[pkg-apparmor] Bug#866792: irssi profile should be in complain mode
intrigeri
intrigeri at debian.org
Sun Jul 2 08:29:06 UTC 2017
Hi!
Antoine Beaupre:
> The apparmor profile for irssi is way too restrictive. […]
I agree with your analysis.
Meta: this profile was added to aa-p-extra by Holger, who stopped
working on this package a while ago (#824462). I have no personal
interest in it and I am not in a position to maintain it properly (I
don't use irssi myself).
So I see 2 options:
a) ship usr.bin.irssi in complain mode
b) stop shipping usr.bin.irssi entirely
(a) makes sense to me as a temporary way to encourage interested
people to submit improvements upstream until this profile is suitable
for widespread usage. If this works, fine: at some point we will be
able to revert the change and ship the profile in enforce mode again.
If this fails, then I will want to go with (b) before the Buster
freeze.
To anyone who wants to improve this profile:
* it lives in
https://code.launchpad.net/~apparmor-dev/apparmor-profiles/+git/apparmor-profiles
* Ulrike was kind enough to document how to prepare and send merge
requests upstream:
https://wiki.debian.org/AppArmor/Contribute/Upstream#Quick_howto_contribute_to_upstream_AppArmor_profiles_using_Git
Cheers,
--
intrigeri
More information about the pkg-apparmor-team
mailing list