releasing package livecd-rootfs version 2.765.48

* ankushpathak/feat/apparmor_6_8_features:
  d/changelog
  feat(apparmor): Add 6.8 kernel apparmor features' preseed

debian/changelog

@@ -1,3 +1,362 @@
+livecd-rootfs (2.765.48) jammy; urgency=medium
+
+  [ Łukasz 'sil2100' Zemczak ]
+  * Fix previous attempt by removing the package from the task list manually.
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 06 Sep 2024 14:09:34 -0700
+
+livecd-rootfs (2.765.47) jammy; urgency=medium
+
+  * Explicitly remove v4l2loopback packages to workaround issue with tasks
+    and seeds. Should fix build failure (LP: #2079803).
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Fri, 06 Sep 2024 10:50:02 +0200
+
+livecd-rootfs (2.765.46) jammy; urgency=medium
+
+  * Add 6.8 kernel apparmor features' preseeds. (LP: #2074204)
+
+ -- Ankush Pathak <ankush.pathak@canonical.com>  Fri, 26 Jul 2024 19:59:25 +0530
+
+livecd-rootfs (2.765.45) jammy; urgency=medium
+
+  * Remove openssh-server and ssh-import-id from the ubuntu-server
+    minimal and full layers (LP: #1974483).
+
+ -- Chris Peterson <chris.peterson@canonical.com>  Tue, 30 Jul 2024 13:58:15 -0700
+
+livecd-rootfs (2.765.44) jammy; urgency=medium
+
+  [ Rémy Martin ]
+  * Backport support for building tegra-igx Server and Core images;
+    LP: #2070070.
+
+ -- Philip Roche <phil.roche@canonical.com>  Thu, 27 Jun 2024 14:11:06 +0100
+
+livecd-rootfs (2.765.43) jammy; urgency=medium
+
+  * buildd/02-disk-image-uefi add udev early hook to satisfy grub-probe
+    and grub-install. (LP: #2064175)
+
+ -- Simon Poirier <simon.poirier@canonical.com>  Fri, 07 Jun 2024 12:27:04 -0400
+
+livecd-rootfs (2.765.42) jammy; urgency=medium
+
+  [ Ankush Pathak ]
+  * Add policy:unconfined_restrictions feature to 6.5 kernel (LP: #2062929)
+
+ -- Philip Roche <phil.roche@canonical.com>  Wed, 22 May 2024 12:39:15 +0100
+
+livecd-rootfs (2.765.41) jammy; urgency=medium
+
+  [Jess Jang ]
+  * add 5.15 apparmor directory for snap preseeding with 5.15 kernel
+    (LP: #2052789)
+
+ -- Philip Roche <phil.roche@canonical.com>  Wed, 21 Feb 2024 11:31:50 +0000
+
+livecd-rootfs (2.765.40) jammy; urgency=medium
+
+  * Handle the allwinner kernel in the same way as we handle generic. This
+    change seems to been missed, as it was present in noble. (LP: #2054412)
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Tue, 20 Feb 2024 09:48:10 +0100
+
+livecd-rootfs (2.765.39) jammy; urgency=medium
+
+  [ dann frazier ]
+  * Use flock to avoid races with systemd-udevd that cause loop device
+    partitions to briefly disappear. (LP: #2045586)
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Mon, 19 Feb 2024 09:25:09 +1300
+
+livecd-rootfs (2.765.38) jammy; urgency=medium
+
+  * Add a largemem subarch for ubuntu-server that ships a 64k kernel variant
+    by default (LP: #2050209)
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 25 Jan 2024 11:46:49 +0100
+
+livecd-rootfs (2.765.37) jammy; urgency=medium
+
+  * fix: Fix for calling unminimize if lxd-installer package
+    not installed. (LP: #2049723)
+
+ -- Philip Roche <phil.roche@canonical.com>  Mon, 22 Jan 2024 13:26:43 +0000
+ 
+livecd-rootfs (2.765.36) jammy; urgency=medium
+
+  * Use correct /etc/ssh/sshd_config.d/ filename so cloud-init overrides
+    via cloud-config works. (LP: #2049860)
+
+ -- Thomas Bechtold <thomas.bechtold@canonical.com>  Fri, 19 Jan 2024 09:34:04 +0100
+
+livecd-rootfs (2.765.35) jammy; urgency=medium
+
+  * For raspi preinstalled builds, use a per-series dedicated gadget branch.
+    (LP: #2049373)
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Mon, 15 Jan 2024 11:32:47 +0100
+
+livecd-rootfs (2.765.34) jammy; urgency=medium
+
+  * Remove comments in the debian/control dependencies as it was causing the
+    package build to fail.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Mon, 15 Jan 2024 16:41:18 +0100
+
+livecd-rootfs (2.765.33) jammy; urgency=medium
+
+  [ Steve Langasek ]
+  * Use losetup instead of kpartx to resolve race conditions in riscv64
+    image builds.  LP: #2045797.
+
+  [ Utkarsh Gupta ]
+  * unminimize: Use lxd-installer to install LXD itself (LP: #2036725)
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Thu, 11 Jan 2024 16:50:22 +0530
+
+livecd-rootfs (2.765.32) jammy; urgency=medium
+
+  [ Heinrich Schuchardt ]
