[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#754744: marked as done (forbid most packages to depend on or recommend apparmor)



Your message dated Sat, 27 Jul 2019 14:49:24 -0300
with message-id <877e831i6z.fsf@manticora>
and subject line Closing: part of a past strategy that's obsolete since AppArmor is now enabled by default
has caused the Debian Bug report #754744,
regarding forbid most packages to depend on or recommend apparmor
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
754744: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754744
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: debian-policy
Severity: wishlist

Hi!

Suggested policy addition:

Do not depend on or recommend the apparmor package

Packages must neither depend on nor recommend apparmor, because it would
not only enable AppArmor for this package, but for any packages shipping
an AppArmor profile, which might have unwanted effects. Enabling
AppArmor should require at least one conscious decision by the user.

If you are shipping an AppArmor profile, add apparmor to Suggests.

apparmor-{utils,profiles,profiles-extra} and other packages where this
is useful are exceptions.

Reason:

Before we can automatically enable AppArmor when the userspace tools are
installed, AppArmor maintainer intrigeri said, we must make sure, that
no packages depend on AppArmor, so AppArmor does not get installed even
though the user does not wish this. [1]

Other:

Bastien ROUCARIES would implement this into lintian and asked me to
report this against policiy. [2]

Feel free to change wording / etc. I don't have a strong opinion
there. Whatever you feel appropriate.

Cheers,
Patrick

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702030
[2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754730

--- End Message ---
--- Begin Message ---
Hi,

now that AppArmor is enabled by default in our Linux kernel,
which "Recommends: apparmor", we need these changes neither in the
Policy, nor in Lintian, nor in src:apparmor itself.

Cheers,
-- 
intrigeri

--- End Message ---

Reply to: