click-apparmor (0.2ubuntu1) trusty-proposed; urgency=medium

  * Build-depend on apparmor-easyprof. (LP: #1451459)

 -- Matthias Klose <doko@carbon>  Thu, 17 Sep 2015 01:05:09 +0200

click-apparmor (0.2) trusty; urgency=low

  * aa-exec-click: don't allow running under X by default
    - abort if running under X
    - add -x option to force running under X
    - add aa-exec-click.1 man page
    - debian/click-apparmor.manpages: install aa-exec-click.1
  * debian/control:
    - drop unneeded Depends on python3-click
    - Build-Depends on pyflakes
  * add Makefile for tests
  * debian/rules:
    - don't also call dh_auto_build now that we have a Makefile
    - update to use Makefile for test commands
  * support alternate frameworks and subframeworks
  * add API for querying policy version given the click framework
  * add aa-clickquery tool to use query API with associated man page and
    autopkgtest
  * add aa-clickhook man page

 -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 14 Mar 2014 10:17:11 -0500

click-apparmor (0.1.15.3) trusty; urgency=low

  [ Jamie Strandboge ]
  * regenerate policy if hook symlink is newer than the profile (LP: #1291549)
  * debian/control: update for CI Train
    - Set X-Auto-Uploader to no-rewrite-version
    - Set Vcs-Bzr to the new target branch

 -- Ubuntu daily release <ps-jenkins@lists.canonical.com>  Thu, 13 Mar 2014 02:18:35 +0000

click-apparmor (0.1.14) trusty; urgency=medium

  * implement autopkgtests
    - add debian/tests/control
    - add preliminary tests to debian/tests
    - adjust debian/control for XS-Testsuite
  * test-clicktool.py: don't run unload profiles if ADTTMP is set
  * apparmor/click.py: adjust to add mock_testenv and honor it to skip
    checking apparmor_dirs when set

 -- Jamie Strandboge <jamie@ubuntu.com>  Wed, 05 Feb 2014 17:35:29 -0500

click-apparmor (0.1.13) trusty; urgency=low

  * prepend the click install directory to XDG_DATA_DIRS (LP: #1250546)
  * aa-exec-click: adjust to update LD_LIBRARY_PATH and QML2_IMPORT_PATH
  * debian/control: make click-apparmor Architecture: any so we can obtain
    the gnu triplet
  * debian/rules: adjust aa-exec-click for gnu triplet

 -- Jamie Strandboge <jamie@ubuntu.com>  Tue, 17 Dec 2013 10:18:55 -0600

click-apparmor (0.1.12) trusty; urgency=low

  [ Colin Watson ]
  * Treat manifests as UTF-8, even in non-UTF-8 locales (LP: #1245677).

 -- Jamie Strandboge <jamie@ubuntu.com>  Mon, 28 Oct 2013 19:33:23 -0700

click-apparmor (0.1.11) saucy; urgency=low

  * don't traceback on os.remove (LP: #1234908)

 -- Jamie Strandboge <jamie@ubuntu.com>  Thu, 03 Oct 2013 14:46:54 -0500

click-apparmor (0.1.10) saucy; urgency=low

  * work around lack of first boot postinst-style code in lxc-android-config
    and ship a click-apparmor upstart job. This checks to see if apparmor or
    apparmor-easyprof-ubuntu's dpkg md5sums changed, and if so, runs
    'aa-clickhook -f'. This allows us to update policy for click packages on
    reboot after system-image updates. Note, the click system hooks job is
    not enough, because that correctly uses 'aa-clickhook' without arguments.
    'aa-clickhook -f' isn't normally needed so this job completes quickly
    in typical reboots ('aa-clickhook -f' still only updates the click policy
    that is affected). (LP: #1229449)
  * don't verify the policy before load. It will error on load which is
    equivalent to erroring out before load. This allows us to avoid parsing
    policy twice which can save significant time when regenerating lots of
    profiles, which is important during first boot after system upgrade
  * generated policy should be readable by everyone (the click security
    manifests are not private)
  * fix default path to apparmor_parser (thus avoiding a needless 'which')
  * debian/rules: cleanup .coverage and apparmor/__pycache__

 -- Jamie Strandboge <jamie@ubuntu.com>  Mon, 23 Sep 2013 14:11:03 -0500

click-apparmor (0.1.9) saucy; urgency=low

  * aa-exec-click: account for when /usr/sbin is not in the user's PATH

 -- Jamie Strandboge <jamie@ubuntu.com>  Thu, 05 Sep 2013 09:05:12 -0500

click-apparmor (0.1.8) saucy; urgency=low

  * apparmor/click.py: don't forget to delete temporary file when not
    updating policy
  * aa-clickhook, apparmor/click.py: add --include=PATH option for injecting
    #include "PATH" into profiles to support QA testing (eg, autopilot)

 -- Jamie Strandboge <jamie@ubuntu.com>  Wed, 04 Sep 2013 17:10:42 -0500

click-apparmor (0.1.7) saucy; urgency=low

  * README: update to describe how to test
  * add several new tests to complete coverage of apparmor/click.py
  * apparmor/click.py
    - don't overwrite existing file of policy is unchanged
    - fix couple of tracebacks with error reporting found by new tests
  * debian/control: Build-Depends on apparmor-easyprof-ubuntu since it is
    needed by the testsuite