+  * arm: fix console parameter for ARM cloud-images (LP: #2036730)
+
+ -- Brian Murray <brian@ubuntu.com>  Wed, 06 Dec 2023 11:03:12 -0800
+
+livecd-rootfs (2.765.31) jammy; urgency=medium
+
+  [ John Chittum ]
+  * fix: add 6.5 kernel apparmor features to livecd-rootfs based on
+    features of 6.5 in ubuntu/mantic. This will roll as HWE. (LP: #2037567)
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 03 Dec 2023 21:53:31 -0800
+
+livecd-rootfs (2.765.30) jammy; urgency=medium
+
+  * Enable snap preseeding with ppc64el images where /boot/vmlinux is used
+    instead of /boot/vmlinuz. (LP: #2038957)
+
+ -- Philip Roche <phil.roche@canonical.com>  Fri, 27 Oct 2023 12:51:00 +0100
+
+livecd-rootfs (2.765.29) jammy; urgency=medium
+
+  [ Steve Langasek ]
+  * The chroot tmpfs mount should only be /var/lib/apt/lists, not
+    /var/lib/apt; the latter breaks changes to /var/lib/apt/extended_states.
+    (LP: #2036195).
+
+ -- Phil Roche <phil.roche@canonical.com>  Thu, 19 Oct 2023 18:10:20 +0100
+ 
+livecd-rootfs (2.765.28) jammy; urgency=medium
+
+  * Fix unminimize to correctly list packages. (LP: #1996489)
+  * Install LXD snap from stable/ubuntu-<version> channel. (LP: #2036725)
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 04 Oct 2023 13:48:53 +0530
+
+livecd-rootfs (2.765.27) jammy; urgency=medium
+
+  [ Thomas Bechtold ]
+  * Do not modify /etc/ssh/sshd_config for ubuntu-cpc
+    project builds (LP: #1968873)
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Wed, 27 Sep 2023 22:58:35 -0700
+
+livecd-rootfs (2.765.26) jammy; urgency=medium
+
+  * Set GRUB_DISTRIBUTION in 50-builddimg-settings.cfg to ensure
+    EFI is installed in the right place (LP: #2034253)
+
+ -- jchittum <john.chittum@canonical.com>  Thu, 07 Sep 2023 13:51:33 -0500
+
+livecd-rootfs (2.765.25) jammy; urgency=medium
+
+  [ Michael Hudson-Doyle ]
+  * Remove additional dependencies from subiquity units as they are now
+    interfering with the boot process. (LP: #2028862)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Mon, 28 Aug 2023 14:13:58 -0600
+
+livecd-rootfs (2.765.24) jammy; urgency=medium
+
+  [ Jess Jang ]
+  * fix: bind correct apparmor feature for validating snap seed.
+    (LP: #2024639)
+
+  [ John Chittum ]
+  * fix: 6.2 kernel missing feature. (LP: #2031943)
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Sat, 19 Aug 2023 03:24:34 +0530
+
+livecd-rootfs (2.765.23) jammy; urgency=medium
+
+  [ Loïc Minier ]
+  * Initial support for NVIDIA Tegra (LP: #2015644).
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Tue, 23 May 2023 16:40:34 +0200
+
+livecd-rootfs (2.765.22) jammy; urgency=medium
+
+  * Drop use of --removable flag to grub-install from
+    live-build/buildd/hooks/02-disk-image-uefi.binary, to match the cloud
+    images (7c760864fdcb278ca37396f06f5e3f297428d63d).  This fixes
+    bootloader updates in the buildd images, but also fixes compatibility
+    with using devtmpfs for losetup. 
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Thu, 18 May 2023 15:19:38 -0700
+
+livecd-rootfs (2.765.21) jammy; urgency=medium
+
+  [ jchittum ]
+  * add multiple kernel apparmor feature sets for snap preseeding
+    (LP: #2015596).
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 10 Apr 2023 08:05:35 -0700
+
+livecd-rootfs (2.765.20) jammy; urgency=medium
+
+  * Enable building intel-iot live-server images (LP: #1980067).
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Fri, 17 Mar 2023 12:31:55 +0100
+
+livecd-rootfs (2.765.19) jammy; urgency=medium
+
+  * auto/config: Add support for ubuntu core arm64 generic images (LP: #2009067)
+
+ -- Dimitri John Ledkov <dimitri.ledkov@canonical.com>  Thu, 02 Mar 2023 18:21:06 +0000
+
+livecd-rootfs (2.765.18) jammy; urgency=medium
+
+  * Terrible hack workaround for clearing out the non-offline apt cache for
+    desktop related images. 
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Wed, 22 Feb 2023 23:57:38 +0100
+
+livecd-rootfs (2.765.17) jammy; urgency=medium
+
+  * Do not offer the hwe kernel for RISC-V server-live images (LP: #2007863).
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Mon, 20 Feb 2023 17:18:37 +0100
+
+livecd-rootfs (2.765.16) jammy; urgency=medium
+
+  * Properly handle the lowlatency hwe kernel flavour.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 16 Feb 2023 14:24:19 +0100
