Bug#735313: cups-daemon: Please install AppArmor profile

[intrigeri@debian.org]

Package: cups-daemon
Version: 1.7.1-1
Severity: wishlist

Hi,

debian/rules only installs the usr.sbin.cupsd AppArmor profile on
Ubuntu and derivatives. Debian supports AppArmor since Wheezy, so
I see no reason to keep this delta. Please consider installing this
profile on regular Debian too.

Note that this change will also enable the AppArmor-specific bits in
debian/cups-daemon.{postinst,postrm}, which would benefit from being
converted to dh_apparmor at some point. No big deal, and no
emergency, though.

If the cups maintainers don't think this is suitable for Debian, or
don't want to take care of it for some reason, then I'll include this
profile in the apparmor-profiles-extra package I am preparing. This is
the course of action I'm preferring for most profiles but those that
have been supported and well-maintained in Ubuntu for many years.
The cupsd profile falls into the latter category:
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/AppArmorProfiles
... so I would personally prefer to see it installed by the
cups-daemon package itself.

Cheers,
--
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc