[apparmor] RFC: using variables to make profiles more flexible

intrigeri intrigeri at debian.org
Sun Dec 3 12:25:01 UTC 2017


Vincas Dargis:
>> Maybe we could discuss the interface and
>> behavior of this new/updated directive in a dedicated thread, and once
>> we've reached an agreement I could try to find someone to implement it?

> It would be nice to have this implemented, but... looks like that's a long term
> goal..? And Stretch and Jessie probably woudn't get it?

Right. Now, to be fair the other option probably requires changes in
dh-apparmor so it won't benefit already released distros either.
So I suggest we focus on what we want in the future (e.g. Ubuntu 18.04
LTS and Debian Buster).

> How could I use variables
> _today_, without adding too much work for a package maintainer?

Apart of asking them to manually install the empty file via standard
packaging means, I don't know :/

Cheers,
-- 
intrigeri



More information about the AppArmor mailing list