Update d/ch for 24.04.93 release

Merge remote-tracking branch 'bryalex/bryalex/6.14-noble' into ubuntu/noble
* bryalex/bryalex/6.14-noble: Add debian/changelog entry (LP: #2116199) feat(apparmor): Add 6.14 kernel apparmor features' preseeds
2025-09-08 14:34:06 +00:00 · 2025-08-12 20:07:32 +05:30 · 2025-08-12 20:04:32 +05:30 · 2025-07-31 11:27:46 -06:00 · 2025-07-31 11:26:05 -06:00 · 2025-07-30 17:38:38 +02:00
162 changed files with 786 additions and 384 deletions
--- a/debian/changelog
+++ b/debian/changelog
@ -1,9 +1,184 @@
-livecd-rootfs (24.04.70) UNRELEASED; urgency=medium
+livecd-rootfs (24.04.93) noble; urgency=medium
  * Add 6.14 kernel apparmor features' preseeds. (LP: #2116199)
 -- Bryan Alexander <bryan.alexander@canonical.com>  Thu, 17 Jul 2025 11:52:40 -0700
 livecd-rootfs (24.04.92) noble; urgency=medium
  * Temporarily revert the 24.04.90 changes.  We wish to validate only
    24.04.91 for Ubuntu 24.04.3 point release.
 -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 31 Jul 2025 11:27:41 -0600
 livecd-rootfs (24.04.91) noble; urgency=medium
  * Fix lowlatency kernel flavour name (LP: #2119012)
 -- Juerg Haefliger <juerg.haefliger@canonical.com>  Wed, 30 Jul 2025 17:36:25 +0200
 livecd-rootfs (24.04.90) noble; urgency=medium
  [ Chad Smith ]
  * Override cloud-init.service in /etc so as to not invalidate debsums
    (LP: #2069391)
  * Update the overridden copy of cloud-init.service
 -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 22 Jul 2025 15:50:34 -0600
 livecd-rootfs (24.04.89) noble; urgency=medium
  * desktop: Remove some cruft referencing the subiquity snap, which can
    result in 'error: snap "subiquity" is not installed' messages being
    printed on the terminal.  (LP: #2083554)
 -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 30 Apr 2025 15:27:46 -0600
 livecd-rootfs (24.04.88) noble; urgency=medium
  * risc-v: directly copy device trees to /boot/dtb. (LP: #2092205)
  * riscv: add SUBARCH 'jh7110'. (LP: #2099993)
 -- Adriano Cordova <adriano.cordova@canonical.com>  Mon, 10 Feb 2025 10:40:23 -0300
 livecd-rootfs (24.04.87) noble; urgency=medium
  * Add 6.11 kernel apparmor features' preseeds. (LP: #2098306)
 -- Thomas Bechtold <thomas.bechtold@canonical.com>  Thu, 13 Feb 2025 12:22:41 +0100
 livecd-rootfs (24.04.86) noble; urgency=medium
  * Do not build HWE kernel layer on RISC-V as there is no HWE kernel there.
    (LP: #2098622)
 -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Mon, 17 Feb 2025 11:32:19 +1300
 livecd-rootfs (24.04.85) noble; urgency=medium
  * Fix build failure when using lowlatency-hwe-24.04, as ubuntustudio does.
    (LP: #2098105)
 -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 12 Feb 2025 18:39:48 -0700
 livecd-rootfs (24.04.84) noble; urgency=medium
  [ Florent 'Skia' Jacquet ]
  * Enable the HWE stack for 24.04.2. (LP: #2098105)
  [ Utkarsh Gupta ]
  * Bump HWE kernel track to 24.04 for ubuntu-core-desktop.
 -- Utkarsh Gupta <utkarsh@ubuntu.com>  Thu, 13 Feb 2025 03:15:12 +0530
 livecd-rootfs (24.04.83) noble; urgency=medium
  [ Carlos Nihelton ]
  [ Didier Roche-Tolomelli ]
  * Adapt to new Microsoft package format: (LP: #2091293)
    - Keep a single wsl rootfs upgrade policy
    - Create livecd-roots tarball as a .wsl extension
    - Create wsl-distribution.conf for WSL images
 -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Thu, 23 Jan 2025 14:22:54 +0100
 livecd-rootfs (24.04.82) noble; urgency=medium
  * Add support for arm64+tegra-jetson flavor. (LP: #2091392)
 -- Remy Martin <remy.martin@canonical.com>  Fri, 13 Dec 2024 11:53:08 +0100
 livecd-rootfs (24.04.81) noble; urgency=medium
  * Introduce unminimize as a package in OCI images. (LP: #2078583)
 -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 20 Nov 2024 15:43:55 +0530
 livecd-rootfs (24.04.80) noble; urgency=medium
  * Explicitly create home directory for buildd system user to avoid issues
    with installing and running snaps. (LP: #2083240) 
 -- jchittum <john.chittum@canonical.com>  Wed, 06 Nov 2024 07:43:40 -0500
 livecd-rootfs (24.04.79) noble; urgency=medium
  * Add apparmor policy permstable32 missing component (LP: #2084698)
 -- Thomas Bechtold <thomas.bechtold@canonical.com>  Fri, 18 Oct 2024 13:54:51 +0200
 livecd-rootfs (24.04.78) noble; urgency=medium
  * add cpc-sbom to create_manifest calls to generate sboms (LP: #2077105)
 -- jchittum <john.chittum@canonical.com>  Mon, 26 Aug 2024 14:15:05 -0400
 livecd-rootfs (24.04.77.1) noble; urgency=medium
  * Hotfix upload outside of git history, real change from 24.04.79.
  * Update ubuntu-classic-2404-amd64 model in ubuntu hooks. (LP: #2077899)
 -- Chris Peterson <chris.peterson@canonical.com>  Mon, 26 Aug 2024 16:57:12 -0700
 livecd-rootfs (24.04.77) noble; urgency=medium
  * Drop unminimize spit out by livecd-rootfs. (LP: #2077695)
  * Use packaged unminimize in the ubuntu-server images.
 -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 21 Aug 2024 12:08:44 +0530
 livecd-rootfs (24.04.76) noble; urgency=medium
  * Force latest/stable/ubuntu-24.10 subiquity onto the ubuntu-core-installer
    ISO for now. (LP: #2077495)
 -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 21 Aug 2024 16:13:58 +1200
 livecd-rootfs (24.04.75) noble; urgency=medium
  * Add 'ubuntu-core-installer' project. (LP: #2076307)
 -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 30 Jul 2024 16:35:31 +1200
 livecd-rootfs (24.04.74) noble; urgency=medium
  * riscv64: preinstalled server image for Microchip PIC64GX Curiosity Kit
    (LP: #2072956)
 -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Mon, 08 Jul 2024 17:51:25 +0200
 livecd-rootfs (24.04.73) noble; urgency=medium
  * Build qcow2 images for ubuntu-core LXD support (LP: #2072759).
 -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 11 Jul 2024 13:15:43 +0200
 livecd-rootfs (24.04.72) noble; urgency=medium
  [ Heinrich Schuchardt ]
  * riscv64: use earlycon=sbi on command line (LP: #2068739)
  [ Philip Roche ]
  * Revert removal of unminimize call in server builds (LP: #2069828)
 -- Philip Roche <phil.roche@canonical.com>  Mon, 24 Jun 2024 14:24:52 +0100
 livecd-rootfs (24.04.71) noble; urgency=medium
  * Re-enable ability to build HyperV desktop images (LP: #2064280)
 -- Philip Roche <phil.roche@canonical.com>  Mon, 27 May 2024 12:05:33 +0100
 livecd-rootfs (24.04.70) noble; urgency=medium
  [ Łukasz 'sil2100' Zemczak ]
  * Add experimental support for building ubuntu-core-desktop installer images
    (LP: #2063203)
- -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Wed, 24 Apr 2024 10:53:27 +0100
+  [ Philip Roche ]
  * No longer install LXD snap in unminimize script (LP: #2066905) 
 -- Philip Roche <phil.roche@canonical.com>  Fri, 24 May 2024 15:47:48 +0100
 livecd-rootfs (24.04.69) noble; urgency=medium
--- a/live-build/apparmor/6.11/capability
+++ b/live-build/apparmor/6.11/capability
@ -0,0 +1 @@
 0xffffff
--- a/live-build/apparmor/6.11/caps/extended
+++ b/live-build/apparmor/6.11/caps/extended
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/caps/mask
+++ b/live-build/apparmor/6.11/caps/mask
@ -0,0 +1 @@
 chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore
--- a/live-build/apparmor/6.11/dbus/mask
+++ b/live-build/apparmor/6.11/dbus/mask
@ -0,0 +1 @@
 acquire send receive
--- a/live-build/apparmor/6.11/domain/attach_conditions/xattr
+++ b/live-build/apparmor/6.11/domain/attach_conditions/xattr
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/change_hat
+++ b/live-build/apparmor/6.11/domain/change_hat
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/change_hatv
+++ b/live-build/apparmor/6.11/domain/change_hatv
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/change_onexec
+++ b/live-build/apparmor/6.11/domain/change_onexec
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/change_profile
+++ b/live-build/apparmor/6.11/domain/change_profile
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/computed_longest_left
+++ b/live-build/apparmor/6.11/domain/computed_longest_left
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/disconnected.path
+++ b/live-build/apparmor/6.11/domain/disconnected.path
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/fix_binfmt_elf_mmap
+++ b/live-build/apparmor/6.11/domain/fix_binfmt_elf_mmap
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/interruptible
+++ b/live-build/apparmor/6.11/domain/interruptible
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/kill.signal
+++ b/live-build/apparmor/6.11/domain/kill.signal
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/post_nnp_subset
+++ b/live-build/apparmor/6.11/domain/post_nnp_subset
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/stack
+++ b/live-build/apparmor/6.11/domain/stack
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/unconfined_allowed_children
+++ b/live-build/apparmor/6.11/domain/unconfined_allowed_children
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/domain/version
+++ b/live-build/apparmor/6.11/domain/version
@ -0,0 +1 @@
 1.2
--- a/live-build/apparmor/6.11/file/mask
+++ b/live-build/apparmor/6.11/file/mask
@ -0,0 +1 @@
 create read write exec append mmap_exec link lock
--- a/live-build/apparmor/6.11/io_uring/mask
+++ b/live-build/apparmor/6.11/io_uring/mask
@ -0,0 +1 @@
 sqpoll override_creds
--- a/live-build/apparmor/6.11/ipc/posix_mqueue
+++ b/live-build/apparmor/6.11/ipc/posix_mqueue
@ -0,0 +1 @@
 create read write open delete setattr getattr
--- a/live-build/apparmor/6.11/mount/mask
+++ b/live-build/apparmor/6.11/mount/mask
@ -0,0 +1 @@
 mount umount pivot_root
--- a/live-build/apparmor/6.11/mount/move_mount
+++ b/live-build/apparmor/6.11/mount/move_mount
@ -0,0 +1 @@
 detached
--- a/live-build/apparmor/6.11/namespaces/mask
+++ b/live-build/apparmor/6.11/namespaces/mask
@ -0,0 +1 @@
 userns_create
--- a/live-build/apparmor/6.11/namespaces/pivot_root
+++ b/live-build/apparmor/6.11/namespaces/pivot_root
@ -0,0 +1 @@
 no
--- a/live-build/apparmor/6.11/namespaces/profile
+++ b/live-build/apparmor/6.11/namespaces/profile
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/namespaces/userns_create
+++ b/live-build/apparmor/6.11/namespaces/userns_create
@ -0,0 +1 @@
 pciu&
--- a/live-build/apparmor/6.11/network/af_mask
+++ b/live-build/apparmor/6.11/network/af_mask
@ -0,0 +1 @@
 unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.11/network/af_unix
+++ b/live-build/apparmor/6.11/network/af_unix
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/network_v8/af_inet
+++ b/live-build/apparmor/6.11/network_v8/af_inet
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/network_v8/af_mask
+++ b/live-build/apparmor/6.11/network_v8/af_mask
@ -0,0 +1 @@
 unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.11/policy/notify/user
+++ b/live-build/apparmor/6.11/policy/notify/user
@ -0,0 +1 @@
 file
--- a/live-build/apparmor/6.11/policy/outofband
+++ b/live-build/apparmor/6.11/policy/outofband
@ -0,0 +1 @@
 0x000001
--- a/live-build/apparmor/6.11/policy/permstable32
+++ b/live-build/apparmor/6.11/policy/permstable32
@ -0,0 +1 @@
 allow deny subtree cond kill complain prompt audit quiet hide xindex tag label
--- a/live-build/apparmor/6.11/policy/permstable32_version
+++ b/live-build/apparmor/6.11/policy/permstable32_version
@ -0,0 +1 @@
 0x000003
--- a/live-build/apparmor/6.11/policy/set_load
+++ b/live-build/apparmor/6.11/policy/set_load
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/policy/state32
+++ b/live-build/apparmor/6.11/policy/state32
@ -0,0 +1 @@
 0x000001
--- a/live-build/apparmor/6.11/policy/unconfined_restrictions/change_profile
+++ b/live-build/apparmor/6.11/policy/unconfined_restrictions/change_profile
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/policy/unconfined_restrictions/io_uring
+++ b/live-build/apparmor/6.11/policy/unconfined_restrictions/io_uring
@ -0,0 +1 @@
 0
--- a/live-build/apparmor/6.11/policy/unconfined_restrictions/userns
+++ b/live-build/apparmor/6.11/policy/unconfined_restrictions/userns
@ -0,0 +1 @@
 1
--- a/live-build/apparmor/6.11/policy/versions/v5
+++ b/live-build/apparmor/6.11/policy/versions/v5
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/policy/versions/v6
+++ b/live-build/apparmor/6.11/policy/versions/v6
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/policy/versions/v7
+++ b/live-build/apparmor/6.11/policy/versions/v7
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/policy/versions/v8
+++ b/live-build/apparmor/6.11/policy/versions/v8
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/policy/versions/v9
+++ b/live-build/apparmor/6.11/policy/versions/v9
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/ptrace/mask
+++ b/live-build/apparmor/6.11/ptrace/mask
@ -0,0 +1 @@
 read trace
--- a/live-build/apparmor/6.11/query/label/data
+++ b/live-build/apparmor/6.11/query/label/data
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/query/label/multi_transaction
+++ b/live-build/apparmor/6.11/query/label/multi_transaction
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.11/query/label/perms
+++ b/live-build/apparmor/6.11/query/label/perms
@ -0,0 +1 @@
 allow deny audit quiet
--- a/live-build/apparmor/6.11/rlimit/mask
+++ b/live-build/apparmor/6.11/rlimit/mask
@ -0,0 +1 @@
 cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime
--- a/live-build/apparmor/6.11/signal/mask
+++ b/live-build/apparmor/6.11/signal/mask
@ -0,0 +1 @@
 hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost
--- a/live-build/apparmor/6.14/capability
+++ b/live-build/apparmor/6.14/capability
@ -0,0 +1 @@
 0xffffff
--- a/live-build/apparmor/6.14/caps/extended
+++ b/live-build/apparmor/6.14/caps/extended
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/caps/mask
+++ b/live-build/apparmor/6.14/caps/mask
@ -0,0 +1 @@
 chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore
--- a/live-build/apparmor/6.14/dbus/mask
+++ b/live-build/apparmor/6.14/dbus/mask
@ -0,0 +1 @@
 acquire send receive
--- a/live-build/apparmor/6.14/domain/attach_conditions/xattr
+++ b/live-build/apparmor/6.14/domain/attach_conditions/xattr
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/change_hat
