Bug#1095797: gnome-shell-extension-desktop-icons-ng: apparmor configuration file breaks apparmor in debian sid

[Giacomo Mulas]

Package: gnome-shell-extension-desktop-icons-ng
Version: 47.0.13-1
Severity: important

Dear Maintainer,

the /etc/apparmor.d/desktop-icons-ng file shipped with the package breaks
current apparmor in sid.  I had to modify it to allow the apparmor service
to start.  I am attaching the modified file that allows apparmor to start,
so that you can see what the offending lines in the original one are.
Please make sure to release a new version which does not break apparmor.
This may go unnoticed, because the system apparently keeps working, but 
since apparmor did not correctly start there may be unwanted security 
issues.

Thanks in advance, best regards
Giacomo Mulas


-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (401, 'unstable'), (10, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.13-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages gnome-shell-extension-desktop-icons-ng depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.40.0-5
ii  gir1.2-gnomeautoar-0.1                       0.4.5-2
ii  gir1.2-gnomedesktop-3.0                      44.1-2
ii  gjs                                          1.82.1-1
ii  gnome-shell                                  47.3-1
ii  nautilus                                     47.1-2

gnome-shell-extension-desktop-icons-ng recommends no packages.

gnome-shell-extension-desktop-icons-ng suggests no packages.

-- Configuration Files:
/etc/apparmor.d/desktop-icons-ng changed:
include <tunables/global>
profile desktop-icons-ng /usr/share/gnome-shell/extensions/ding at rastersoft.com/app/{ding,createThumbnail}.js flags=(unconfined) {
  #userns,
  # Site-specific additions and overrides. See local/README for details.
  include if exists <local/desktop-icons-ng>
}


-- no debconf information