Package: libvirt-daemon-system
Version: 6.4.0-2
Severity: wishlist

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear Maintainer,

Currently when the package is installed, it also installs files under
/etc/apparmor.d/ . There are two issues with this:

1) some people want to use their own profile (the local profile under
/etc/apparmor.d/local/ may not be an option for many reasons),
2) some of the names of the files are path based, and some users could use just
the exec/binary name (or whatever) for the profile/file name, which leads to
having two different sets of rules (two different apparmor profiles loaded at
the same time confining the same app).

The only way to fix this is to manually remove the provided apparmor profile
files after each package update, which is a little bit annoying.

Please reconsider creating a separate package for the apparmor profile files
(something similar to package_name-apparmor-profile), and just
suggest/recommend it in deps of the main package, so the user could decide
whether he wants the profiles to be installed in his system or not.

Thanks.




-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQR1ZhNYxftXAnkWpwEy2ctjR5bMoQUCXxSMBgAKCRAy2ctjR5bM
odAhAP9nxR4hoy6y0r8GuBSuxqIlbXqiCxPbIow07x/fxhX7KQEAp2a4uLOX1pNv
J8SQQxy6L8t4DdoKFrFKuzJ3C525agI=
=Hj2o
-----END PGP SIGNATURE-----

Reply via email to