Re: [PATCH] apparmor: Add support for local profile customizations
Hello,
Am Dienstag, 27. Juni 2023, 18:49:04 CEST schrieb Andrea Bolognani:
On Mon, Jun 26, 2023 at 10:46:40PM +0200, Christian Boltz wrote:
[...]
> See above - IMHO the current upstream behaviour is not perfect,
and
> will hopefully change to not creating the local/ files by default
> in 4.0.
This last bit was more about Debian specifically than upstream, since
IIUC it's dh-apparmor that creates the files. But I see that you're
one of the maintainers for AppArmor in Debian, so I guess you'll be
on top of that on both fronts :)
Thanks for the flowers, but I wouldn't call myself maintainer in Debian.
I "only" have an eye on the Debian bugtracker for AppArmor-related bugs,
but don't do packaging work there. (Same for Ubuntu, BTW.)
If you want AppArmor packages maintained by me, you'll have to install
openSUSE ;-) (and yes, I'm fully aware of the irony telling this to
someone with a @redhat.com address ;-)
By the way, is there any plan to move from local/foo to foo.d/ for
profiles too? I imagine that the main concern would be keeping
existing configurations working, but it would be nice to have
consistency between the two, and the foo.d/ approach is generally
much more flexible... 4.0 material, perhaps?
Interesting idea, I'll bring it up upstream.
Regards,
Christian Boltz
--
My point is that we might be able to maintain a "latest and greatest"
less in utilities, rather than in Base:System. Well... if "latest and
greatest" applies to less in the first place.. erm... probably not.
[Pascal Bleser in opensuse-packaging]
Attachments:
- signature.asc (application/pgp-signature — 833 bytes)