[Pkg-privacy-commits] [onioncircuits] 08/21: AppArmor: include local overrides file.
Sascha Steinbiss
satta at debian.org
Wed Oct 4 15:53:56 UTC 2017
This is an automated email from the git hooks/post-receive script.
satta pushed a commit to branch master
in repository onioncircuits.
commit ce92de8512e88a2363830312df152f4a7f8f58f3
Author: intrigeri <intrigeri at boum.org>
Date: Sun Jun 25 07:35:30 2017 +0000
AppArmor: include local overrides file.
The current best practice, to allow users to locally override AppArmor profiles
shipped as conffiles, is to source "/etc/apparmor.d/local/<profilename>" in
every profile. Then, dh-apparmor takes care of creating/removing this file in
maintainer scripts. The Debian packaging for onioncircuits already uses
dh-apparmor to manage that local override file, so all that's missing is
actually including it, which this commit does.
---
apparmor/usr.bin.onioncircuits | 2 ++
1 file changed, 2 insertions(+)
diff --git a/apparmor/usr.bin.onioncircuits b/apparmor/usr.bin.onioncircuits
index 2c68848..413fbc7 100644
--- a/apparmor/usr.bin.onioncircuits
+++ b/apparmor/usr.bin.onioncircuits
@@ -34,4 +34,6 @@
# Silence logs
deny /run/user/[0-9]*/dconf/user rwk,
deny @{HOME}/.config/dconf/user r,
+
+ #include <local/usr.bin.onioncircuits>
}
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-privacy/packages/onioncircuits.git
More information about the Pkg-privacy-commits
mailing list