[offtopic] Am 28.01.18 um 17:06 schrieb Vincas Dargis: > Sorry, I do not follow that. I imagined it as actual change (a patch) > against upstream (from apparmor-profiles) AppArmor profile to fix > issue for Jessie only. >From a POV that apparmor profiles are upstream you are correct (and in the end it's all about the POV), but from our side the trees are mainly to package Mozilla Thunderbird and that is what we call upstream here. >From a technical side all that is not in the debian folder is upstream. And changes for Debian outside the debian folder need to be applied by patches from a patch queue that are saved in a folder called debian/patches due the way the metadata and tools for packaging are interacting.
So it's more related about the place within the various folders where we need to manage the files or folders if we need a patch queue based workflow or not. Of course the change you have proposed could be handled by the patch queue but this is complicating the daily work unnecessarily. Would we place the apparmor profile for Thunderbird in the top directory then we have no other possibility than to add this by a patch. The packaging tools need to distinct between upstream source and Debian related changes, all outside the debian folder is (plain normally unchanged) upstream source, all stuff in the debian folder is Debian related. Take a look into thunderbird_52.6.0-1.debian.tar.xz e.g. [1] :-) This is just a tarball around the debian folder. And to not complicate things even more it's common case to place things that are not upstream but needed or used simply inside the debian folder. For example we ship also a pkg-config file thunderbird.pc within the thunderbird-dev package, we just install this file from the debian folder into the install folder by debian/rules (and in some packages similar files by the debhelper sequencer files) and dpkg-deb will pack all together into a binary package finally. I hope it's now a bit more clear. > If updated AppArmor profile is imported into Jessie branch, will this > change automatically be applied on top? Yes and only for jessie-security because the patch/commit is only made into the branch debian/jessie. > I'm new to this, so please bear with me :) No worry, we all have started someday and Debian packaging isn't easy in the details. [1] http://http.debian.net/debian/pool/main/t/thunderbird/thunderbird_52.6.0-1.debian.tar.xz [/offtopic] -- Regards Carsten Schoenert