+
+livecd-rootfs (2.765.15) jammy; urgency=medium
+
+  * Enable the hwe kernel variant for 22.04.2 (LP: #2006481).
+    - Add it to the server images besides the ga kernel.
+    - Switch to hwe as default for all desktop flavors.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Tue, 07 Feb 2023 14:57:00 +0100
+
+livecd-rootfs (2.765.14) jammy; urgency=medium
+
+  [ Samir Akarioh ]
+  * feat: Add metadata on ubuntu-oci image. (LP: #1998229)
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Mon, 12 Dec 2022 15:30:56 +0530
+
+livecd-rootfs (2.765.13) jammy; urgency=medium
+
+  [ Heinrich Schuchardt ]
+  * Backporting patches to support new RISC-V platforms (LP: #1997233)
+  * Add support for the LicheeRV board (SUBARCH=licheerv)
+  * Add support for the PolarFire Icicle Kit board (SUBARCH=icicle)
+  * Reduce initrd size for Nezha and LicheeRV boards
+  * Use efi=debug earlycon on kernel command line
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Mon, 21 Nov 2022 11:18:14 +0100
+
+livecd-rootfs (2.765.12) jammy; urgency=medium
+
+  * Remove fwupd, modemmanager, and udisks2 from the cloud images.
+    LP: #1981109.
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 18 Nov 2022 14:52:49 -0800
+
+livecd-rootfs (2.765.11) jammy; urgency=medium
+
+  * Rename FK_FORCE_CONTAINER into FK_FORCE as its role was extended to also
+    support chroot (LP: #1989194).
+
+ -- William 'jawn-smith' Wilson <jawn-smith@ubuntu.com>  Fri, 07 Oct 2022 09:49:30 -0500
+
+livecd-rootfs (2.765.10) jammy; urgency=medium
+
+  * The ubuntustudio dkms hook is only created when we're building
+    ubuntustudio, so only chmod it when it exists.  LP: #1983521.
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Thu, 04 Aug 2022 12:11:52 -0700
+
+livecd-rootfs (2.765.9) jammy; urgency=medium
+
+  * When adding the new RISC-V platforms, some of the generic non-SUBARCH code
+    went missing and some invalid assumptions have been made, causing cloud
+    images to fail building. This upload fixes these (LP: #1983599).
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 04 Aug 2022 17:15:03 +0200
+
+livecd-rootfs (2.765.8) jammy; urgency=medium
+
+  * Manually blacklist DKMS modules for Ubuntu Studio builds (LP: #1983521).
+
+ -- Simon Quigley <tsimonq2@ubuntu.com>  Wed, 03 Aug 2022 18:46:23 -0500
+
+livecd-rootfs (2.765.7) jammy; urgency=medium
+
+  * Install wpasupplicant by default as for now, most of the RISC-V boards
+    embed a Wifi chipset (LP: #1983008)
+
+ -- Alexandre Ghiti <alexandre.ghiti@canonical.com>  Thu, 28 Jul 2022 14:17:11 +0200
+
+livecd-rootfs (2.765.6) jammy; urgency=medium
+
+  [ Alexandre Ghiti ]
+  * Fix SiFive Unmatched build. While merging the VisionFive support, we
+    removed the installation of u-boot-menu for the Unmatched by mistake
+    (LP: #1982735).
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Mon, 25 Jul 2022 10:24:08 +0200
+
+livecd-rootfs (2.765.5) jammy; urgency=medium
+
+  * Add support for the VisionFive and the Nezha boards (LP: #1980935)
+  * Set FK_FORCE_CONTAINER for RISC-V images build to force flash-kernel
+    to run in a container (LP: #1980929).
+
+ -- Alexandre Ghiti <alexandre.ghiti@canonical.com>  Tue, 05 Jul 2022 10:55:44 +0200
+
+livecd-rootfs (2.765.4) jammy; urgency=medium
+
+  * Revert "don't modify ssh_config for ubuntu-cpc projects (LP:1968873)"
+    This change triggered a bug in cloud-init (see LP:1968873).
+
+ -- Thomas Bechtold <thomas.bechtold@canonical.com>  Mon, 11 Jul 2022 14:15:36 +0200
+
+livecd-rootfs (2.765.3) jammy; urgency=medium
+
+  * Do not modify /etc/ssh/sshd_config for ubuntu-cpc
+    project builds (LP: #1968873)
+
+ -- Thomas Bechtold <thomas.bechtold@canonical.com>  Thu, 30 Jun 2022 19:26:04 +0200
+
+livecd-rootfs (2.765.2) jammy; urgency=medium
+
+  * Switch the intel-iot images to use the linux-intel-iotg kernel instead.
+    (LP: #1980065)
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 30 Jun 2022 17:26:04 +0200
+
+livecd-rootfs (2.764.1) jammy; urgency=medium
+
+  * live-build/ubuntu-cpc/hooks.d/base/ovf/ubuntu-ova-v1-vmdk.tmpl:
+    Revert OVF cd-rom controller to be IDE for VMWare (LP: #1970795)
+
+ -- Simon Poirier <simon.poirier@canonical.com>  Thu, 16 Jun 2022 19:34:03 -0400
+
 livecd-rootfs (2.764) jammy; urgency=medium
 
