Control: tags -1 unreproducible

On Thu, May 24, 2018 at 10:22:11AM +0200, Laurent Bonnaud wrote:

Hi Laurent,

thanks for your report.

> Package: bind9
> Version: 1:9.11.3+dfsg-1
> Severity: normal
>
[...]
> 
> This is caused by /etc/apparmor.d/usr.sbin.named that contains this line:
> 
>   #include <local/usr.sbin.named>
> 
> but the /etc/apparmor.d/local/usr.sbin.named file does not exist.

This is weird. The file is indeed not shipped in the package, but the
package is using dh_apparmor and the postinst code autogenerated by this
debhelper module (taken straight from the 1:9.11.3+dfsg-1 package) is

| # Automatically added by dh_apparmor/2.12-4
| aa_is_enabled() {
|    if command aa-enabled >/dev/null 2>&1; then
|       # apparmor >= 2.10.95-2
|       aa-enabled --quiet 2>/dev/null
|    else
|       # apparmor << 2.10.95-2
|       # (This should be removed once Debian Stretch and Ubuntu 18.04 are out.)
|       rc=0
|       aa-status --enabled 2>/dev/null || rc=$?
|       [ "$rc" = 0 ] || [ "$rc" = 2 ]
|    fi
| }
| 
| if [ "$1" = "configure" ]; then
|     APP_PROFILE="/etc/apparmor.d/usr.sbin.named"
|     if [ -f "$APP_PROFILE" ]; then
|         # Add the local/ include
|         LOCAL_APP_PROFILE="/etc/apparmor.d/local/usr.sbin.named"
| 
|         test -e "$LOCAL_APP_PROFILE" || {
|             mkdir -p `dirname "$LOCAL_APP_PROFILE"`
|             install --mode 644 /dev/null "$LOCAL_APP_PROFILE"
|         }
| 
|         # Reload the profile, including any abstraction updates
|         if aa_is_enabled; then
|             apparmor_parser -r -T -W "$APP_PROFILE" || true
|         fi
|     fi
| fi
| # End automatically added section

So an empty file should be installed in that location when it is
missing.

This worked in my testsystem. I wonder what's going on on your system.

Bernhard

Reply via email to