Your message dated Sat, 17 Dec 2016 14:58:45 +0100 with message-id <85mvfu64iy.fsf@boum.org> and subject line Re: Bug#846828: cups-daemon: Please make cupsd AppArmor profile compatible with upcoming merged-/usr-related changes in abstractions/base has caused the Debian Bug report #846828, regarding cups-daemon: Please make cupsd AppArmor profile compatible with upcoming merged-/usr-related changes in abstractions/base to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 846828: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=846828 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: cups-daemon: Please make cupsd AppArmor profile compatible with upcoming merged-/usr-related changes in abstractions/base
- From: intrigeri@debian.org
- Date: Sat, 03 Dec 2016 15:56:35 +0100
- Message-id: <[🔎] 857f7h9i3g.fsf@boum.org>
Package: cups-daemon Version: 2.2.1-2 Severity: normal Tags: patch User: pkg-apparmor-team@lists.alioth.debian.org Usertags: usrmerge X-Debbugs-Cc: pkg-apparmor-team@lists.alioth.debian.org Hi Didier & team, the attached commit (against current debian/master branch) makes the included AppArmor profile compatible with the adjustments being worked on upstream (in abstractions/base) to make AppArmor policy compatible with merged-/usr. Please consider applying it :) Cheers, -- intrigeri>From bb79ac0b2f20a5d4d972942c5e90963f04560cb8 Mon Sep 17 00:00:00 2001 From: intrigeri <intrigeri@debian.org> Date: Sat, 3 Dec 2016 14:49:27 +0000 Subject: [PATCH] Make AppArmor profile compatible with merged-/usr. The x modifiers for /opt/** are incompatible with some adjustments being worked on upstream (in abstractions/base) to make AppArmor policy compatible with merged-/usr: https://code.launchpad.net/~intrigeri/apparmor/usrmerge/+merge/312409 Turning "ix" into "Pix" fixes this, and more generally is a good thing since it allows third-party drivers installed in /opt/ to ship their own AppArmor profile. --- debian/local/apparmor-profile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian/local/apparmor-profile b/debian/local/apparmor-profile index e0c7e40..62a88ff 100644 --- a/debian/local/apparmor-profile +++ b/debian/local/apparmor-profile @@ -121,7 +121,7 @@ /var/spool/cups/** rw, # third-party printer drivers; no known structure here - /opt/** rix, + /opt/** rPix, # FIXME: no policy ATM for hplip and Brother drivers /usr/bin/hpijs Cx -> third_party, -- 2.10.2
--- End Message ---
--- Begin Message ---
- To: 846828-done@bugs.debian.org
- Subject: Re: Bug#846828: cups-daemon: Please make cupsd AppArmor profile compatible with upcoming merged-/usr-related changes in abstractions/base
- From: intrigeri <intrigeri@boum.org>
- Date: Sat, 17 Dec 2016 14:58:45 +0100
- Message-id: <85mvfu64iy.fsf@boum.org>
- In-reply-to: <[🔎] 85y3zx814m.fsf@boum.org> (intrigeri@debian.org's message of "Sat, 03 Dec 2016 16:48:25 +0100")
- References: <[🔎] 857f7h9i3g.fsf@boum.org> <[🔎] 85y3zx814m.fsf@boum.org>
intrigeri: >> the attached commit (against current debian/master branch) makes the >> included AppArmor profile compatible with the adjustments being worked >> on upstream (in abstractions/base) to make AppArmor policy compatible >> with merged-/usr. Please consider applying it :) > Hold on, it might be that this patch won't be needed in the end. > Sorry for the noise. Indeed, it's not needed. Only the patch attached to #846868 is :) Cheers, -- intrigeri
--- End Message ---