Debian Bug report logs - #1006872
RFH: apparmor -- user-space parser utility for AppArmor

Reply or subscribe to this bug.

Display info messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: intrigeri <intrigeri@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: RFH: apparmor -- user-space parser utility for AppArmor

Date: Mon, 07 Mar 2022 10:17:20 +0100

Package: wnpp
Severity: normal
X-Debbugs-Cc: debian-devel@lists.debian.org, pkg-apparmor-team@alioth-lists.debian.net
Control: affects -1 src:apparmor

Hi,

I request assistance with maintaining the apparmor package.

AppArmor has been enabled by default on the Linux ports of Debian
since Buster.

The big picture of AppArmor maintenance in Debian is pretty good:

 - Vincas Dargis has been helping quite a lot on the policy (profiles) side of
   things — thanks!

 - Various package maintainers are taking care of AppArmor profiles shipped in
   their packages, asking help when needed, which is awesome.

 - Debian folks have generally been very cooperative when it comes to making
   AppArmor work on their system, e.g. by submitting merge requests upstream
   when suggested.

 - The kernel part of things happens upstream. AFAIK it did not
   require dedicated work on the Debian side for years.

But regarding maintenance of src:apparmor itself, the bus factor of in Debian is
1, which is not great. I don't feel comfortable with this situation.

src:apparmor includes:

 - system initialization bits

 - AppArmor parser, which is required to compile AppArmor profiles and load them
   into the kernel for use by the AppArmor Linux Security Module

 - abstractions, i.e. reusable bits of policy

The workload is not particularly big: I would say a few hours per month
on average.

Upstream is very cooperative.

Cheers!

Message #12 received at 1006872@bugs.debian.org (full text, mbox, reply):

From: "Andrej Shadura" <andrew@shadura.me>

To: "Debian Developers" <debian-devel@lists.debian.org>

Cc: pkg-apparmor-team@alioth-lists.debian.net, 1006872@bugs.debian.org

Subject: Re: Bug#1006872: RFH: apparmor -- user-space parser utility for AppArmor

Date: Mon, 07 Mar 2022 11:28:13 +0100

Hi,

On Mon, 7 Mar 2022, at 10:17, intrigeri wrote:
> But regarding maintenance of src:apparmor itself, the bus factor of in Debian is
> 1, which is not great. I don't feel comfortable with this situation.
>
> src:apparmor includes:
>
>  - system initialization bits
>
>  - AppArmor parser, which is required to compile AppArmor profiles and load them
>    into the kernel for use by the AppArmor Linux Security Module
>
>  - abstractions, i.e. reusable bits of policy
>
> The workload is not particularly big: I would say a few hours per month
> on average.
>
> Upstream is very cooperative.

This reminded me I promised to work on dh-apparmor. I should find time for that, maybe also for apparmor itself.

-- 
Cheers,
  Andrej

Message #17 received at 1006872@bugs.debian.org (full text, mbox, reply):

From: intrigeri <intrigeri@boum.org>

To: Andrej Shadura <andrew@shadura.me>

Cc: pkg-apparmor-team@alioth-lists.debian.net, 1006872@bugs.debian.org

Subject: Re: Bug#1006872: RFH: apparmor -- user-space parser utility for AppArmor

Date: Wed, 09 Mar 2022 09:33:05 +0100

Hi Andrej,

Andrej Shadura (2022-03-07):
> This reminded me I promised to work on dh-apparmor. I should find
> time for that,

Great!

> maybe also for apparmor itself.

Sounds good. Please keep me updated as you think about it :)

Send a report that this bug log contains spam.