+++ b/live-build/apparmor/6.14/domain/change_hat
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/change_hatv
+++ b/live-build/apparmor/6.14/domain/change_hatv
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/change_onexec
+++ b/live-build/apparmor/6.14/domain/change_onexec
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/change_profile
+++ b/live-build/apparmor/6.14/domain/change_profile
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/computed_longest_left
+++ b/live-build/apparmor/6.14/domain/computed_longest_left
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/disconnected.ipc
+++ b/live-build/apparmor/6.14/domain/disconnected.ipc
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/disconnected.path
+++ b/live-build/apparmor/6.14/domain/disconnected.path
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/fix_binfmt_elf_mmap
+++ b/live-build/apparmor/6.14/domain/fix_binfmt_elf_mmap
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/interruptible
+++ b/live-build/apparmor/6.14/domain/interruptible
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/kill.signal
+++ b/live-build/apparmor/6.14/domain/kill.signal
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/post_nnp_subset
+++ b/live-build/apparmor/6.14/domain/post_nnp_subset
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/stack
+++ b/live-build/apparmor/6.14/domain/stack
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/unconfined_allowed_children
+++ b/live-build/apparmor/6.14/domain/unconfined_allowed_children
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/domain/version
+++ b/live-build/apparmor/6.14/domain/version
@ -0,0 +1 @@
 1.2
--- a/live-build/apparmor/6.14/file/mask
+++ b/live-build/apparmor/6.14/file/mask
@ -0,0 +1 @@
 create read write exec append mmap_exec link lock
--- a/live-build/apparmor/6.14/io_uring/mask
+++ b/live-build/apparmor/6.14/io_uring/mask
@ -0,0 +1 @@
 sqpoll override_creds
--- a/live-build/apparmor/6.14/ipc/posix_mqueue
+++ b/live-build/apparmor/6.14/ipc/posix_mqueue
@ -0,0 +1 @@
 create read write open delete setattr getattr
--- a/live-build/apparmor/6.14/mount/mask
+++ b/live-build/apparmor/6.14/mount/mask
@ -0,0 +1 @@
 mount umount pivot_root
--- a/live-build/apparmor/6.14/mount/move_mount
+++ b/live-build/apparmor/6.14/mount/move_mount
@ -0,0 +1 @@
 detached
--- a/live-build/apparmor/6.14/namespaces/mask
+++ b/live-build/apparmor/6.14/namespaces/mask
@ -0,0 +1 @@
 userns_create
--- a/live-build/apparmor/6.14/namespaces/pivot_root
+++ b/live-build/apparmor/6.14/namespaces/pivot_root
@ -0,0 +1 @@
 no
--- a/live-build/apparmor/6.14/namespaces/profile
+++ b/live-build/apparmor/6.14/namespaces/profile
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/namespaces/userns_create
+++ b/live-build/apparmor/6.14/namespaces/userns_create
@ -0,0 +1 @@
 pciu&
--- a/live-build/apparmor/6.14/network/af_mask
+++ b/live-build/apparmor/6.14/network/af_mask
@ -0,0 +1 @@
 unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.14/network/af_unix
+++ b/live-build/apparmor/6.14/network/af_unix
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/network_v8/af_inet
+++ b/live-build/apparmor/6.14/network_v8/af_inet
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/network_v8/af_mask
+++ b/live-build/apparmor/6.14/network_v8/af_mask
@ -0,0 +1 @@
 unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.14/network_v9/af_mask
+++ b/live-build/apparmor/6.14/network_v9/af_mask
@ -0,0 +1,2 @@
 unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.14/network_v9/af_unix
+++ b/live-build/apparmor/6.14/network_v9/af_unix
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/policy/notify/user
+++ b/live-build/apparmor/6.14/policy/notify/user
@ -0,0 +1 @@
 file
--- a/live-build/apparmor/6.14/policy/outofband
+++ b/live-build/apparmor/6.14/policy/outofband
@ -0,0 +1 @@
 0x000001
--- a/live-build/apparmor/6.14/policy/permstable32
+++ b/live-build/apparmor/6.14/policy/permstable32
@ -0,0 +1 @@
 allow deny subtree cond kill complain prompt audit quiet hide xindex tag label
--- a/live-build/apparmor/6.14/policy/permstable32_version
+++ b/live-build/apparmor/6.14/policy/permstable32_version
@ -0,0 +1 @@
 0x000003
--- a/live-build/apparmor/6.14/policy/set_load
+++ b/live-build/apparmor/6.14/policy/set_load
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/policy/state32
+++ b/live-build/apparmor/6.14/policy/state32
@ -0,0 +1 @@
 0x000001
--- a/live-build/apparmor/6.14/policy/unconfined_restrictions/change_profile
+++ b/live-build/apparmor/6.14/policy/unconfined_restrictions/change_profile
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/policy/unconfined_restrictions/io_uring
+++ b/live-build/apparmor/6.14/policy/unconfined_restrictions/io_uring
@ -0,0 +1 @@
