http://bugzilla.suse.com/show_bug.cgi?id=1134289 Reinhard Max changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsegitz@suse.com, | |jsmeix@suse.com -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1134289 http://bugzilla.suse.com/show_bug.cgi?id=1134289#c2 --- Comment #2 from Reinhard Max --- AFAICS %apparmor_reload does not produce code that has a hard requirement on any aparmor package: if [ "$YAST_IS_RUNNING" != "instsys" ]; then if /usr/bin/systemctl is-active --quiet apparmor.service; then /sbin/apparmor_parser -r -T -W /etc/apparmor.d/ghostscript &> /dev/null || : fi fi So, /sbin/apparmor_parser only gets run if apparmor.service is active, which can only be the case when the respective packages are installed. -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1134289 https://bugzilla.suse.com/show_bug.cgi?id=1134289#c5 Johannes Meixner changed: What |Removed |Added ---------------------------------------------------------------------------- OS|openSUSE Factory |All --- Comment #5 from Johannes Meixner --- Now there is the OBS submitrequest https://build.opensuse.org/request/show/967447 to remove "Requires: apparmor-abstractions" from ghostscript.spec But I know basically nothing about AppArmor so I cannot make an educated decision (in particular not because it belongs to security) whether or not Ghostscript should require apparmor-abstractions -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1134289 https://bugzilla.suse.com/show_bug.cgi?id=1134289#c8 --- Comment #8 from Johannes Meixner --- I accepted https://build.opensuse.org/request/show/967447 "as is" i.e. it only removes "Requires: apparmor-abstractions" from ghostscript.spec because it "just builds" this way. Regarding whether or not Ghostscript has to package the /etc/apparmor.d/ directory there is already in ghostscript.spec ---------------------------------------------------- %if 0%{?suse_version} < 1500 %dir %{_sysconfdir}/apparmor.d %endif %{_sysconfdir}/apparmor.d/ghostscript ---------------------------------------------------- so the ghostscript RPM for SLE12 contains ---------------------------------------------------- drwxr-xr-x root root /etc/apparmor.d -rw-r--r-- root root /etc/apparmor.d/ghostscript ---------------------------------------------------- while the ghostscript RPM for SLE15 contains only ---------------------------------------------------- -rw-r--r-- root root /etc/apparmor.d/ghostscript ---------------------------------------------------- which seems to be OK. If /etc/apparmor.d/ was missing I would expect the build fails (I remember build failures if there are missing directories). -- You are receiving this mail because: You are on the CC list for the bug.