Package: strongswan Version: 5.6.2-2 Severity: low Hi, to be ready for usr merge [1] one of the rules in the strongswan apparmor profiles would need to be adapted.
[1]: https://wiki.debian.org/UsrMerge This isn't critical right now, but OTOH easy to do, the change would be like: diff --git a/debian/usr.lib.ipsec.charon b/debian/usr.lib.ipsec.charon index 9e24c744d..14cfa6d0b 100644 --- a/debian/usr.lib.ipsec.charon +++ b/debian/usr.lib.ipsec.charon @@ -41,7 +41,7 @@ network, network raw, - /bin/dash rmPUx, + /{,usr/}bin/dash rmPUx, # libchron-extra-plugins: kernel-libipsec /dev/net/tun rw, diff --git a/debian/usr.sbin.charon-systemd b/debian/usr.sbin.charon-systemd index b3daa4626..c79e73dc6 100644 --- a/debian/usr.sbin.charon-systemd +++ b/debian/usr.sbin.charon-systemd @@ -42,7 +42,7 @@ network, network raw, - /bin/dash rmPUx, + /{,usr/}bin/dash rmPUx, # libchron-extra-plugins: kernel-libipsec /dev/net/tun rw -- Christian Ehrhardt Software Engineer, Ubuntu Server Canonical Ltd