Bug#788009: xserver-xorg-input-synaptics: Please add apparmor profile for syndaemon

[intrigeri <intrigeri@debian.org>]

Control: tag -1 - moreinfo

Cameron Norman wrote (08 Jun 2015 16:39:46 GMT) :
> It was tested both running manually and with gnome-settings-daemon.

> I looked at debian codesearch for packages that run syndaemon and it
> yielded (in addition to g-s-d) mate-s-d, cinnamon-s-d, and xfce4-s-d.

> The former two have the exact same code as g-s-d (they are g-s-d
> forks) and the xfce4 code has similar options.

Great, thanks for the extensive research. Dropping the moreinfo tag,
then, and leaving it to maintainers to decide what to do with the
proposed patch.

> The main reason I included the flags=(complain) was because syndaemon
> supports pidfiles in variable locations that I could not possibly
> guess. No package in Debian makes use of the pidfile option, but users
> may have custom xinitrc's and whatnot that do use it.

This alone would not block me personally from shipping the profile in
enforce mode: in general, Debian's AppArmor profiles, much alike
Ubuntu's, try to make default things work out-of-the-box, but we can't
possibly guess and support all the niche use-cases one may have.
That's what local overrides are for :)

Cheers,
-- 
intrigeri