[apparmor] Deprecating attachment based profile names for apparmor 3

Jamie Strandboge jamie at canonical.com
Thu Aug 30 23:21:19 UTC 2018


On Wed, 2018-08-29 at 14:35 +0100, Simon McVittie wrote:
> 
> For instance, in Debian's ioquake3 package I have:
> 
> # /etc/apparmor.d/usr.lib.ioquake3.ioquake3
> /usr/lib/ioquake3/ioquake3 flags=(complain) {
> ...
> }
> 
> Should I rename the file to /etc/apparmor.d/ioquake3 or something?
> Is the name meant to reflect the distro package, or the executable
> name,
> or something else?

There is no requirement to rename the file in /etc/apparmor.d for an
existing package IMHO (simply changing to use 'profile ioquake3
/usr/lib/ioquake3/ioquake3 would be fine). For new profiles, using the
new style would of course be recommended.

-- 
Jamie Strandboge             | http://www.canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20180830/1ca41f5a/attachment.sig>


More information about the AppArmor mailing list