/etc/apparmor.d/cache was chosen a long time ago (pre FHS 1.0) as the
default cache locations, and at the time, given the constraints it was
the best available location.

Upstream apparmor has moved to defaulting the location to
/var/cache/apparmor. But Ubuntu has yet to make this move.

AppArmor 2.13 also added support for cache overlays, so cache can reside
in multiple locations (eg. pre compiled policy shipping as part of a RO
image) and a writable overlayed cached location if local modifications
are needed.

To provide the best experience Ubuntu should probably move to an overlay
of /var/cache/apparmor over /etc/apparmor.d/cache/

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1849554

Title:
  Please move cache files to a different location

Status in apparmor package in Ubuntu:
  Fix Released

Bug description:
  /etc/apparmor.d/cache is currently used to keep cache files for
  apparmor. Unfortunately, these files are in a location that is
  inconsistent with FHS guidelines for cache.

  Moreover, /etc is not a core path for Ubuntu Core 20, which means it
  is planned to not be writable; and to come directly from images.

  According to the FHS, the best location for apparmor cache files
  should be in a hierarchy under /var/cache.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1849554/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to