[pkg-apparmor] dovecot profiles

intrigeri intrigeri at debian.org
Wed Aug 1 02:35:23 BST 2018


Christian Boltz:
> Just curious - what exactly is the issue with the dovecot profiles?

Nobody maintains them for Debian so I'm told they don't work
out-of-the-box. Given we were shipping them in complain mode, the cost
is obviously higher than the security benefit. I've been leaving them
in complain mode for a few years in the hope that someone notices and
improves the profile upstream (or at least files actionable bug
reports) but this did not happen.

> I ship them enabled by default in openSUSE since years and got very few 
> bugreports for them, which means they can't be too bad ;-)

I'm glad they work fine for openSUSE :)

Cheers,
-- 
intrigeri



More information about the pkg-apparmor-team mailing list