Hello, Am Dienstag, 23. Februar 2021, 21:24:56 CET schrieb Michael Ströder:
Should adding AppArmor profiles directly to service packages be truly optional?
Or would it be acceptable to e.g. add
Requires: apparmor-abstractions
I'd say that's the correct thing if your package ships an AppArmor profile. A typical profile has #include <tunables/global> and #include <abstractions/base> (and probably more includes). These files are shipped in apparmor-abstractions, so #include'ing them means they are required by the profile. In case someone wonders - this won't _force_ anybody into enabling AppArmor. However, I'd highly recommend to enable AppArmor - for example, the samba profiles stopped an exploit from being exploited a few years ago. Regards, Christian Boltz -- You guys are right, how embarrassing. I'll crawl back under my rock for the week, sorry for the false alert. (At least I managed to confuse even Coolo, not that easy. :-) [Gerald Pfeifer in opensuse-factory]