Package: torbrowser-launcher Version: 0.0.7-1 Severity: normal Hi,
the current best practice, to allow users to locally override AppArmor profiles shipped as conffiles, is to source "/etc/apparmor.d/local/<profilename>" in every profile. Then, dh-apparmor takes care of creating/removing this file in maintainer scripts. Please make use of this facility, otherwise users who need to add local exceptions to the shipped policy have to modify these conffiles, and whenever upstream changes it, they will then have to handle conflict resolution between the new Debian-provided profile and their own one (forked off the old Debian-provided version), possibly messing up and putting themselves at risk. Also, it improves user experience to have a unified way to handle this sort of things among all packages that ship AppArmor profiles in Debian, and its derivatives. That's another reason why dh-apparmor was created :) Cheers, -- intrigeri | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
