Bug#884191: Please do not disable AppArmor silently and prevent its re-activation

2017-12-18 Thread Simon Deziel
On 2017-12-16 08:37 AM, Cédric Dufour - Idiap Research Institute wrote: > On 16/12/17 10:02, Carsten Schoenert wrote: >> There is the AppArmor profile not re-enable? What let you came to that >> conclusion? As written before two commands are needed. >> >>    $ sudo rm /etc/apparmor.d/disable/profil

Bug#884191: Please do not disable AppArmor silently and prevent its re-activation

2017-12-16 Thread Cédric Dufour - Idiap Research Institute
Hello, On 16/12/17 10:02, Carsten Schoenert wrote: There is the AppArmor profile not re-enable? What let you came to that conclusion? As written before two commands are needed. $ sudo rm /etc/apparmor.d/disable/profile.name $ sudo apparmor_parser -r /etc/apparmor.d/profile.name It does

Bug#884191: Fwd: Bug#884191: Please do not disable AppArmor silently and prevent its re-activation

2017-12-16 Thread Carsten Schoenert
Hello Cédric, Am 15.12.2017 um 12:09 schrieb Cédric Dufour - Idiap Research Institute: > Hello Debian Security Team, > > May I ask that you have a look at bug > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=884191 > > I find it strange a change as significant as the one at hand makes it > t

Bug#884191: Please do not disable AppArmor silently and prevent its re-activation

2017-12-13 Thread Cédric Dufour - Idiap Research Institute
Hello Carsten, On 12/12/17 21:38, Carsten Schoenert wrote: >>> I think we can implement this change by shipping a symlink to the >>> profile in /etc/apparmor.d/disable/. My understanding is that dpkg >>> will treat this removal of a conffile as a change worth preserving on >>> upgrades, i.e. it wo

Bug#884191: Please do not disable AppArmor silently and prevent its re-activation

2017-12-12 Thread Carsten Schoenert
Hello Cédric, I lowered down the severity to wishlist, please see https://www.debian.org/Bugs/Developer#severities On Tue, Dec 12, 2017 at 03:49:23PM +0100, Cédric Dufour - Idiap Research Institute wrote: > Package: thunderbird > Version: 1:52.5.0-1~deb8u1 > severity: grave > > As stated as com

Bug#884191: Please do not disable AppArmor silently and prevent its re-activation

2017-12-12 Thread Cédric Dufour - Idiap Research Institute
Package: thunderbird Version: 1:52.5.0-1~deb8u1 severity: grave As stated as comment to the bug corresponding to the source of this issue (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882672): > I think we can implement this change by shipping a symlink to the > profile in /etc/apparmor.d/d