Thanks Steve.

Yes - I was thinking about something like a .apparmor file that tells
dh_apparmor what it needs.

Without the dh sequencer, we're requiring two things:

1) For the packager to understand *where* to put the override
2) For the packager to specify information needed by dh_apparmor (the profile 
name)

Traditionally the dh sequencer eliminates the first, and the maintainer
supplies the second via <package>.<dh_name> files.

Consider that if every dh_ helper worked in this current way, we'd be
back to not having a dh sequencer.

For backwards compatiblity, how about falling back to the old behaviour
on some combination of --profile-name and --manifest not being specified
and the .apparmor file not being present?

And while we're talking of changing things, how about arranging it so
that adding the profile to the .install file for dh_install is also not
required? An example is dh_installinit - we don't install the init.d
file and then give it to dh_installinit; it does the whole thing. Though
that does get implied by "install" in the name. Maybe we should have
dh_installapparmor which combines the two operations, and retain
dh_apparmor for backwards compatibility and eventual deprecation?

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1435452

Title:
  dh_apparmor has no dh sequencer support

Status in apparmor package in Ubuntu:
  Confirmed

Bug description:
  As dh_apparmor timing is critical (it must run before services are
  started with dh_installinit), it makes sense to provide direct dh
  sequencer support so that maintainers don't have to remember to run it
  directly, and cannot mistakenly call it at the wrong point, as
  happened with MySQL in bug 1421303).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1435452/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to