It looks like apparmor is not really available in Ascii, having been
poisoned by systemd from within its own init script:

$ sudo service apparmor start
/etc/init.d/apparmor: 130: /etc/init.d/apparmor: systemd-detect-virt:
not found
Starting AppArmor profiles:AppArmor not available as kernel LSM..
 failed!

It looks like maybe just a single function needs to be removed or replaced:

$  grep -n systemd /etc/init.d/apparmor
130:            if systemd-detect-virt --quiet --container && \
164:            if systemd-detect-virt --quiet --container && \
182:            if systemd-detect-virt --quiet --container && \

From the comments annotating /lib/apparmor/functions it looks like the
purpose of that line is only to check whether or not the system is in a
container or not.  I don't / won't use containers so cannot check further.

/Lars


$ dpkg --get-selections | grep apparmor
apparmor                                        install
apparmor-profiles                               install
apparmor-utils                                  install
libapparmor-perl                                install
libapparmor1:amd64                              install
python3-apparmor                                install
python3-libapparmor                             install

$ apt-cache depends apparmor
apparmor
  Depends: libc6
 |Depends: debconf
  Depends: <debconf-2.0>
    cdebconf
    debconf
  Depends: init-system-helpers
  Depends: <python3:any>
    python3
  Depends: libapparmor-perl
  Depends: lsb-base
  Depends: debconf
  Breaks: fcitx-data
  Suggests: apparmor-profiles
  Suggests: apparmor-profiles-extra
  Suggests: apparmor-utils
  Replaces: fcitx-data


/Lars
_______________________________________________
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Reply via email to