Hi Julian, On 2019-01-16 1:53 p.m., Julian Andres Klode wrote: > The unbound package runs dh_apparmor too late, causing the generated postinst > to have dh_enable_systemd parts run first, which enable and start the service. > > Because the process is already running the parts added by dh_apparmor to load > the apparmor files have no effect until a manual service restart.
I was able to verify this behavior and have proposed a fix [*] that worked here. Regards, Simon *: https://salsa.debian.org/dns-team/unbound/merge_requests/2