   [ Michał Sawicz ]
@@ -7585,7 +7944,7 @@ livecd-rootfs (0.30) gutsy; urgency=low
 
  -- Adam Conrad <adconrad@ubuntu.com>  Tue, 10 Jul 2007 10:48:04 +0100
 
-livecd-rootfs (0.29) UNRELEASED; urgency=low
+livecd-rootfs (0.29) jammy; urgency=low
 
   * Update copyright to 2006, 9 months late is better than never, right?
   * Update kernels for i386 and amd64 to reflect recent renaming.
@@ -7595,7 +7954,7 @@ livecd-rootfs (0.29) UNRELEASED; urgency=low
 
  -- Adam Conrad <adconrad@ubuntu.com>  Thu, 21 Sep 2006 10:37:09 +1000
 
-livecd-rootfs (0.28) UNRELEASED; urgency=low
+livecd-rootfs (0.28) jammy; urgency=low
 
   * Welcome to Edgy... Switch the default i386 kernel to -686, yay!
   * And when I say "edgy", I really mean it (ie: change the suite too)
@@ -7605,7 +7964,7 @@ livecd-rootfs (0.28) UNRELEASED; urgency=low
 
  -- Adam Conrad <adconrad@ubuntu.com>  Mon, 28 Aug 2006 03:40:28 +1000
 
-livecd-rootfs (0.27) UNRELEASED; urgency=low
+livecd-rootfs (0.27) jammy; urgency=low
 
   [ Adam Conrad ]
   * Copy the kernel out of the livefs as well, so we have one that matches.

debian/control

@@ -27,6 +27,7 @@ Depends: ${misc:Depends},
          lsb-release,
          lzma,
          make,
+         mount,
          parted,
          procps,
          python3,

live-build/apparmor/5.19/capability

@@ -0,0 +1 @@
+0xffffff

live-build/apparmor/5.19/caps/mask

@@ -0,0 +1 @@
+chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read

live-build/apparmor/5.19/dbus/mask

@@ -0,0 +1 @@
+acquire send receive

live-build/apparmor/5.19/domain/attach_conditions/xattr

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/domain/change_hat

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/domain/change_hatv

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/domain/change_onexec

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/domain/change_profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/domain/computed_longest_left

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/domain/fix_binfmt_elf_mmap

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/domain/post_nnp_subset

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/domain/stack

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/domain/version

@@ -0,0 +1 @@
+1.2

live-build/apparmor/5.19/file/mask

@@ -0,0 +1 @@
+create read write exec append mmap_exec link lock

live-build/apparmor/5.19/ipc/posix_mqueue

@@ -0,0 +1 @@
+create read write open delete setattr getattr

live-build/apparmor/5.19/mount/mask

@@ -0,0 +1 @@
+mount umount pivot_root

live-build/apparmor/5.19/namespaces/pivot_root

@@ -0,0 +1 @@
+no

live-build/apparmor/5.19/namespaces/profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/network/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp

live-build/apparmor/5.19/network/af_unix

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/network_v8/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp

live-build/apparmor/5.19/policy/set_load

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/policy/versions/v5

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/policy/versions/v6

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/policy/versions/v7

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/policy/versions/v8

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/ptrace/mask

@@ -0,0 +1 @@
+read trace

live-build/apparmor/5.19/query/label/data

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/query/label/multi_transaction

