Bug#919511: unbound: apparmor enabled after systemd service started, thus not applied

2019-01-21 Thread Simon Deziel
Hi Julian, On 2019-01-16 1:53 p.m., Julian Andres Klode wrote: > The unbound package runs dh_apparmor too late, causing the generated postinst > to have dh_enable_systemd parts run first, which enable and start the service. > > Because the process is already running the parts added by

Bug#919511: unbound: apparmor enabled after systemd service started, thus not applied

2019-01-16 Thread Julian Andres Klode
Package: unbound Version: 1.8.1-1 Severity: important Tags: security The unbound package runs dh_apparmor too late, causing the generated postinst to have dh_enable_systemd parts run first, which enable and start the service. Because the process is already running the parts added by dh_apparmor