Bug#1064513: kea-dhcp4-server: Apparmor profile does not include /etc/apparmor.d/local/ file

2024-02-23 Thread Andreas Hasenack
PR at https://salsa.debian.org/debian/isc-kea/-/merge_requests/43

On Fri, Feb 23, 2024 at 12:27 PM Théophile Bastian
 wrote:
>
> Package: kea-dhcp4-server
> Version: 2.2.0-6
> Severity: normal
> X-Debbugs-Cc: theophile.bast...@echirolles.fr
>
> Dear Maintainer,
>
> The currently packaged apparmor profile for kea-dhcp4-server (and probably
> other kea-*, although I did not check) does not include the
> /etc/apparmor.d/local/usr.sbin.kea-dhcp4 local profile.
>
> I am currently trying to setup a Kea HA cluster, but the Apparmor profile
> prevents me from loading SSL certificates (under some non-kea directory in
> /etc/). Although I could override the shipped profile, I would rather edit the
> file under `local/` and leave the main file unchanged, so that packages 
> updates
> may deploy new versions of this file.
>
> Best regards,
> -- Théophile Bastian
>
> -- System Information:
> Debian Release: 12.5
>   APT prefers stable-updates
>   APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
> 'stable')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 6.1.0-13-amd64 (SMP w/1 CPU thread; PREEMPT)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
> LANGUAGE=en_US:en
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
>
> Versions of packages kea-dhcp4-server depends on:
> ii  init-system-helpers  1.65.2
> ii  kea-common   2.2.0-6
> ii  libc62.36-9+deb12u4
> ii  libgcc-s112.2.0-14
> ii  libstdc++6   12.2.0-14
>
> kea-dhcp4-server recommends no packages.
>
> Versions of packages kea-dhcp4-server suggests:
> pn  kea-doc  
>
> -- Configuration Files:
> /etc/kea/kea-dhcp4.conf changed [not included]
>
> -- no debconf information



Bug#1064513: kea-dhcp4-server: Apparmor profile does not include /etc/apparmor.d/local/ file

2024-02-23 Thread Théophile Bastian
Package: kea-dhcp4-server
Version: 2.2.0-6
Severity: normal
X-Debbugs-Cc: theophile.bast...@echirolles.fr

Dear Maintainer,

The currently packaged apparmor profile for kea-dhcp4-server (and probably
other kea-*, although I did not check) does not include the
/etc/apparmor.d/local/usr.sbin.kea-dhcp4 local profile.

I am currently trying to setup a Kea HA cluster, but the Apparmor profile
prevents me from loading SSL certificates (under some non-kea directory in
/etc/). Although I could override the shipped profile, I would rather edit the
file under `local/` and leave the main file unchanged, so that packages updates
may deploy new versions of this file.

Best regards,
-- Théophile Bastian

-- System Information:
Debian Release: 12.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-13-amd64 (SMP w/1 CPU thread; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages kea-dhcp4-server depends on:
ii  init-system-helpers  1.65.2
ii  kea-common   2.2.0-6
ii  libc62.36-9+deb12u4
ii  libgcc-s112.2.0-14
ii  libstdc++6   12.2.0-14

kea-dhcp4-server recommends no packages.

Versions of packages kea-dhcp4-server suggests:
pn  kea-doc  

-- Configuration Files:
/etc/kea/kea-dhcp4.conf changed [not included]

-- no debconf information