[Pkg-swan-devel] Bug#848890: Bug#848890: Revisiting "Ubuntu strongSwan changes"

Christian Ehrhardt christian.ehrhardt at canonical.com
Wed Dec 21 09:33:35 UTC 2016


 Background to explain the reasoning behind the change 4/7:

Commits:
59e9a0b * add and install apparmor profiles
3d124a4 changelog: Add and install strongswan apparmor profiles

Make the usage of strongswan even more secure by providing an apparmor
profile
for it.

This change add the necessary build dependencies, installs the profiles and
provides profiles for charon, lookip and stroke.

As usual best practise in case the profiles turn out to be too restrictive
for
a very special not considered setup they all provide includes to local
overrides. That allows to modify the rules as needed without causing file
conflicts on further updates to the package delivered profiles.
​
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-swan-devel/attachments/20161221/4ca79645/attachment.html>


More information about the Pkg-swan-devel mailing list