Your message dated Thu, 15 Oct 2026 15:13:04 +0200
with message-id
<CAAajCMbGer77Yb4mtndFZvXm99j0uo9_+6VadnJFDN2-kF=z...@mail.gmail.com>
and subject line closing removal bugs that have already been handled
has caused the Debian Bug report #1147158,
regarding RM: apparmor-profiles-extra -- ROM; Obsolete upstream
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1147158: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1147158
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ftp.debian.org
Severity: normal
X-Debbugs-Cc: [email protected],
[email protected]
Control: affects -1 + src:apparmor-profiles-extra
User: [email protected]
Usertags: remove
Control: block -1 by 1147157
Control: block -1 by 1146674
Hi,
First, for a variety of reasons, the preferred way to add AppArmor policy to
Debian (short of having it maintained upstream) is to include it in the package
that ships the confined software, so it can be tested together with software
updates, and the maintainer is the best placed to tell whether a specific newly
denied access is legitimate or not.
So apparmor-profiles-extra was always meant to be a temporary hack. The amount
of profiles shipped in that package has been decreasing a fair bit and we're now
down to 2 profiles + 1 abstraction that's not used anywhere, except by
fwknop-apparmor-profile (#1147157).
Additionally, it's always been awkward to maintain the profiles shipped in this
package, with no automated mechanism to track the multiple sources of input we
use here.
Finally, and this is the last nail in the coffin for me, the main source of
AppArmor profiles for this is deprecated. Not only it was dormant since a year
or 3, with no capacity available for reviewing fixes, but more recently the
corresponding GitLab project was repurposed and does not include the profiles
that we have in apparmor-profiles-extra anymore:
https://lists.ubuntu.com/archives/apparmor/2026-August/014935.html
Thanks!
--- End Message ---
--- Begin Message ---
Thank you,
Jeremy Bícha
--- End Message ---
