[pkg-apparmor] Bug#702030: Please automatically enable AppArmor when the userspace tools are installed

[Jonas Meurer]

Hi intrigeri,

intrigeri:
> Jonas Meurer:
>> Since we hit the Buster freeze today and apparmor still is enabled per
>> default in Buster (yay \o/ ) due to a Recommends by the linux-image
>> package, I think this bugreport became moot and can be closed, right?
> 
>> Same probably holds true for #754730.
> 
> Before closing these 2 bugs, I wanted to wait for Buster to be
> actually released with this change: there's still a possibility that
> enough new RC bugs lead the Release Team to ask the src:linux
> maintainers to revert the aforementioned Recommends (+ the kernel
> config bits that enable AppArmor by default).
> 
> But perhaps I'm a tad too cautious :) Happy to let you make the
> decision with this in mind. We can always reopen bugs anyway.

Nope, you're right. Probably it's better to wait for the release of
buster. Since the bugreport didn't have any updates since 2017, I
thought it would have been obsolete and abandoned. I'm totally fine with
waiting for the buster release before closing it.

>> If that's correct, then https://wiki.debian.org/AppArmor/HowToUse should
>> be updated as well, particularly the paragraph "Enable AppArmor".
> 
> Good catch, done. You might be also interested in #874873.

Thanks!

>> I also filed a merge request against release notes, adding a short
>> paragraph about AppArmor being enabled per default in Buster, reviews
>> welcome:
> 
>> https://salsa.debian.org/ddp-team/release-notes/merge_requests/6
> 
> Funny race condition: I've just filed #924450. See you there :)

Hehe, that's funny indeed. Maybe you want to review my proposed patch, I
would appreciate that.

Cheers
 jonas


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-apparmor-team/attachments/20190313/71340787/attachment.sig>