Hi,

Carsten Schoenert:
> I'm fine with that workflow too for now.

Cool! I'll check the status of my access to Vcs-Git and will ping
the relevant people if needed.

> I have no great experience with AppArmor (but Christoph also not), Guido
> don't want to do much for Thunderbird due time constraints. I'm happy he
> is doing all the LTS work on Thunderbird packages.

> So in the long turn I think it's better to migrate the AppArmor profile
> for Thunderbird to AppArmor itself?

For various reasons it's better if AppArmor profiles are shipped in
the same package as the software they confine. Guido has mentioned
some reasons on the AppArmor thread on -devel@, and it plays better
with backports, security uploads and such (otherwise we need to
update whatever other package ships the policy in lockstep).

> Otherwise we can stay on the status
> quo and intrigeri is performing the needed changes for the profile
> inside the Thunderbird packaging.

Let's do this!

Cheers,
-- 
intrigeri

Reply via email to