#990499 apparmor: Include local profile for sanitized_helper

Package:
apparmor
Source:
apparmor
Description:
user-space parser utility for AppArmor
Submitter:
Frank
Date:
2021-10-12 07:15:06 UTC
Severity:
wishlist
Tags:
#990499#5
Date:
2021-06-30 19:28:28 UTC
From:
To:
Dear Maintainer,

The current setup for the profile sanitized_helper does not include a local
profile for adjustments. I would like to propose

#include <local/ubuntu-helper>

in /etc/apparmor.d/abstraction/ubuntu-helpers

Best wishes,
Frank
#990499#10
Date:
2021-09-03 08:15:53 UTC
From:
To:
Hi,

Frank (2021-06-30):

Now that we can target AppArmor 3.x, I would instead suggest:

  include if exists <local/ubuntu-helpers>

… so we don't have to create/manage local/ubuntu-helpers.

Would you like to submit this as a merge request upstream?
It would happen there: https://gitlab.com/apparmor/apparmor

Cheers!
#990499#17
Date:
2021-09-03 08:33:14 UTC
From:
To:
https://gitlab.com/apparmor/apparmor/-/merge_requests/796

It might be as well better to add a patch to current Debian oldstable / stable?

Best,
Frank
#990499#22
Date:
2021-10-12 07:14:20 UTC
From:
To:
Hi,

Frank (2021-09-03):

Great!
an improvement than a bug fix, and local administrators already have
a way to workaround the problem if needed.

Cheers!