[Pkg-xfce-devel] Bug#736075: Bug#736075: Processed: Re: Bug#736058: apparmor: no abstractions/dbus-accessibility

Yves-Alexis Perez corsac at debian.org
Sun Jan 19 15:53:56 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Sun, Jan 19, 2014 at 04:24:05PM +0100, intrigeri wrote:
> Hi,
> 
> Yves-Alexis Perez wrote (19 Jan 2014 15:11:58 GMT) :
> > Thanks. What am I supposed to do with that? Could you at least provide
> > some context when reassigning a bug?
> 
> Sure. I thought the cloned bug had enough info in it. Sorry.

No, unfortunately the BTS doesn't add any information to the destination
package maintainers during a reassign.
> 
> In short, the AppArmor profile shipped by the lightdm package requires
> an "abstraction" file that is not part of any upstream AppArmor
> release yet, and is not shipped by the apparmor Debian package.
> I suspect this profile was taken from Ubuntu, whose apparmor package
> has cherry-picked the upstream commit that adds this abstraction.

Yeah, lightdm upstream is an Ubuntu developer so it happens from time to
time that there are Ubuntu-specific stuff inside. It seems the profile
was written by Martin Pitt, so I've added him on CC: to the upstream
bug.
> 
> What should be done IMO is to patch the buggy AppArmor profile to work
> on Debian. Commenting out the faulty line ('#include
> <abstractions/dbus-accessibility>') until Debian's apparmor ships the
> missing abstraction would be enough. I don't think doing this would
> have any adverse effect: the dbus-accessibility abstraction only adds
> a "dbus bus=accessibility" permission, that is useless on anything but
> a heavily patched kernel + AppArmor userspace currently:  the dbus
> rules are currently only supported on Ubuntu trusty, and getting this
> support upstream and into Debian will take a while.
> 
> Don't hesitate asking if you need more info or clarification :)

Well, I trust you on that since I don't use AppArmor at all.

Regards,
- -- 
Yves-Alexis Perez
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBCgAGBQJS2/UQAAoJEG3bU/KmdcClH2gH/3VWGl/74iWkI/znFSFArMPr
VH/PlM6iqhH7UHHxJWcIOwlafZbzEl1+JjugQ1HTpgW5LHekeDLNBkWEcRsrn4vm
gZfOByBYD4mlPTs9BHt3wvPo4fQHFWkEONG9XRtae2kaTo0ShHueNzcKFJtYkYa/
pWo0Re2fddfa4229LV7IgZ4pH2+5mOokRbYC3M43odSQwoH1yFikkS2BvfpfsQYz
Ibo3DJRXnEfncU9wdxIQhtrxmEmRUOyWyZc7YF/+NNDa0um7wb17xWtbNjL13s6y
E/Gz9r3lU12ZQZu3FBWQqqas5/T9CxAPYTlycIPA35Liri5KBecdhJ8dMv1ALko=
=D3np
-----END PGP SIGNATURE-----



More information about the Pkg-xfce-devel mailing list