[Bug 117852] Re: Conflict in profiles in complain mode when upgrading apparmor-profiles

2009-10-26 Thread Jamie Strandboge
Marking as Won't Fix. The profiles are shipped as conffiles. If a user flips a complain-mode only profile to enforce, I think the user should be expected to understand the question when prompted for a merge. This is the nature of packaging and the alternative is to make these config files and most

[Bug 117852] Re: Conflict in profiles in complain mode when upgrading apparmor-profiles

2007-05-30 Thread Kees Cook
I think this is expected behavior. If someone modifies a distro- published profile in /etc/apparmor.d, apt should stop and ask them how they want to handle it. How do you think this should be handled? ** Changed in: apparmor (Ubuntu) Status: Unconfirmed = Needs Info -- Conflict in

Re: [Bug 117852] Re: Conflict in profiles in complain mode when upgrading apparmor-profiles

2007-05-30 Thread Mathias Gug
On Wed, May 30, 2007 at 09:37:57PM -, Kees Cook wrote: I think this is expected behavior. If someone modifies a distro- published profile in /etc/apparmor.d, apt should stop and ask them how they want to handle it. How do you think this should be handled? I agree with you. I was

[Bug 117852] Re: Conflict in profiles in complain mode when upgrading apparmor-profiles

2007-05-30 Thread Kees Cook
Yes, dealing with config file merges tends to be a bit tricky for lots of things. This will probably feed into a larger discussion for the server team in general. I will mark this wishlist for now. ** Changed in: apparmor (Ubuntu) Importance: Undecided = Wishlist Status: Needs Info =

[Bug 117852] Re: Conflict in profiles in complain mode when upgrading apparmor-profiles

2007-05-30 Thread jjohansen
Updating profiles is a pain and known problem. The current plans for dealing with this are two fold. We have been working on a merge tool, which will allow two and three way profile merging. The tool will provide both automatic and manual merging of profiles. The other way of dealing with this