Hi Hideki, Sebastian, On 20-06-2021 16:02, Sebastian Ramacher wrote: >> --- squid-deb-proxy-0.8.15/debian/squid-deb-proxy.install 2020-01-10 19:02:40.000000000 +0900 >> +++ squid-deb-proxy-0.8.15+nmu1/debian/squid-deb-proxy.install 2021-06-14 23:40:21.000000000 +0900 >> @@ -1,3 +1,4 @@ >> ../update-libc.d etc/resolvconf/ >> etc/squid-deb-proxy >> init-common.sh usr/share/squid-deb-proxy/ >> +../apparmor-profiles/* etc/apparmor.d/abstractions/squid-deb-proxy/ > > I'm not an apparmor expert, but is this enough? Shouldn't there also be > a profile for the binary that uses this abstraction? @Hideki, can you please respond, this is a concern that you fix is not enough. @Sebastian, Hideki claims it fixes the issue: """ [ Tests ] Tested on KVM bullseye environment, it does not work well without this changes as the bug report says, and patched system works fine. """ so, even without a reply from Hideki, don't we expect bullseye to be better with this change? Or is there a worry you have that I don't see? Paul
Attachment:
OpenPGP_signature
Description: OpenPGP digital signature