[pkg-apparmor] Bug#782700: Please drop $remote_fs init.d dependency to allow running early

Martin Pitt mpitt at debian.org
Thu Apr 16 12:56:55 UTC 2015


Package: apparmor
Version: 2.9.0-3

Hello,

apparmor's init.d script currently depends on $remote_fs. This is a
rather heavy dependency and means that important processes like
dhclient or NFS cannot be covered by apparmor as they need to start
before. In the extreme case this also means that
network-online.target, NetworkManager.service, dbus.service etc. all
need to run during early boot ("rcS" in the old sysvinit world), which
likely leads to dependency cycles.

IMHO $local_fs should suffice as during booting the init.d script does
not need much from /usr or /var. The exception is the click package
hook processing, but this is only really significant for Ubuntu Touch
images (which don't use /usr on NFS). The profile cache has been split
into /etc/ and /var for this reason, so that on boot you only need the
cache in /etc. The one in /var is only being used for click packages
as far as I know.

FTR, Ubuntu did that change in
https://launchpad.net/ubuntu/+source/apparmor/2.9.1-0ubuntu5

Thanks for considering,

Martin

-- 
Martin Pitt                        | http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-apparmor-team/attachments/20150416/e0f108c1/attachment.sig>


More information about the pkg-apparmor-team mailing list