Bug#788009: xserver-xorg-input-synaptics: Please add apparmor profile for syndaemon

[Cameron Norman <camerontnorman@gmail.com>]

On Mon, Jun 8, 2015 at 9:28 AM, intrigeri <intrigeri@debian.org> wrote:
> Control: tag -1 + moreinfo
>
> Hi,
>
> <pkg-apparmor team member hat on>
>
> the proposed confinement profile looks OK to me at first glance.
> It's very simple so exceptionally I won't be requesting a review pass
> on the AppArmor mailing-list :) And, given the profile is brand new,
> flags=(complain) sounds reasonable as a first step.
>
> Was this profile tested with syndaemon run by GNOME and/or by other
> desktop environments?

It was tested both running manually and with gnome-settings-daemon.

I looked at debian codesearch for packages that run syndaemon and it
yielded (in addition to g-s-d) mate-s-d, cinnamon-s-d, and xfce4-s-d.

The former two have the exact same code as g-s-d (they are g-s-d
forks) and the xfce4 code has similar options.

The main reason I included the flags=(complain) was because syndaemon
supports pidfiles in variable locations that I could not possibly
guess. No package in Debian makes use of the pidfile option, but users
may have custom xinitrc's and whatnot that do use it.

Cheers,
--
Cameron Norman