From bd1e10f8bd85adf182f122417a843bf6ffbac80c Mon Sep 17 00:00:00 2001 From: Ben Hutchings Date: Sun, 5 Nov 2017 01:54:12 +0000 Subject: [PATCH] linux-image: Recommend apparmor (Closes: #880441) The apparmor package is needed for loading profiles. In theory, enabling AppArmor without any profiles loaded should do nothing, so this is not really a dependency of the kernel. However, if a systemd unit specifies a AppArmor profile and the kernel has AppArmor enabled then failure to load the profile is fatal. As the linux-image packages select AppArmor as the default LSM, they should probably also be responsible for getting the necessary userland support installed. But since the default can be overridden, use Recommends rather than Depends. --- debian/changelog | 4 ++++ debian/config/defines | 1 + 2 files changed, 5 insertions(+) diff --git a/debian/changelog b/debian/changelog index ef5c54136..a69f0a49d 100644 --- a/debian/changelog +++ b/debian/changelog @@ -52,6 +52,10 @@ linux (4.13.11-1) UNRELEASED; urgency=medium Thanks to Andrew Chadwick (Closes: #880504) * netfilter: nft_set_hash: disable fast_ops for 2-len keys (Closes: #880145) + [ Ben Hutchings ] + * linux-image: Recommend apparmor, as systemd units with an AppArmor + profile will fail without it (Closes: #880441) + -- Salvatore Bonaccorso Sat, 04 Nov 2017 09:54:41 +0100 linux (4.13.10-1) unstable; urgency=medium diff --git a/debian/config/defines b/debian/config/defines index 6714a8c29..161c53ce9 100644 --- a/debian/config/defines +++ b/debian/config/defines @@ -118,6 +118,7 @@ part-long-xen: This kernel also runs on a Xen hypervisor. [image] initramfs-generators: initramfs-tools initramfs-fallback +recommends: apparmor [relations] # compilers