[linux] 01/01: linux-image: Recommend apparmor (Closes: #880441)

[debian-kernel at lists.debian.org]

This is an automated email from the git hooks/post-receive script.

benh pushed a commit to branch sid
in repository linux.

commit bd1e10f8bd85adf182f122417a843bf6ffbac80c
Author: Ben Hutchings <ben at decadent.org.uk>
Date:   Sun Nov 5 01:54:12 2017 +0000

    linux-image: Recommend apparmor (Closes: #880441)
    
    The apparmor package is needed for loading profiles.  In theory,
    enabling AppArmor without any profiles loaded should do nothing, so
    this is not really a dependency of the kernel.  However, if a systemd
    unit specifies a AppArmor profile and the kernel has AppArmor enabled
    then failure to load the profile is fatal.
    
    As the linux-image packages select AppArmor as the default LSM, they
    should probably also be responsible for getting the necessary userland
    support installed.  But since the default can be overridden, use
    Recommends rather than Depends.
---
 debian/changelog      | 4 ++++
 debian/config/defines | 1 +
 2 files changed, 5 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index ef5c541..a69f0a4 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -52,6 +52,10 @@ linux (4.13.11-1) UNRELEASED; urgency=medium
     Thanks to Andrew Chadwick (Closes: #880504)
   * netfilter: nft_set_hash: disable fast_ops for 2-len keys (Closes: #880145)
 
+  [ Ben Hutchings ]
+  * linux-image: Recommend apparmor, as systemd units with an AppArmor
+    profile will fail without it (Closes: #880441)
+
  -- Salvatore Bonaccorso <carnil at debian.org>  Sat, 04 Nov 2017 09:54:41 +0100
 
 linux (4.13.10-1) unstable; urgency=medium
diff --git a/debian/config/defines b/debian/config/defines
index 6714a8c..161c53c 100644
--- a/debian/config/defines
+++ b/debian/config/defines
@@ -118,6 +118,7 @@ part-long-xen: This kernel also runs on a Xen hypervisor.
 
 [image]
 initramfs-generators: initramfs-tools initramfs-fallback
+recommends: apparmor
 
 [relations]
 # compilers

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git