Control: severity -1 minor Control: tag -1 + upstream Control: found -1 2.11.0-6
Hi, [email protected]: > After upgrading from jessie to stretch I noticed that postfix was no > longer constrained by apparmor profiles (using aa-unconfined, ps > auxZ etc). > The cause of this issue seems to be that the profiles in this > package use paths like /usr/lib/postfix/master but this has moved to > /usr/lib/postfix/sbin/master. This applies to all /usr/lib/postfix/* > profiles. Thus the profiles do not properly apply to the correct > process. The profiles will need to be updated to point to the > right executables. Good catch, thanks. Now, as /usr/share/doc/apparmor-profiles/extras/README says, these profiles are not supported: Feedback on these unsupported profiles is welcomed; any contributions for this directory should be clearly licensed -- we recommend using the GPL. Please mail suggestions or modifications to the [email protected] mail list: https://lists.ubuntu.com/mailman/listinfo/apparmor So downgrading severity accordingly. Cheers, -- intrigeri
