[Pkg-swan-devel] About the charon-systemd apparmor profile

[Noam Nedelec-Salmon]

On Wed, 26 Mar 2025 at 20:25, Yves-Alexis Perez <corsac at debian.org> wrote:
> Hi Noam, thanks for reaching out. Best would be to use the
> pkg-swan-devel at lists.alioth.debian.org mailing list (which I added to CC:)

Sure, apologies for missing that. And for the very late reply.

> Honestly I'm not sure. I guess it would make sense to switch to enforcing mode
> but we are just pass the transition freeze for the trixie release cycle so I'm
> not sure it's the best time to actually do it, maybe it would make sense to
> wait for the next release (even if that means waiting for a complete release
> cycle).

I am not aware of any testing having already been made.
The Ubuntu security team would be interested in getting this profile completed
and tested before the October 2025 release. If nobody else is currently working
on it we should start in the next few weeks. Afterwards it should be possible to
port the profile to Debian without much additional effort.


Wishing you a nice day,

Noam Nedelec-Salmon
Ubuntu Security Engineer