Hi Christian,

I don't want to distract from the purpose of this bug report, but I have
a question regarding one particular piece...

On Thu, Nov 30 2017, Christian Ehrhardt wrote:
> The TL;DR of the remaining changes are:
> - some fixes (like the stroke apparmor profile)

Do the Ubuntu packages install AppArmor profiles for charon-systemd and
swanctl as well?

FYI, earlier this year I copied the existing usr.lib.ipsec.charon
profile to usr.sbin.charon-systemd, and created a usr.sbin.swanctl from
scratch (although it's similar to usr.lib.ipsec.stroke).  Filed bug
#866327.  Yves-Alexis applied changes in 5.6.0-1.

I suppose that if there are usr.lib.ipsec.charon or usr.lib.ipsec.stroke
specific changes coming from Ubuntu, that these should be synchronized
with the usr.sbin.charon-systemd or usr.sbin.swanctl variants in Debian.

-- 
Gerald Turner <gtur...@unzane.com>        Encrypted mail preferred!
OpenPGP: 4096R / CA89 B27A 30FA 66C5 1B80  3858 EC94 2276 FDB8 716D

Attachment: signature.asc
Description: PGP signature

Reply via email to