Le 19/05/25 à 13:33, René Engelhard a écrit :
Well almost all the apparmor profiles are including this "#include", I was expecting it was part of some "apparmor packaging policy" in debian or something, but I cannot find any reference.severity 110645 wishlist thanks Hi, Am 19. Mai 2025 10:46:37 MESZ schrieb Laurent Bigonville <bigon@debian.org>:It seems that the libreoffice apparmor profiles are not including the ability to use local overrides files like the other profies are.Which is not serious in any remote way. Fo not uselessly inflate severities. Especially since we are in hard freeze as it's a key package and that's won't be changed. You can change the profiles itself if there was a need. (There is none.)
Even in complain mode, apparmor still logs stuff in the audit logs (and triggers notification when apparmor-notify is installed), so I'm pretty sure there is a non-null number of people who wants to customize the policyThe different profiles should have an "#include if exists <local/*profile_name*>" some in them to allow the user to add new rulesAnd why would one? Most are in complain mode anyways thus not blocking stuff.