 1
--- a/live-build/apparmor/6.14/policy/unconfined_restrictions/userns
+++ b/live-build/apparmor/6.14/policy/unconfined_restrictions/userns
@ -0,0 +1 @@
 1
--- a/live-build/apparmor/6.14/policy/versions/v5
+++ b/live-build/apparmor/6.14/policy/versions/v5
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/policy/versions/v6
+++ b/live-build/apparmor/6.14/policy/versions/v6
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/policy/versions/v7
+++ b/live-build/apparmor/6.14/policy/versions/v7
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/policy/versions/v8
+++ b/live-build/apparmor/6.14/policy/versions/v8
@ -0,0 +1 @@
 yes
--- a/live-build/apparmor/6.14/policy/versions/v9
+++ b/live-build/apparmor/6.14/policy/versions/v9
@ -0,0 +1 @@
 yes
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Utkarsh Gupta	18300375dd	Update d/ch for 24.04.93 release	2025-08-12 20:07:32 +05:30
Utkarsh Gupta	7f6c20edac	Merge remote-tracking branch 'bryalex/bryalex/6.14-noble' into ubuntu/noble * bryalex/bryalex/6.14-noble: Add debian/changelog entry (LP: #2116199) feat(apparmor): Add 6.14 kernel apparmor features' preseeds	2025-08-12 20:04:32 +05:30
Dan Bungert	2b52891daf	releasing package livecd-rootfs version 24.04.92	2025-07-31 11:27:46 -06:00
Dan Bungert	1ff53fd2d3	Revert "functions: proper cloud-init.service full unit override in etc" This reverts commit 736099c6b6ae5e5a27f72fd697fe02e91bb10fac.	2025-07-31 11:26:05 -06:00
Juerg Haefliger	b05cffdb55	releasing package livecd-rootfs version 24.04.91	2025-07-30 17:38:38 +02:00
Juerg Haefliger	182b6a5f5b	build: Fix lowlatency kernel flavour name Nowadays the lowlatency kernel is just the generic kernel with some bootargs to make it lowlatency. Hence the flavour name is 'generic'.	2025-07-30 17:38:31 +02:00
Dan Bungert	069bcfedd2	releasing package livecd-rootfs version 24.04.90	2025-07-22 15:50:36 -06:00
Chad Smith	736099c6b6	functions: proper cloud-init.service full unit override in etc System override drop-ins cannot redact dependencies (Before or After) and thus require a full unit override. Avoid writing the unit file delivered by cloud-init deb package in /lib/systemd/system/cloud-init.service because it will generate warnings fron debsums -c about modified files. The correct place to provide a full unit override is in /etc/systemd/system/cloud-init.service in order to drop Before=sysinit.target from the packaged cloud-init.service file. Note vigilance will be needed across cloud-init SRU boundaries to ensure we sync any cloud-init.service unit changes that are introduced to stable releases because livecd-rootfs is overriding the whole file. LP: #2069391 (cherry picked from commit 97dd81183b3222b05cc53c3637e934fc2c61a5f0)	2025-07-21 16:04:34 +02:00
Bryan Alexander	149fe6e781	Add debian/changelog entry (LP: #2116199 )	2025-07-17 13:06:33 -07:00
Bryan Alexander	11813f299a	feat(apparmor): Add 6.14 kernel apparmor features' preseeds Add apparmor feature preseeds for 6.14 kernel. (LP: #2116199)	2025-07-14 01:25:37 -07:00
Dan Bungert	84e51f8d9f	releasing package livecd-rootfs version 24.04.89	2025-04-30 15:27:51 -06:00
Dan Bungert	7d2975740d	desktop: remove references to subiquity snap No subiquity snap is present on Desktop isos, these are cruft. (cherry picked from commit 5e990020e5280152ce7387b707ad5c6dba623ae4)	2025-04-16 09:44:20 -06:00
Adriano Cordova	cddd73d626	Fix changelog typo from 25.04.88 to 24.04.88 Signed-off-by: Adriano Cordova <adriano.cordova@canonical.com>	2025-04-02 16:06:32 -03:00
Michael Hudson-Doyle	fa4167f97e	combine changelog entries as this will be a single upload	2025-03-07 09:05:06 +13:00
Adriano Cordova	0b21f55ba4	riscv: add SUBARCH 'jh7110' Add SUBARCH 'jh7110' for jh7110-based boards	2025-02-25 15:32:46 -03:00
Adriano Cordova	eb650f1d34	riscv: directly copy device trees to the ESP instead of relying on flash-kernel	2025-02-24 23:35:42 -03:00
Utkarsh Gupta	419e83058d	Update d/ch for 24.04.87 release	2025-02-21 14:38:02 +05:30
Utkarsh Gupta	547ee62e66	Merge remote-tracking branch 'toabctl/noble-apparmor-feature-6.11-lp2098306' into ubuntu/noble * toabctl/noble-apparmor-feature-6.11-lp2098306: Add debian/changelog entry Add 6.11 kernel apparmor features' preseeds	2025-02-21 14:37:33 +05:30
Michael Hudson-Doyle	a3363733ff	releasing package livecd-rootfs version 24.04.86	2025-02-17 11:32:33 +13:00
Michael Hudson-Doyle	46fae973d7	Do not build HWE kernel layer on RISC-V as there is no HWE kernel there.	2025-02-17 11:31:54 +13:00
Dan Bungert	5e36233d82	releasing package livecd-rootfs version 24.04.85	2025-02-13 07:48:03 -07:00
Thomas Bechtold	519832022e	Add debian/changelog entry	2025-02-13 12:56:37 +01:00
Utkarsh Gupta	61042515b3	Add 6.11 kernel apparmor features' preseeds	2025-02-13 12:22:16 +01:00
