Dear Maintainer,

I tried to add the following to my `/etc/fwknop/access.conf` file:

```
%include_folder /etc/fwknop/access.conf.d
```

The custom directory is blocked by AppArmor.


I tried adding the following to `/etc/apparmor.d/local/usr.sbin.fwknopd`:

```
/etc/fwknop/access.conf.d/ r,
/etc/fwknop/access.conf.d/*.conf r,
```

Unfortunately, that did not work because `/etc/apparmor.d/usr.sbin.fwknopd` does not include this local file.

Adding the following to `/etc/apparmor.d/usr.sbin.fwknopd` (as seems to be the norm now in other rules files), solved the problem:

```
  # Site-specific additions and overrides. See local/README for details.
  include if exists <local/usr.sbin.fwknopd>
```

Or as a patch:

```
--- a/apparmor/usr.sbin.fwknopd
+++ b/apparmor/usr.sbin.fwknopd
@@ -46,4 +46,6 @@
   /var/cache/nscd/passwd r,
   @{PROC}/@{pid}/net/ip_tables_names r,

+  # Site-specific additions and overrides. See local/README for details.
+  include if exists <local/usr.sbin.fwknopd>
 }
```

The comment seems to be the norm in all other files, so that's why I added it.

Thank you for your time and consideration.

Tom Dworzanski

We believe that the bug you reported is fixed in the latest version of
fwknop, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1117041@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Francois Marier <francois@debian.org> (supplier of updated fwknop package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 20 Sep 2026 12:26:40 -0700
Source: fwknop
Architecture: source
Version: 2.6.11-3
Distribution: unstable
Urgency: medium
Maintainer: Francois Marier <francois@debian.org>
Changed-By: Francois Marier <francois@debian.org>
Closes: 1117041 1147157
Changes:
 fwknop (2.6.11-3) unstable; urgency=medium
 .
   * Replace gstreamer apparmor abstraction (Closes: #1147157)
   * Allow local overrides/additions in apparmor profile (Closes: #1117041)
   * Bump Standards-Version up to 4.7.4
   * Add debian/gbp.conf to enable pristine-tar explicitly
   * Add debian/salsa-ci.yml
   * Remove redundant Priority field from debian/control
   * Bump debhelper-compat to 14
   * Upgrade debian/watch to version 5
   * Remove unused libfko3t64 lintian override
   * Bump copyright year in debian/copyright
Checksums-Sha1:
 bd92b603d01bf4390713fe8956c2cb8e452e05b2 2746 fwknop_2.6.11-3.dsc
 c86e025929f3fb6e4ecbc89464eb8793944f689c 21272 fwknop_2.6.11-3.debian.tar.xz
 28777383e680b3d8c5d04cbe2ac83617aa3fa180 7171 fwknop_2.6.11-3_source.buildinfo
Checksums-Sha256:
 c0defa3206b992a750e0f13b7dc40c628a2046960a2284894507dc2eb8bfe7c1 2746 fwknop_2.6.11-3.dsc
 8197fb43434fc7fd91c8e3effe0221dc06f4c45325746ca9de00624ccdbb6ca2 21272 fwknop_2.6.11-3.debian.tar.xz
 bf8ecb59088a305a5e9d62619ffa8e466794462a92d50517af70804d81f64bb7 7171 fwknop_2.6.11-3_source.buildinfo
Files:
 9cc560c5f8944b9ea926b0b097a956b4 2746 admin optional fwknop_2.6.11-3.dsc
 b3a6046368a839f9c148fd2cfdfe3790 21272 admin optional fwknop_2.6.11-3.debian.tar.xz
 cb12e336909ef430cbd82b291cc35632 7171 admin optional fwknop_2.6.11-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=G0dg
-----END PGP SIGNATURE-----