[Pkg-swan-devel] Bug#905082: make apparmor rules ready for usr merge

[Christian Ehrhardt]

Package: strongswan
Version: 5.6.2-2
Severity: low

Hi,
to be ready for usr merge [1] one of the rules in the strongswan apparmor
profiles would need to be adapted.

[1]: https://wiki.debian.org/UsrMerge

This isn't critical right now, but OTOH easy to do, the change would be
like:

diff --git a/debian/usr.lib.ipsec.charon b/debian/usr.lib.ipsec.charon
index 9e24c744d..14cfa6d0b 100644
--- a/debian/usr.lib.ipsec.charon
+++ b/debian/usr.lib.ipsec.charon
@@ -41,7 +41,7 @@
  network,
  network raw,

-  /bin/dash                 rmPUx,
+  /{,usr/}bin/dash                 rmPUx,

  # libchron-extra-plugins: kernel-libipsec
  /dev/net/tun              rw,
diff --git a/debian/usr.sbin.charon-systemd b/debian/usr.sbin.charon-systemd
index b3daa4626..c79e73dc6 100644
--- a/debian/usr.sbin.charon-systemd
+++ b/debian/usr.sbin.charon-systemd
@@ -42,7 +42,7 @@
  network,
  network raw,

-  /bin/dash                 rmPUx,
+  /{,usr/}bin/dash                 rmPUx,

  # libchron-extra-plugins: kernel-libipsec
  /dev/net/tun              rw

-- 
Christian Ehrhardt
Software Engineer, Ubuntu Server
Canonical Ltd
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-swan-devel/attachments/20180731/14c23c30/attachment.html>