Dan Bungert	2a9992ad7d	build: fix FLAVOUR set for lowlatency	2025-02-12 20:00:08 -07:00
Utkarsh Gupta	de15c55ef0	Update d/ch for 24.04.84 release	2025-02-13 03:16:44 +05:30
Utkarsh Gupta	d02ab9bc0e	Bump HWE kernel track to 24.04 for ubuntu-core-desktop	2025-02-13 03:16:44 +05:30
Florent 'Skia' Jacquet	ddfb468b42	Enable the HWE stack for 24.04.2 This change was overlooked, thanks to a combination of Jira checklist items + inexperienced team members + quite late landing of the HWE stack. LP: #2098105	2025-02-13 03:16:14 +05:30
Florent 'Skia' Jacquet	2af06de671	kylin: indentation fix	2025-02-12 15:17:28 +01:00
Didier Roche	5545bf057e	releasing package livecd-rootfs version 24.04.83	2025-01-23 15:37:42 +01:00
Didier Roche	4e52b33e45	Update reference to wsl-setup now in /usr/lib/wsl/ Microsoft expects this binary to be under that path.	2025-01-23 14:22:43 +01:00
Didier Roche	48338fc76a	Create wsl-distribution.conf for WSL images This file is required in the new Microsoft WSL package format. Co-authored-by: Carlos Nihelton <carlos.santanadeoliveira@canonical.com>	2025-01-23 14:13:36 +01:00
Didier Roche	c1e2deee9f	Create livecd-roots tarball as a .wsl extension Co-authored-by: Carlos Nihelton <carlos.santanadeoliveira@canonical.com>	2025-01-23 14:13:36 +01:00
Didier Roche	c954240293	Keep a single wsl rootfs upgrade policy We are removing our different variants of wsl rootfs with the new Microsoft format. We only keep one following the distribution policy: - lts to lts - intermediate release to next one Co-authored-by: Carlos Nihelton <carlos.santanadeoliveira@canonical.com>	2025-01-23 14:13:31 +01:00
Loïc Minier	a81a1c20c7	Add support for arm64+tegra-jetson flavor. (LP: #2091392 )	2024-12-13 17:54:01 +00:00
Utkarsh Gupta	a2058724c4	Update d/ch for 24.04.81 release	2024-11-20 15:44:45 +05:30
Utkarsh Gupta	6047e22319	Introduce unminimize as a package in OCI images (LP: #2078583 ) With having unminimize split out from livecd-rootfs, we should re-introduce it as a package for, at least, Noble so that it's not seen as a regression. From 24.10 and onward, we're going to drop it altogether.	2024-11-20 15:43:41 +05:30
John Chittum	9a970b2ca2	changelog	2024-11-07 08:12:50 -05:00
John Chittum	b7c2cf45b1	fix(buildd): create buildd homedir LP:2083240 starting in noble, adduser no longer creates a homedir for system users. The buildd user then does not have a home directory, causing snaps to be unable to run, as well as possibly other issues from a missing assumed homedir. Explicitly create /home/buildd	2024-11-06 07:33:51 -05:00
Thomas Bechtold	70d7c43d6a	Add debian/changelog entry	2024-10-18 13:55:39 +02:00
Thomas Bechtold	d1ca48bdc4	feat(apparmor): Add policy:permstable32 feature to 6.8 kernel (LP: #2084698 ) Failing CPC tests show that the preseeded apparmor features don't include policy:permstable32 for the 6.8 kernel. This change adds the feature preseed with values based on a successfully booted instance.	2024-10-18 13:53:20 +02:00
John Chittum	0b2af5aa60	add changelog entry	2024-09-26 17:04:57 +12:00
John Chittum	377617b946	feat(ubuntu-cpc): sbom generation everywhere patch create_manifest to produce an sbom when called by an ubuntu-cpc project. Patch all the ubuntu-cpc hooks and series files to include the newly generated manifests, filelists, and sboms. Generates a number of new artifacts in the builds. the snap utilized, cpc-sbom, is an open source repo and a provided via a hidden snap. there is no intention of publisizing the snap or how we generate sboms, however partners require the ability to audit if required. defensively checks if the snap is already installed, in the case of multiple hooks being called in a single build (thus sharing a build host), and only if called in an ubuntu-cpc project. (cherry picked from commit 7c7b7df89dc96169db1f255d6bba901ebb63a43c)	2024-09-26 17:04:35 +12:00
Michael Hudson-Doyle	d3ef751279	commit hotfix upload	2024-09-26 17:04:12 +12:00
Utkarsh Gupta	9ffb24c8f7	Add SRU bug in d/ch entry	2024-08-23 11:03:33 +05:30
Utkarsh Gupta	aa3481c960	Update d/ch for 24.04.77 release	2024-08-21 12:09:45 +05:30
Utkarsh Gupta	c8ee3dddba	Use packaged unminimize in the ubuntu-server images unminimize is currently present at /usr/local/sbin/unminimize, which is spit out by livecd-rootfs currently. We'd like to switch that to use the packaged unminimize, which will be at /usr/bin/unminimize instead. (cherry picked from commit 7535bf7bc729b52d28a0a5a44b3aa8362ca9397d)	2024-08-21 12:06:39 +05:30
Utkarsh Gupta	0f837b9431	Drop unminimize spit out by livecd-rootfs And prefer the one that is packaged separately as src:unminimize, which installs the package in /usr/bin/unminimize (cherry picked from commit 34482819f0d0078f834b052c308b371bedd621d0)	2024-08-21 12:06:20 +05:30
