Control: tag -1 - moreinfo Control: retitle -1 Some of the included (but disabled by default) AppArmor profiles are broken Control: severity -1 minor Control: tag -1 + upstream
Hi, Kjö Hansi Glaz wrote (28 Oct 2015 18:36:01 GMT) : > intrigeri: >> does the package work for you if you *don't* manually set to enforce >> mode the profiles we intentionally have set to complain mode in >> the packaging? >> > Yes, it works then. Thanks for confirming! I'm adjusting the bug's metadata accordingly. > However, I find it surprising that there is an apparmor profile shipped > in the package and that its failures are expected. I completely agree that the situation is not optimal. FYI that other bug report might help alleviate your surprise: https://bugs.debian.org/796295 > Perhaps they should be dropped, [...] It's been done for start-tor-browser upstream already: https://github.com/micahflee/torbrowser-launcher/commit/39901c6ddc05bb96f2d14cebefec515c2009a222 But I was mistaken wrt. usr.bin.torbrowser-launcher: there's no plan to drop it upstream apparently, so indeed it's a very good idea to contribute fixes there so that we can re-enable this profile some day in Debian :) Cheers, -- intrigeri
