AppArmor 4.0.3 was released 2024-08-14.
Introduction¶
AppArmor 4.0.3 is a bug fix release of the user space components of the AppArmor security project. The kernel portion of the project is maintained and pushed separately.
This version of the userspace should work with all kernel versions from 2.6.15 and later (some earlier version of the kernel if they have the apparmor patches applied).
Obtaining the Release¶
There are two ways to obtain this release either through gitlab or a tarball in launchpad.
Important note: the gitlab release tarballs differ from the launchpad release tarballs. The launchpad release tarball has a couple processing steps already performed:
- libapparmor
autogen.shis already done, meaning distros only need to use ./configure in their build setup - the docs for everything but libapparmor have already been built
gitlab¶
- https://gitlab.com/apparmor/apparmor/-/releases/v4.0.3
Changes in this Release¶
These release notes cover all changes between 4.0.2 ( 84a6bc1b6dcdfeabb1ed3597f01e314f3bcee5c1) and 4.0.2 (b4dfdf50) on the apparmor-4.0 branch.
Init¶
- aa-load
- fix incorrect strnlen length in aa_load.c load_policy_dir (MR:1290)
Libraries¶
- fix SWIG prototype declaration of aa_getpeercon_raw (MR:1291)
- explicitly initialize component in test_walk_one (MR:1292)
- fix undefined reference to aa_split_overlay_str (MR:1288)
Policy¶
abstractions¶
- base
- allow reading of fips_enabled (MR:1286)
profiles¶
- runc
- allow /usr/bin/runc as well as /usr/sbin/runc (MR:1300)
- firefox
- add fcitx portal rules (MR:1280)