Michael Hudson-Doyle	47c1a539d6	releasing package livecd-rootfs version 24.04.76	2024-08-21 16:14:10 +12:00
Michael Hudson-Doyle	9441bbdfb5	Force latest/stable/ubuntu-24.10 subiquity onto the ubuntu-core-installer ISO for now.	2024-08-21 15:58:08 +12:00
Michael Hudson-Doyle	5a4991ade3	add reference to SRU bug to changelog	2024-08-08 16:50:13 +12:00
Michael Hudson-Doyle	a99b788ebc	releasing package livecd-rootfs version 24.04.75	2024-07-30 16:35:50 +12:00
Michael Hudson-Doyle	0df4234c28	Add 'ubuntu-core-installer' project. The ubuntu-core-installer image is an installer that installs ubuntu core. The environment the installer runs in is similar to the server installer but it has a source catalog entry that points to the model created in ubuntu-core-installer/hooks/05-prepare-image.binary, which subiquity knows how to install.	2024-07-25 17:26:22 +12:00
Łukasz 'sil2100' Zemczak	2215660a7d	releasing package livecd-rootfs version 24.04.74	2024-07-24 16:17:29 +01:00
Heinrich Schuchardt	1da6867784	riscv64: preinstalled server image for Microchip PIC64GX Curiosity Kit Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>	2024-07-24 11:26:05 +02:00
Łukasz 'sil2100' Zemczak	69b47ce2fe	releasing package livecd-rootfs version 24.04.73	2024-07-11 13:17:09 +02:00
Łukasz 'sil2100' Zemczak	bb44f093c9	Backport the qcow2 ubuntu-core image generation for LXD support.	2024-07-11 13:16:40 +02:00
Philip Roche	a0dea8f6e2	d/ch change to upload 24.04.72 noble	2024-06-25 12:23:43 +01:00
Philip Roche	d9e444988d	Merge bugfix/LP-2069828-restore-unminimize-during-server-build-noble into ubuntu/noble [a=philroche] [r=gjolly,utkarsh] fix: Revert removal of unminimize call in server builds (LP: #2069828) There was a change made by me in https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/466388 as part of LP: #2066905 to remove references to LXD in the unminimize scripts but I also removed the calls to `unminimize` in error. This still needs to run but without any references to LXD which no longer needs to be `unminimized` via snap installation. (cherry picked from commit f574fc8200d8a4c7837288c5d2aa1e515137bb55) MP: https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/468088	2024-06-25 12:19:00 +01:00
Philip Roche	62a80ac00a	fix: Revert removal of unminimize call in server builds (LP: #2069828 ) There was a change made by me in https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/466388 as part of LP: #2066905 to remove references to LXD in the unminimize scripts but I also removed the calls to `unminimize` in error. This still needs to run but without any references to LXD which no longer needs to be `unminimized` via snap installation. (cherry picked from commit f574fc8200d8a4c7837288c5d2aa1e515137bb55)	2024-06-24 17:26:07 +01:00
Heinrich Schuchardt	05933ff83f	riscv64: use earlycon=sbi on command line With current kernel we need to specify the SBI driver for the early console to work. Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>	2024-06-07 16:21:32 +02:00
Philip Roche	10d4a04d14	Merge bugfix/noble-remove-files-added-during-incorect-merge-conflict-resolution into ubuntu/noble [a=philroche] [r=brian-murray] fix: Remove .patch files and livecd-rootfs symlink committed in error as part of merge commit. Apologies. Trying to do too many things at once This reverts changes added in error in commit 639f04b7 MP: https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/466885	2024-06-04 18:42:12 +01:00
Philip Roche	d72ae0de70	fix: Remove .patch files and livecd-rootfs symlink committed in error as part of merge commit. Apologies. Trying to do too many things at once This reverts changes added in error in commit 639f04b7	2024-06-04 18:33:45 +01:00
Philip Roche	bfb829c64d	fix: Remove .idea pycharm directories and files committed in error as part of merge commit. Apologies. Trying to do too many things at once	2024-05-27 12:40:56 +01:00
Philip Roche	13ec478feb	d/ch change to upload 24.04.71 noble	2024-05-27 12:06:44 +01:00
Philip Roche	639f04b7b9	Merge feature/re-enable-noble-hyperv-desktop-builds-noble into ubuntu/noble [a=philroche] [r=mwhudson,utkarsh] feat: Re-enable ability to build HyperV desktop images (LP: #2064280) We have not built Hyperv desktop images since Jammy and with the re-introduction of HyperV for Noble we have encountered build issues caused by refactoring and removals of code assumed to be redundant but the HyperV desktop images were actually using these code paths. This is a backport/SRU from oracular. MP: https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/466385 # Conflicts: # debian/changelog	2024-05-27 12:06:31 +01:00
Philip Roche	073d7e0404	d/ch change to upload 24.04.70 noble	2024-05-27 11:11:12 +01:00
