Bug#949332: fwknop-apparmor-profile: consider adding ipset to apparmor profile

In other words, the attached patch is what was needed to make this work on your machine? Francois -- https://fmarier.org/ --- a/extras/apparmor/usr.sbin.fwknopd +++ b/extras/apparmor/usr.sbin.fwknopd @@ -20,16 +20,23 @@ /bin/bash rix, /etc/fwknop/access.conf r, /etc/fwknop/fwknopd.conf

Bug#949332: fwknop-apparmor-profile: consider adding ipset to apparmor profile

Package: fwknop-apparmor-profile Version: 2.6.10-2 Severity: wishlist Dear Maintainer, One of the interesting modes of operation of fwknop-server is the use of CMD_CYCLE_OPEN / CMD_CYCLE_CLOSE to call ipset to add entries to a set. Pedantic sytem administrators may find that automatic insertion