For the strongswan change I filed a bug with Debian, I don't see an immediate 
need to add Delta for this.
@xnox: If there are serious deadlines involved you can obviously push the 
change, otherwise I'd wait for the next merge.

** Bug watch added: Debian Bug tracker #905082
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905082

** Also affects: strongswan (Debian) via
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905082
   Importance: Unknown
       Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1784023

Title:
  Update profiles for usrmerge

Status in apparmor package in Ubuntu:
  New
Status in apparmor-profiles-extra package in Ubuntu:
  New
Status in dhcpcanon package in Ubuntu:
  New
Status in ejabberd package in Ubuntu:
  New
Status in firefox package in Ubuntu:
  New
Status in fwknop package in Ubuntu:
  New
Status in i2p package in Ubuntu:
  New
Status in isc-dhcp package in Ubuntu:
  Fix Released
Status in kopanocore package in Ubuntu:
  New
Status in libvirt package in Ubuntu:
  Triaged
Status in lightdm package in Ubuntu:
  In Progress
Status in lightdm-remote-session-freerdp2 package in Ubuntu:
  New
Status in lightdm-remote-session-x2go package in Ubuntu:
  New
Status in man-db package in Ubuntu:
  Fix Released
Status in strongswan package in Ubuntu:
  New
Status in surf package in Ubuntu:
  New
Status in telepathy-mission-control-5 package in Ubuntu:
  New
Status in strongswan package in Debian:
  Unknown

Bug description:
  this is about / and /usr merge.

  /bin & /sbin merge is out of scope. Anything that was in /sbin/  will
  remain in /{,usr/}sbin/.

  = src:apparmor =
  usr.bin.chromium-browser appears to be out of date w.r.t. apparmor-profiles 
upstream git tree

  /usr/share/apparmor/extra-profiles/usr.sbin.useradd needs update
  upstream https://gitlab.com/apparmor/apparmor/merge_requests/152/diffs

  = other packages =

  Slightly more complete list: https://paste.ubuntu.com/p/4zDJ8mTc5Z/

  $ sudo grep '[[:space:]]/bin' -r .
  ./usr.bin.man:  /bin/bzip2 rmCx -> &man_filter,
  ./usr.bin.man:  /bin/gzip rmCx -> &man_filter,
  ./usr.bin.man:  /bin/bzip2 rm,
  ./usr.bin.man:  /bin/gzip rm,
  ./usr.sbin.libvirtd:  /bin/* PUx,
  ./abstractions/lightdm:  /bin/ rmix,
  ./abstractions/lightdm:  /bin/fusermount Px,
  ./abstractions/lightdm:  /bin/** rmix,
  ./abstractions/libvirt-qemu:  /bin/uname rmix,
  ./abstractions/libvirt-qemu:  /bin/grep rmix,
  ./usr.bin.chromium-browser:  /bin/ps Uxr,
  ./usr.bin.chromium-browser:    /bin/dash ixr,
  ./usr.bin.chromium-browser:    /bin/grep ixr,
  ./usr.bin.chromium-browser:    /bin/readlink ixr,
  ./usr.bin.chromium-browser:    /bin/sed ixr,
  ./usr.bin.chromium-browser:    /bin/which ixr,
  ./usr.bin.chromium-browser:    /bin/mkdir ixr,
  ./usr.bin.chromium-browser:    /bin/mv ixr,
  ./usr.bin.chromium-browser:    /bin/touch ixr,
  ./usr.bin.chromium-browser:    /bin/dash ixr,
  ./usr.bin.firefox:  /bin/which ixr,
  ./usr.bin.firefox:  /bin/ps Uxr,
  ./usr.bin.firefox:  /bin/uname Uxr,
  ./usr.bin.firefox:    /bin/dash ixr,
  ./sbin.dhclient:  /bin/bash mr,

  $ sudo grep '[[:space:]]/sbin' -r .
  ./usr.lib.telepathy:    deny /sbin/ldconfig x,
  ./usr.sbin.libvirtd:  /sbin/* PUx,
  ./abstractions/lightdm:  /sbin/ r,
  ./abstractions/lightdm:  /sbin/** rmixk,
  ./usr.bin.firefox:  /sbin/killall5 ixr,
  ./sbin.dhclient:  /sbin/dhclient mr,
  ./sbin.dhclient:  # daemon to run arbitrary code via /sbin/dhclient-script, 
it would need to be
  ./sbin.dhclient:  /sbin/dhclient-script                           Uxr,

  $ sudo grep '[[:space:]]/lib' -r .
  ./snap.core.4917.usr.lib.snapd.snap-confine:    /lib/udev/snappy-app-dev ixr, 
# drop
  ./usr.lib.snapd.snap-confine.real:    /lib/udev/snappy-app-dev ixr, # drop
  ./abstractions/lightdm:  /lib/ r,
  ./abstractions/lightdm:  /lib/** rmixk,
  ./abstractions/lightdm:  /lib32/ r,
  ./abstractions/lightdm:  /lib32/** rmixk,
  ./abstractions/lightdm:  /lib64/ r,
  ./abstractions/lightdm:  /lib64/** rmixk,
  ./usr.bin.chromium-browser:    /lib/libgcc_s.so* mr,
  ./usr.bin.chromium-browser:    /lib/@{multiarch}/libgcc_s.so* mr,
  ./usr.bin.chromium-browser:    /lib{,32,64}/libm-*.so* mr,
  ./usr.bin.chromium-browser:    /lib/@{multiarch}/libm-*.so* mr,
  ./usr.bin.chromium-browser:    /lib{,32,64}/libpthread-*.so* mr,
  ./usr.bin.chromium-browser:    /lib/@{multiarch}/libpthread-*.so* mr,
  ./usr.bin.chromium-browser:    /lib{,32,64}/libc-*.so* mr,
  ./usr.bin.chromium-browser:    /lib/@{multiarch}/libc-*.so* mr,
  ./usr.bin.chromium-browser:    /lib{,32,64}/libld-*.so* mr,
  ./usr.bin.chromium-browser:    /lib/@{multiarch}/libld-*.so* mr,
  ./usr.bin.chromium-browser:    /lib{,32,64}/ld-*.so* mr,
  ./usr.bin.chromium-browser:    /lib/@{multiarch}/ld-*.so* mr,
  ./usr.bin.chromium-browser:    /lib/tls/*/{cmov,nosegneg}/libm-*.so* mr,
  ./usr.bin.chromium-browser:    /lib/tls/*/{cmov,nosegneg}/libpthread-*.so* mr,
  ./usr.bin.chromium-browser:    /lib/tls/*/{cmov,nosegneg}/libc-*.so* mr,

  above list might be incomplete

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1784023/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to