Philip Roche	1f40b60606	Merge bugfix/lxd-no-longer-seeded-unminimize-noble into ubuntu/noble [a=philroche] [r=sdeziel,utkarsh,vorlon] fix: No longer install LXD snap in unminimize script (LP: #2066905) The LXD snap is no longer seeded in any images since Noble+ so the LXD related unminimize logic in ./live-build/auto/build?h=ubuntu/noble and ./live-build/ubuntu-server/hooks/01-unminimize.chroot_early is no longer required. lxd-installer can remain installed. This is a backport/SRU from oracular (cherry picked from commit 46c19dfa913c133042d62e0caa2d2d526cd9bb7f) MP: https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/466388	2024-05-27 11:10:05 +01:00
Philip Roche	5507ca8d83	fix: No longer install LXD snap in unminimize script (LP: #2066905 ) The LXD snap is no longer seeded in any images since Noble+ so the LXD related unminimize logic in ./live-build/auto/build?h=ubuntu/noble and ./live-build/ubuntu-server/hooks/01-unminimize.chroot_early is no longer required. lxd-installer can remain installed. (cherry picked from commit 46c19dfa913c133042d62e0caa2d2d526cd9bb7f)	2024-05-24 15:48:21 +01:00
Philip Roche	49a14274d1	d/ch update for 24.04.70 to re-enable ability to build HyperV desktop images (LP: #2064280 )	2024-05-24 15:34:40 +01:00
Philip Roche	5f59eec085	fix(Hyperv Desktop): remove redundant case statement match `ubuntu` `ubuntu` will never match `${PROJECT:-}:${SUBPROJECT:-}` cases statement and can be safely removed. (cherry picked from commit 0945c40fb2bb067d86d496b7b40bdae89123124c)	2024-05-24 15:31:21 +01:00
Philip Roche	8cc079fe50	fix(Hyperv Desktop): as we are using oem-config we do not need ubiquity-slideshow-ubuntu As we are only using oem-config, oem-config-slideshow-ubuntu will suffice (cherry picked from commit 8fe26586cc1b65621e74121b03c912dcee0e6cf8)	2024-05-24 15:31:16 +01:00
Philip Roche	34edbb9a1c	fix(Hyperv Desktop): ubiquity-frontend-gtk is a dependency of the oem-config-gtk package so does not need to be added explicitly (cherry picked from commit dc2d1318d2d2183f6d80673a1daf5dc8794cd3ed)	2024-05-24 15:31:11 +01:00
Philip Roche	40c7eac14d	feat(Hyperv Desktop): Disable cloud-init for Hyperv Desktop images (LP: #2064280 ) For Ubuntu 24.04 and later cloud-init is included in desktop images. This is not applicable for Hyperv images so we can disable cloud-init. This leaves the cloud-init package installed but disabled so users can still use it if they want. This is a documented way to disable cloud-init. See https://cloudinit.readthedocs.io/en/latest/howto/disable_cloud_init.html (cherry picked from commit ff47664d8c646ebae72c40145ee1fd8098185de6)	2024-05-24 15:30:50 +01:00
Phil Roche	b12e271417	fix(HyperV desktop): Ensure removed hyperv dependencies are present in HyperV builds (LP: #2064280 ) A change in 8fb21808 also removed many of the dependencies that the hyperv images require. This removal has been restored in this commit by adding them expliciltly in the hyperv hook. (cherry picked from commit c459e5e5af0371c0228bd4e5ddec57b8954d39df)	2024-05-24 15:30:45 +01:00
Phil Roche	fa351ac77b	fix(HyperV desktop): Re-enable ability to build HyperV desktop images (LP: #2064280 ) We have not built Hyperv desktop images since Jammy and with the re-introduction of HyperV for Noble we have encountered build issues caused by refactoring and removals of code assumed to be redundant but the HyperV desktop images were actually using these code paths. In bbedffe6 we split the building of cloud images and non cloud to using an ddisk-image-uefi.binary and disk-image-uefi-non-cloud.binary respectively. In e38264ca there was a change which meant that any attempt to build hyperv images would result in incorrect disk size and incorrect disk label. This has been fixed by ensuring that the ubuntu:desktop-preinstalled $PROJECT:$SUBPROJECT matches and sets the correct disk size and correct disk label. A change in 76d79466 changed the logic of how the image size for amd64 images were being set. This overrode the sizes set for the desktop images incorrectly. This commit ensures that any desktop image being created uses the correct image size. (cherry picked from commit 48aed401949637ac314e59de996ccab19d5eefcd)	2024-05-24 15:30:38 +01:00
		`@ -0,0 +1 @@`
							`chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore`
		`@ -0,0 +1 @@`
							`create read write exec append mmap_exec link lock`
		`@ -0,0 +1 @@`
							`create read write open delete setattr getattr`
		`@ -0,0 +1 @@`
							`unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp`
		`@ -0,0 +1 @@`
							`allow deny subtree cond kill complain prompt audit quiet hide xindex tag label`
		`@ -0,0 +1 @@`
							`cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime`
		`@ -0,0 +1 @@`
							`hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost`
		`@ -0,0 +1,2 @@`
							`unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp`