[pkg-apparmor] Bug#990499: apparmor: Include local profile for sanitized_helper

intrigeri intrigeri at debian.org
Fri Sep 3 09:15:53 BST 2021


Control: tag -1 + upstream
Control: severity -1 wishlist

Hi,

Frank (2021-06-30):
> The current setup for the profile sanitized_helper does not include a local
> profile for adjustments. I would like to propose
>
> #include <local/ubuntu-helper>
>
> in /etc/apparmor.d/abstraction/ubuntu-helpers

This makes sense to me.

Now that we can target AppArmor 3.x, I would instead suggest:

  include if exists <local/ubuntu-helpers>

… so we don't have to create/manage local/ubuntu-helpers.

Would you like to submit this as a merge request upstream?
It would happen there: https://gitlab.com/apparmor/apparmor

Cheers!



More information about the pkg-apparmor-team mailing list