The apparmor profile isn't in Debian yet and I've seen no effort to do so [1][2] yet. Therefore for now just update the profile we have.
Therefore I proposed [3] which converted your contribution to the changes that will be needed on the packaging. P.S. I've spoken to Andreas and he said there was no old deny for apparmor in Debian, so we should at some point be able to get it there as well (with the fix then). [1]: https://salsa.debian.org/paelzer-guest/openldap/-/merge_requests [2]: https://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=yes&src=openldap [3]: https://code.launchpad.net/~paelzer/ubuntu/+source/openldap/+git/openldap/+merge/395730 ** Changed in: openldap (Ubuntu) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1909748 Title: Apparmor profile improvements for letsencrypt Status in openldap package in Ubuntu: In Progress Bug description: I can see that the slapd apparmor profile goes 90% of the way to working out of the box with letsencrypt/certbot, but fails to include abstractions/ssl_keys. The attached patch should work support all the methods in these abstractions, and should be the default with the slapd package. Please can you look at including this in future? Many thanks, Paul. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1909748/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
