OK. I'm convinced by your arguments about app IDs; I didn't realise that the profile name needed to be known outside just aa-exec-click (which does have the application path in hand as well as the app ID).
I like your proposal of putting all the possible database names in CLICK_DIR. Would it be reasonable to just add all the valid click databases there, regardless of whether a given package happens to be unpacked there at the moment? In that case, the necessary API for that already exists, albeit a little obscurely: >>> from gi.repository import Click >>> db = Click.DB() >>> db.read() >>> [db.get(i).props.root for i in range(db.props.size)] ['/usr/share/click/preinstalled', '/custom/click', '/opt/click.ubuntu.com'] It might then be unnecessary to change click at all, which is obviously fantastic from my point of view. ;-) But this does genuinely seem like a better technical solution, and would let us stop playing whack-a-mole with the precise ordering of various database operations. Given that click-apparmor is the only system-level hook in the phone stack right now, we could mandate this kind of thing as required behaviour for future system-level hooks. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to click in Ubuntu. https://bugs.launchpad.net/bugs/1371574 Title: After installing clicks to /custom/click, /usr/share/click/preinstalled version are still preferred Status in “click” package in Ubuntu: In Progress Bug description: This occurs while moving click apps from the rootfs into the custom tarball. Because of this some apps fail to launch. ProblemType: Bug DistroRelease: Ubuntu 14.10 Package: click 0.4.32.1 ProcVersionSignature: Ubuntu 3.16.0-10.15-generic 3.16.1 Uname: Linux 3.16.0-10-generic x86_64 NonfreeKernelModules: fglrx ApportVersion: 2.14.7-0ubuntu2 Architecture: amd64 CurrentDesktop: Unity Date: Fri Sep 19 07:53:58 2014 InstallationDate: Installed on 2013-04-26 (510 days ago) InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Release amd64 (20130424) SourcePackage: click UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/click/+bug/1371574/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp