Package: apparmor-profiles Version: 2.10.95-4 Severity: normal The apparmor-profiles package ships a number of profiles in /etc/apparmor.d/, "in complain mode so that users can test and choose which are desired". This includes policy for dovecot, dnsmasq, avahi-daemon, ping.
This is confusing to some of us, and to users in general. And IIRC Felix had some concerns about shipping these profiles there as well. During the team meeting we had at DebConf, several options were suggested: a) Move the profiles that are not good enough to be enforced to a separate package b) Move the profiles that are not good enough to be enforced to /usr/share/doc (where we already ship a number of profiles) Also, it might be that some of these profiles are actually good enough to be enforced by default, instead of being moved elsewhere. Apparently, I've volunteered to work on that, but help would be greatly welcome :) Next step is to check what other distros (Ubuntu, OpenSUSE) do about these profiles. Cheers, -- intrigeri
