Hi,

I request assistance with maintaining the apparmor package.

AppArmor has been enabled by default on the Linux ports of Debian
since Buster.

The big picture of AppArmor maintenance in Debian is pretty good:

 - Vincas Dargis has been helping quite a lot on the policy (profiles) side of
   things — thanks!

 - Various package maintainers are taking care of AppArmor profiles shipped in
   their packages, asking help when needed, which is awesome.

 - Debian folks have generally been very cooperative when it comes to making
   AppArmor work on their system, e.g. by submitting merge requests upstream
   when suggested.

 - The kernel part of things happens upstream. AFAIK it did not
   require dedicated work on the Debian side for years.

But regarding maintenance of src:apparmor itself, the bus factor of in Debian is
1, which is not great. I don't feel comfortable with this situation.

src:apparmor includes:

 - system initialization bits

 - AppArmor parser, which is required to compile AppArmor profiles and load them
   into the kernel for use by the AppArmor Linux Security Module

 - abstractions, i.e. reusable bits of policy

The workload is not particularly big: I would say a few hours per month
on average.

Upstream is very cooperative.

Cheers!

Hi,

This reminded me I promised to work on dh-apparmor. I should find time for that, maybe also for apparmor itself.

Hi Andrej,

Andrej Shadura (2022-03-07):

Great!

Sounds good. Please keep me updated as you think about it :)

Hello, Intrigeri. I hope you are doing well. I am writing to let you know
that I would like to contribute to AppArmor in any way you see fit whether
through security patches, feature improvements, etc.

Please excuse the polished nature of this message; I am using a translator
because I am not fluent in English. I am Chilean and a Spanish speaker.