Package: ntpsec
Followup-For: Bug #1152846
Hi,
/etc/apparmor.d/tunables/ntpd is a conffile in /etc
In order to do a correct transition, several cases should be handled:
- if ntpsec is installed but not apparmor
- if /etc/apparmor.d/tunables/ntpd has been modified
(new) ntpsec must removed it on purge (but not upgrade nor remove)
else (not modified)
it can probably be removed on upgrade
- if apparmor is installed after ntpsec upgrade
the ownership must be transmitted to (new) apparmor on upgrade
(new) ntpsec must not remove it on purge (as it does not have ownership
anymore)
- if ntpsec and apparmor are both installed
- if /etc/apparmor.d/tunables/ntpd has been modified
it must not be modified/overwriten by apparmor upgrade
- in any case (modified or not)
it must not be removed on ntpsec upgrade unless new ntpsec declares a
conflict or break with old apparmor
we want to avoid that upgrading only ntpsec leads to a system without
this file
the ownership must be transmitted to (new) apparmor on upgrade
(new) ntpsec must not remove it on purge (as it does not have ownership
anymore)
I'm not sure I thought to all cases. But conffile ownership
and modifications preservation must be correctly handled.
Regards,
Vincent
-- System Information:
Debian Release: forky/sid
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'oldstable-updates'), (500, 'oldstable-security'), (500, 'unstable'), (500,
'testing'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 7.2.12+deb14-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages ntpsec depends on:
ii libbsd0 0.12.2-3
ii libc6 2.43-7
ii libcap2 1:2.78-1+b1
ii libssl3t64 3.6.5-1
ii netbase 6.6
ii python3 3.14.8-1
ii python3-ntp 1.2.5+dfsg-1
ii systemd [systemd-tmpfiles] 262.1-1
ii tzdata 2026f-1
Versions of packages ntpsec recommends:
ii cron [cron-daemon] 3.0pl1-212
ii systemd 262.1-1
Versions of packages ntpsec suggests:
ii apparmor 4.1.8-3+b1
pn certbot <none>
ii ntpsec-doc 1.2.5+dfsg-1
pn ntpsec-ntpviz <none>
-- no debconf information
