WARNING this is a beta - NOT a final release¶
AppArmor 4.0-beta4 was released 2024-04-08.
Introduction¶
AppArmor 4.0 is a major new release of the AppArmor that is in development.
Apprmor 4.0 is a bridge release between older AppArmor 3.x policy and the newer AppArmor 4 style policy which introduces several new features that are not backwards compatible. As such AppArmor 4.0 will be a short lived release, and will not receive long term support. The following AppArmor 4.1 feature release is planned to be a regular release, please take this into account when including AppArmor 4.0 into a distro release. For questions around compatibility see the compatibility matrix.
These release notes cover changes between AppArmor-4.0~beta3 and AppArmor-4.0~beta4
Notes¶
- new dependency build dependency ** autoconf-archive **
This Release contains only Bug Fixes to AppArmor 4.0 beta3
Misc¶
- Some features will work with older kernels but many of the features in apparmor 4 with require a development kernel.
- The kernel portion of the project is maintained and pushed separately.
- AppArmor 4.0 contains all bug fixes and policy updates from apparmor 3.1
- Some new features will not be fully supported in some utilities. In these cases it was decided that releasing a new feature earlier had more benefit than delaying it for full utility support. Please see the feature support matrix.
Bug Fixes¶
policy compiler (aka apparmor_parser)¶
- fix coverity static analysis failure (MR:1188)
- fix getattr and setattr perm mapping on mqueue rules (MR:1197, AABUG:377, AABUG:378)
Utils¶
Policy¶
abstractions¶
- Move pam-related permissions to abstractions/authentication (MR:1191, BOO:1220032)
profiles¶
- new bwrap (MR:1204,MR:1206, AABUG:382, LP:2046844)
- new unshare (MR:1204,MR:1206, AABUG:382, LP:2046844)
- firefox
- allow locking of *.sqlite-shm files in user cache area (MR:1193, AABUG:380)
- samba
- allow /etc/gnutls/config & @{HOMEDIRS} (MR:1200, AABUG:379)
- sshd
- Add new permissions needed on Ubuntu 24.04 (MR:1196, LP:2060100)
unconfined profiles¶
- update
-
firefox
- adjust unconfined firefox profile to support mozilla.org download (MR:1203, LP:2056297)
-
new
- tuxedo-control-center (MR:1187, LP:2046844)