[linux-latest] 03/04: linux-image: Add back-dated NEWS about AppArmor introduction

[debian-kernel at lists.debian.org]

This is an automated email from the git hooks/post-receive script.

benh pushed a commit to branch sid
in repository linux-latest.

commit 5047f0996bac906fb2c7c1303d55da940cd6266b
Author: Ben Hutchings <ben at decadent.org.uk>
Date:   Thu Nov 30 20:10:53 2017 +0000

    linux-image: Add back-dated NEWS about AppArmor introduction
---
 debian/changelog        |  1 +
 debian/linux-image.NEWS | 14 ++++++++++++++
 2 files changed, 15 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index d0f73df..10adfdd 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,7 @@ linux-latest (87) UNRELEASED; urgency=medium
   * linux-image: Add back-dated NEWS for vsyscall change in Linux 4.10
   * linux-doc: Add symlinks to current documentation
   * Update to 4.14.0-1
+  * linux-image: Add back-dated NEWS about AppArmor introduction
 
  -- Ben Hutchings <ben at decadent.org.uk>  Thu, 16 Nov 2017 02:43:31 +0000
 
diff --git a/debian/linux-image.NEWS b/debian/linux-image.NEWS
index 86791b9..0c1566e 100644
--- a/debian/linux-image.NEWS
+++ b/debian/linux-image.NEWS
@@ -1,3 +1,17 @@
+linux-latest (86) unstable; urgency=medium
+
+  * From Linux 4.13.10-1, AppArmor is enabled by default.  This allows
+    defining a "profile" for each installed program that can mitigate
+    security vulnerabilities in it.  However, an incorrect profile might
+    disable some functionality of the program.
+
+    In case you suspect that an AppArmor profile is incorrect, see
+    <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and
+    consider reporting a bug in the package providing the profile.  The
+    profile may be part of the program's package or apparmor-profiles.
+
+ -- Ben Hutchings <ben at decadent.org.uk>  Thu, 30 Nov 2017 20:08:25 +0000
+
 linux-latest (81) unstable; urgency=medium
 
   * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux-latest.git