Why are most of the profiles here not packaged?
I've noticed that of the profiles present under ubuntu/20.04/
, only five are actually shipped in the apparmor-profiles-extra
package on Debian and Ubuntu. Below is the full list of profiles available in this repo, with the packaged ones in bold, and non-profile stubs elided:
opt.braid.braid
opt.introversion.darwinia.darwinia
opt.WorldOfGoo.WorldOfGoo
usr.bin.analog
usr.bin.ceph-mon
usr.bin.ceph-osd
usr.bin.chromium-browser
usr.bin.empathy
usr.bin.evolution
usr.bin.gnome-thumbnail-font
usr.bin.gwibber-service
usr.bin.irssi
usr.bin.mtr
usr.bin.pidgin
usr.bin.pulseaudio
usr.bin.sflphone-client-gnome
usr.bin.spotify
usr.bin.thunderbird
usr.bin.totem
usr.bin.totem-previewers
usr.bin.ttytter
usr.bin.weechat
usr.lib.postgresql.bin.postgres
usr.sbin.apt-cacher-ng
usr.sbin.ejabberd
usr.sbin.hiawatha
usr.sbin.lldpd
usr.sbin.murmurd
usr.sbin.nslcd
usr.sbin.ssmtp
usr.sbin.unbound
usr.sbin.vnstatd
usr.share.update-notifier.notify-reboot-required
I'd like to inquire why the full set isn't shipped. The package at issue is already ancillary to the AppArmor installation, so the quality/maturity of the profiles shouldn't be an issue. I myself make use of usr.sbin.nslcd
, usr.sbin.ssmtp
, and sbin.rpc.statd
, and currently have to retrieve them from Git to enable them on a new system.