@@ -0,0 +1 @@
+yes

live-build/apparmor/5.19/query/label/perms

@@ -0,0 +1 @@
+allow deny audit quiet

live-build/apparmor/5.19/rlimit/mask

@@ -0,0 +1 @@
+cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime

live-build/apparmor/5.19/signal/mask

@@ -0,0 +1 @@
+hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost

live-build/apparmor/6.2/capability

@@ -0,0 +1 @@
+0xffffff

live-build/apparmor/6.2/caps/mask

@@ -0,0 +1 @@
+chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read

live-build/apparmor/6.2/dbus/mask

@@ -0,0 +1 @@
+acquire send receive

live-build/apparmor/6.2/domain/attach_conditions/xattr

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/domain/change_hat

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/domain/change_hatv

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/domain/change_onexec

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/domain/change_profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/domain/computed_longest_left

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/domain/fix_binfmt_elf_mmap

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/domain/post_nnp_subset

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/domain/stack

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/domain/version

@@ -0,0 +1 @@
+1.2

live-build/apparmor/6.2/file/mask

@@ -0,0 +1 @@
+create read write exec append mmap_exec link lock

live-build/apparmor/6.2/ipc/posix_mqueue

@@ -0,0 +1 @@
+create read write open delete setattr getattr

live-build/apparmor/6.2/mount/mask

@@ -0,0 +1 @@
+mount umount pivot_root

live-build/apparmor/6.2/namespaces/pivot_root

@@ -0,0 +1 @@
+no

live-build/apparmor/6.2/namespaces/profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/network/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp

live-build/apparmor/6.2/network/af_unix

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/network_v8/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp

live-build/apparmor/6.2/policy/set_load

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/policy/versions/v5

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/policy/versions/v6

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/policy/versions/v7

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/policy/versions/v8

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/ptrace/mask

@@ -0,0 +1 @@
+read trace

live-build/apparmor/6.2/query/label/data

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/query/label/multi_transaction

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.2/query/label/perms

@@ -0,0 +1 @@
+allow deny audit quiet

live-build/apparmor/6.2/rlimit/mask

@@ -0,0 +1 @@
+cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime

live-build/apparmor/6.2/signal/mask

@@ -0,0 +1 @@
+hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost

live-build/apparmor/6.5/capability

@@ -0,0 +1 @@
+0xffffff

live-build/apparmor/6.5/caps/mask

@@ -0,0 +1 @@
+chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore

live-build/apparmor/6.5/dbus/mask

@@ -0,0 +1 @@
+acquire send receive

live-build/apparmor/6.5/domain/attach_conditions/xattr

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/domain/change_hat

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/domain/change_hatv

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/domain/change_onexec

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/domain/change_profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/domain/computed_longest_left

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/domain/fix_binfmt_elf_mmap

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/domain/post_nnp_subset

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/domain/stack

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/domain/version

@@ -0,0 +1 @@
+1.2

live-build/apparmor/6.5/file/mask

@@ -0,0 +1 @@
+create read write exec append mmap_exec link lock

live-build/apparmor/6.5/io_uring/mask

@@ -0,0 +1 @@
+sqpoll override_creds

live-build/apparmor/6.5/ipc/posix_mqueue

@@ -0,0 +1 @@
+create read write open delete setattr getattr

live-build/apparmor/6.5/mount/mask

@@ -0,0 +1 @@
+mount umount pivot_root

live-build/apparmor/6.5/namespaces/mask

@@ -0,0 +1 @@
+userns_create

live-build/apparmor/6.5/namespaces/pivot_root

@@ -0,0 +1 @@
+no

live-build/apparmor/6.5/namespaces/profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/network/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

live-build/apparmor/6.5/network/af_unix

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/network_v8/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

live-build/apparmor/6.5/policy/outofband

@@ -0,0 +1 @@
+0x000001

live-build/apparmor/6.5/policy/set_load

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/policy/versions/v5

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/policy/versions/v6

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/policy/versions/v7

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/policy/versions/v8

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/policy/versions/v9

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.5/ptrace/mask

@@ -0,0 +1 @@
+read trace