[pkg-apparmor] Bug#884278: prevent deinstallation of boot-critical package

Joachim Wuttke j.wuttke at fz-juelich.de
Wed Dec 13 10:03:42 UTC 2017


Package: apparmor
Version: 2.11.0-3

Apparmor can be boot critical.
Therefore, users should be warned from deinstalling.

In more detail:

Cleaning up my Debian/testing installation, it occured
to me that there was an unneeded package apparmor. So I
deinstalled it, without any conflicting dependences and
without any other resistance.

When I rebooted some days later, the system hang. No error
message appeared, no clue pointed to missing apparmor.

To prevent this from happening to others, several measures
seem in order:

- Revise the package description: Make it somewhat less
technical, and emphasize that the package is needed to
boot the default kernel

- Make other packages (which ?) depend on apparmor to
prevent unconscient deinstallation of apparmor.

- Consider an extra dialog popping up to say: this is
boot critical, sure you want to deinstall?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5110 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-apparmor-team/attachments/20171213/7618ceba/attachment.bin>


More information about the pkg-apparmor-team mailing list