[pulseaudio-discuss] AppArmor profile for pulseaudio

[Tanu Kaskinen]

On Wed, 2017-09-13 at 21:16 -0300, Felipe Sateler wrote:
> I have been told downstream[1] that there is an AppArmor profile that
> is worked on by people from Debian, Ubuntu and OpenSUSE. I have been
> asked to include it in the debian package but it seems to me that this
> benefits most if included uptream.
> 
> Would you be accepting of patches regarding apparmor profiles? An
> apparmor profiles is AFAICT just a file that lists certain permissions
> that pulseaudio needs (eg, write access to /run/user/$uid/pulse). If
> the profile is badly written, it could result in errors as pulseaudio
> won't have permission to do what it wants. It is my understanding that
> Ubuntu already uses this profile so it has at least some testing in
> the wild.
> If a user does not have AppArmor installed, the profile becomes a NOP.
> 
> According to the submitter, the apparmor people are more than happy to
> assist if/when problems arise due to the pulseaudio profile.
> 
> What do you think?
> 
> [1] https://bugs.debian.org/857798

At least I'm ok with including the apparmor profile upstream.

-- 
Tanu

https://www.patreon.com/tanuk