 -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 30 Aug 2013 07:09:02 -0500

click-apparmor (0.1.6) saucy; urgency=low

  * fix bashism in aa-exec-click

 -- Jamie Strandboge <jamie@ubuntu.com>  Tue, 27 Aug 2013 16:01:25 -0500

click-apparmor (0.1.5) saucy; urgency=low

  * add aa-exec-click
  * debian/control: Depends on apparmor that ships aa-exec
  * abstract out _unload_profile()
  * clarify clickname, profile_filename (formerly profilename) and raw_name
  * don't try to unload the profile from the kernel. Once there is a
    guarantee that the app is not running, then we can remove the profile

 -- Jamie Strandboge <jamie@ubuntu.com>  Mon, 26 Aug 2013 13:30:41 -0500

click-apparmor (0.1.4) saucy; urgency=low

  [ Steve Beattie ]
  * aa-clickhook: output to stdout instead of stderr if no output file
    is specified.

  [ Jamie Strandboge ]
  * add support for abstractions, read_paths and write_paths. These are not
    generally allowed in the Ubuntu app store, but will be handled via the
    review process.
  * fix a few error strings
  * policy_version is JSON Number, not string
  * add some more policy_version tests
  * Qt json outputs 1.0 as 1. Account for that in our transmogrification to
    easyprof (LP: #1214618)

 -- Jamie Strandboge <jamie@ubuntu.com>  Thu, 22 Aug 2013 12:15:02 -0500

click-apparmor (0.1.3) saucy; urgency=low

  * support different policy vendors since the click hook should be usable
    with alternative app stores

 -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 16 Aug 2013 16:27:44 -0500

click-apparmor (0.1.2) saucy; urgency=low

  * apparmor/click.py:
    - add dbus_path() (uses libnih-dbus) to generate an APP_ID_DBUS template
      variable
    - rename APPNAME to APP_PKGNAME and APPVERSION to APP_VERSION to make
      policy clear wrt click documentation
  * aa-clickhook: report but don't trace back failures to generate the profile
  * update tests for above
  * debian/control:
    - Build-Depends on libnih-dbus1 (needed for tests)
    - python3-apparmor-click should Depends on libnih-dbus1
    - python3-apparmor-click should Depends on apparmor-easyprof-ubuntu >=
      1.0.17 (due to variable name changes)
    - tighten up other dependencies

 -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 16 Aug 2013 12:22:42 -0500

click-apparmor (0.1.1) saucy; urgency=low

  * implement apparmor_available() to allow installing click packages when
    apparmor is not available. Obviously this is not generally recommended
    for normal use, but is valid when installing click packages in a chroot,
    as with live-build
    - apparmor/click.py: implement apparmor_available()
    - test-clicktool.py: add tests
    - aa-clickhook: adjust to use apparmor_available()

 -- Jamie Strandboge <jamie@ubuntu.com>  Tue, 13 Aug 2013 07:15:45 -0500

click-apparmor (0.1.0) saucy; urgency=low

  * some pep8/code/comment cleanups and add documentation
  * remove unused aa-clickprototype
  * debian/rules: update to run pep8

 -- Jamie Strandboge <jamie@ubuntu.com>  Thu, 08 Aug 2013 15:44:26 -0500

click-apparmor (0.0.5) saucy; urgency=low

  [ Steve Beattie ]
  * debian/control: fix typo in maintainer email address
  * apparmor/click.py:
    - fix up pyflakes warnings (1 false positive remains)
    - fix up some pylint warnings
    - some click applications don't specify the policy_groups entry at
      all when using the 'unconfined' template; don't reject and instead
      automatically create an empty list
    - use a default value for policy_version as well, again to be
      lenient in what is missing from what we accept

  [ Jamie Strandboge ]
  * debian/rules: run testsuite
  * test-clicktool.py: pyflakes cleanups

 -- Steve Beattie <sbeattie@ubuntu.com>  Wed, 24 Jul 2013 15:42:26 -0700

click-apparmor (0.0.4) saucy; urgency=low

  * debian/rules: move dh_click to override_dh_auto_install

 -- Jamie Strandboge <jamie@ubuntu.com>  Wed, 24 Jul 2013 02:05:31 -0500

click-apparmor (0.0.3) saucy; urgency=low

  * split out python3-apparmor-click to only generate python3 versions
    of everything.

 -- Steve Beattie <sbeattie@ubuntu.com>  Tue, 23 Jul 2013 12:25:45 -0700

click-apparmor (0.0.2) saucy; urgency=low

  * Update to incorporate click packaging and hook changes

 -- Steve Beattie <sbeattie@ubuntu.com>  Tue, 23 Jul 2013 06:37:21 -0700

click-apparmor (0.0.1) UNRELEASED; urgency=low

  * Initial release.

 -- Steve Beattie <sbeattie@ubuntu.com>  Thu, 11 Jul 2013 10:20:01 -0700
