[pulseaudio-discuss] AppArmor profile for pulseaudio

[Felipe Sateler]

On Sun, Sep 17, 2017 at 1:06 PM, Tanu Kaskinen <tanuk at iki.fi> wrote:
> On Wed, 2017-09-13 at 21:16 -0300, Felipe Sateler wrote:
>> I have been told downstream[1] that there is an AppArmor profile that
>> is worked on by people from Debian, Ubuntu and OpenSUSE. I have been
>> asked to include it in the debian package but it seems to me that this
>> benefits most if included uptream.
>>
>> Would you be accepting of patches regarding apparmor profiles? An
>> apparmor profiles is AFAICT just a file that lists certain permissions
>> that pulseaudio needs (eg, write access to /run/user/$uid/pulse). If
>> the profile is badly written, it could result in errors as pulseaudio
>> won't have permission to do what it wants. It is my understanding that
>> Ubuntu already uses this profile so it has at least some testing in
>> the wild.
>> If a user does not have AppArmor installed, the profile becomes a NOP.
>>
>> According to the submitter, the apparmor people are more than happy to
>> assist if/when problems arise due to the pulseaudio profile.
>>
>> What do you think?
>>
>> [1] https://bugs.debian.org/857798
>
> At least I'm ok with including the apparmor profile upstream.
>

OK, I'll let them know to forward the patch here.

-- 

Saludos,
Felipe Sateler