Hello Guido and intrigeri, On Mon, Dec 25, 2017 at 11:34:08AM +0100, Guido Günther wrote: > Since we want to establish a lower bound for fixed versions (those that > ship the symlink) it's probably better written as: > > > if test -n "$2" && dpkg --compare-versions "$2" gt "1:52.5.0-1~"; > then > : # Leave the disable/ symlink at users choice if > # upgrading from a version that ships the symlink > else > mkdir -p /etc/apparmor.d/disable > ln -s /etc/apparmor.d/usr.bin.thunderbird > /etc/apparmor.d/disable/usr.bin.thunderbird > fi > > It looks odd but this way it also works for backports to stable (which > are frequent) without having to modify the postinst.
I've done some tests with Guido suggestion. The possible update constellations working so far within my tests. Update from 52.4.0 to 52.5.2: The new package install the link to disable the AA profile. Update from 52.4.0 with already disabled AA profile: The new version holds the disabled AA profile, I just need to do a 'ln -sf' to prevent a exit code 1 if the symlink is already existing. Anything I'm still missing? Regards Carsten
