[pkg-apparmor] Bug#923273: Bug#923273: apparmor: nvidia_modprobe named profile is shipped in complain mode

intrigeri intrigeri at debian.org
Tue Feb 26 06:54:13 GMT 2019


> After latest upgrade I've discovered via `aa-status` that new named profile `nvidia_modrpobe` is loaded in complain mode:

Good catch!

That's because debian/rules does this:

	# set all profiles in apparmor-profiles to complain mode
	cd $(CURDIR)/debian/tmp && sh $(CURDIR)/debian/put-all-profiles-in-complain-mode.sh

… which unfortunately, now that the apparmor binary package ships its
first profile (previously it only shipped abstractions), sets it to
complain mode.

I'll try to prepare a fix ASAP unless you tell me you're on it.



More information about the pkg-apparmor-team mailing list