[pkg-apparmor] Bug#868563: apparmor-profiles: Apparmor profiles for postfix programs have incorrect path

intrigeri intrigeri at debian.org
Thu Jul 20 12:27:55 UTC 2017


Control: severity -1 minor
Control: tag -1 + upstream
Control: found -1 2.11.0-6

Hi,

debian-bugs at vorpal.se:
> After upgrading from jessie to stretch I noticed that postfix was no
> longer constrained by apparmor profiles (using aa-unconfined, ps
> auxZ etc).

> The cause of this issue seems to be that the profiles in this
> package use paths like /usr/lib/postfix/master but this has moved to
> /usr/lib/postfix/sbin/master. This applies to all /usr/lib/postfix/*
> profiles. Thus the profiles do not properly apply to the correct
> process. The profiles will need to be updated to point to the
> right executables.

Good catch, thanks.

Now, as /usr/share/doc/apparmor-profiles/extras/README says, these
profiles are not supported:

  Feedback on these unsupported profiles is welcomed; any
  contributions for this directory should be clearly licensed
  -- we recommend using the GPL. Please mail suggestions or
  modifications to the apparmor at lists.ubuntu.com mail list:
  https://lists.ubuntu.com/mailman/listinfo/apparmor

So downgrading severity accordingly.

Cheers,
-- 
intrigeri



More information about the pkg-apparmor-team mailing list