGI _ Ϧx1`BK?=򘫸o Ldܜ|Nkpc(nfZ-ǚ4I߀mBl{ HN`,nD&[4ӐtעI}hl(2$<ƿf?Fyi[/mBH9jAOYl^` zni5 8DhȔVA^K 'y B㵷Ti&&Xvպb)O&RJ29{h𵅝i˼KMICCD`.cK)G-?2휓uб`%X  [,:W=\u3##, ΊQ}fNzC j}vXy|1^q/r%G M1H@[^*`c:dz GC0g0#^NgA6*QO {-l^\:3K]r?`{)0q `IֻH;f|#^I`` ߠ_YwP^f'9eV~a9Vx ^*M v9tHGPX .5@ vD4]ԸeyMq-kDU;E=ZTzvWGg<7Ot$Ko'STbs;[%8 |qσپ.=fas>9т(6<[HpU3.YfVkj7_3*;Ƞ`2Z82ⓣe}1 jxteج)ۭsP<)p%Wy*#m-{nԯ G2Bkp#*?P0p:e, !+S#[A/KF6 %ӠBu p0}v(;x_;e>bFd OS^  OGq4ڛL.Bnkk5S:YSnQMmYµhLъj 06wa^1hC@:t%kR'*c7?yS'"O(}GGs=!uG,ML{48[_E<6gwDǝ^\_8^-]*e%B%7fҫWGViȇ9xO1%^ءwllt<|{Q A[Mxr=LUQɚ] T1\^^hY@޳& XC 0t/sq^Aj%a-hJ3vIoHOTI; PO#> ֚8qH6Ԃhlwj;aȳ<NJ)n+=E?zbB4]'ܐCfFJ܈X!ш`tT{N>FG$%?e'!W>6p3:ɪ0^r?me9Sp ͅBl \\U7RR▯+dPEl˞mG( wvcp$[k ʌL;I.%qkJ9,kyB!D9P?s@^oƙG9Mm%qّd~:5\?']uSMfyd~ pnV#Syn 4ζ]k(VkM(h 4f2KAY|lҝjד^J~5vľ {XL'[34!is|n7wgRsP!s((>>,Ɛ*Nn33%C6R8' <`OBcPpf!J=-AqG:sA>t@Ea.N5OcYGB~0.>ͯ 6_._]fEy@CqϞ A*#x/ڥџx*&QxnY|d q#.5LpVE,E/I\,׭>ᑮѰ_3рfmlOwf&OϹGR#/2Im8|ě_#\ ys }m1YC;(HZ aUa8_SY e!2dۿ}dzĮ3)f땑msmGGrB)hVU¿, X $ Mrbe+Wew"Q$ !#FchaR'`TETO)ɛdw=a7xEzKx> YZ