* apparmor-easyprof-ubuntu.install: install data/hardware/*, thus allowing
porters, OEMs, etc to ship their own policy without having to modify this
package (LP: #1197133)
* add data/hardware/graphics.d/* and data/hardware/audio.d/*, namespaced to
this package. We will move these out to lxc-android-config later
* tests/test-data.py: adjust to test data/hardware/*
* accounts: move to reserved status until LP: 1230091 is fixed
* calendar: remove workaround rule for gio DBus path (LP: #1227295)
* add usermetrics policy group so apps can update the infographic
* ubuntu-* templates:
- allow StartServiceByName on the system bus too. This is needed by the
new usermetrics policy group and we will presumably have more going
forward (eg location)
- account for /org/freedesktop/dbus object path. This seems to be used by
the python DBus bindings (eg, friends)
- move hardware specific accesses out of the templates into
hardware/graphics.d/ in preparation of the move to shipping these in
lxc-android-config (note, this doesn't change apparmor policy in any
way)
- add 'r' to dbus system bus socket (LP: #1208988)
- add ixr access to thumbnailer helper (LP: #1234543)
- finetune HUD access
- don't use ibus abstraction but instead use 'r' access for
owner @{HOME}/.config/ibus/**
- don't use freedesktop.org abstraction but instead add read accesses
for /usr/share/icons and various mime files
- updates for new gstreamer
- move in gstreamer accesses from audio policy groupd due to hybris
* ubuntu-sdk template:
- remove workaround paths now that ubuntu-ui-toolkit is using
QCoreApplication::applicationName based on MainView's applicationName
(LP: #1197056, #1197051, #1224126, LP: #1231863)
* ubuntu-webapp template:
- allow read access to /usr/share/unity-webapps/userscripts/**
- allow rix to gst-plugin-scanner
* add reserved friends policy group (reserved because it needs integration
with trust-store to be used by untrusted apps)
* remove peer from receive DBus rules in the ubuntu-* templates and the
contacts, history, and location policy groups (LP: #1233895)
* audio:
- move gstreamer stuff out to templates since hybris pulls it in for all
apps
- include hardware/audio.d for hardware specific accesses
-- Jamie Strandboge <email address hidden> Mon, 07 Oct 2013 13:18:27 -0500
This bug was fixed in the package apparmor- easyprof- ubuntu - 1.0.35
--------------- easyprof- ubuntu (1.0.35) saucy; urgency=low
apparmor-
* apparmor- easyprof- ubuntu. install: install data/hardware/*, thus allowing graphics. d/* and data/hardware/ audio.d/ *, namespaced to p/dbus object path. This seems to be used by graphics. d/ in preparation of the move to shipping these in android- config (note, this doesn't change apparmor policy in any /.config/ ibus/** ication: :applicationNam e based on MainView's applicationName unity-webapps/ userscripts/ **
porters, OEMs, etc to ship their own policy without having to modify this
package (LP: #1197133)
* add data/hardware/
this package. We will move these out to lxc-android-config later
* tests/test-data.py: adjust to test data/hardware/*
* accounts: move to reserved status until LP: 1230091 is fixed
* calendar: remove workaround rule for gio DBus path (LP: #1227295)
* add usermetrics policy group so apps can update the infographic
* ubuntu-* templates:
- allow StartServiceByName on the system bus too. This is needed by the
new usermetrics policy group and we will presumably have more going
forward (eg location)
- account for /org/freedeskto
the python DBus bindings (eg, friends)
- move hardware specific accesses out of the templates into
hardware/
lxc-
way)
- add 'r' to dbus system bus socket (LP: #1208988)
- add ixr access to thumbnailer helper (LP: #1234543)
- finetune HUD access
- don't use ibus abstraction but instead use 'r' access for
owner @{HOME}
- don't use freedesktop.org abstraction but instead add read accesses
for /usr/share/icons and various mime files
- updates for new gstreamer
- move in gstreamer accesses from audio policy groupd due to hybris
* ubuntu-sdk template:
- remove workaround paths now that ubuntu-ui-toolkit is using
QCoreAppl
(LP: #1197056, #1197051, #1224126, LP: #1231863)
* ubuntu-webapp template:
- allow read access to /usr/share/
- allow rix to gst-plugin-scanner
* add reserved friends policy group (reserved because it needs integration
with trust-store to be used by untrusted apps)
* remove peer from receive DBus rules in the ubuntu-* templates and the
contacts, history, and location policy groups (LP: #1233895)
* audio:
- move gstreamer stuff out to templates since hybris pulls it in for all
apps
- include hardware/audio.d for hardware specific accesses
-- Jamie Strandboge <email address hidden> Mon, 07 Oct 2013 13:18:27 -0500