Bug#927961: strongswan Apparmor profiles are missing the setpcap capability

2019-08-24 Thread Florian Bezdeka
Hi, I have the same problem and can confirm that the workaround mentioned in the Ubuntu bug tracker [1] works. The same configuration worked on Debian strech, so the ipsec configuration breaks when updating to buster. Regards, Florian [1]

Bug#927961: strongswan Apparmor profiles are missing the setpcap capability

2019-04-25 Thread Simon Deziel
On 2019-04-25 9:41 a.m., Simon Deziel wrote: > I'll soon be proposing a fix via salsa. https://salsa.debian.org/debian/strongswan/merge_requests/4 signature.asc Description: OpenPGP digital signature

Bug#927961: strongswan Apparmor profiles are missing the setpcap capability

2019-04-25 Thread Simon Deziel
Package: strongswan Version: 5.7.1-1 Hello, A user on Ubuntu reported [1] that Strongswan 5.7.1-1 no longer worked with privilege downgrade. He also traced the root cause to a missing capability: CAP_SETPCAP. I'll soon be proposing a fix via salsa. Thanks, Simon 1: