[pkg-apparmor] Bug#906202: dh-apparmor should check syntax of AppArmor policy

intrigeri intrigeri at debian.org
Sat Oct 20 16:12:57 BST 2018


Control: retitle -1 dh-apparmor should check syntax of AppArmor policy at package build time

Hi,

Bernhard Schmidt:
> I'm not sure whether this is possible.

> There have been multiple occasions (and I have been the cause of at least one
> of them) where a syntactically wrong AppArmor policy (missing comma at EOL)
> caused an RC bug. It would be great if dh-apparmor could check the basic syntax
> of the AppArmor policy included in the package and abort the build.

Agreed, good idea!

I think it's possible. For inspiration, see:
https://salsa.debian.org/apparmor-team/apparmor-profiles-extra/blob/debian/master/debian/rules#L25

Cheers,
-- 
intrigeri



More information about the pkg-apparmor-team mailing list