linux-image: Recommend apparmor (Closes: #880441)
The apparmor package is needed for loading profiles. In theory, enabling AppArmor without any profiles loaded should do nothing, so this is not really a dependency of the kernel. However, if a systemd unit specifies a AppArmor profile and the kernel has AppArmor enabled then failure to load the profile is fatal. As the linux-image packages select AppArmor as the default LSM, they should probably also be responsible for getting the necessary userland support installed. But since the default can be overridden, use Recommends rather than Depends.
This commit is contained in:
parent
43a5e411fd
commit
bd1e10f8bd
|
@ -52,6 +52,10 @@ linux (4.13.11-1) UNRELEASED; urgency=medium
|
|||
Thanks to Andrew Chadwick (Closes: #880504)
|
||||
* netfilter: nft_set_hash: disable fast_ops for 2-len keys (Closes: #880145)
|
||||
|
||||
[ Ben Hutchings ]
|
||||
* linux-image: Recommend apparmor, as systemd units with an AppArmor
|
||||
profile will fail without it (Closes: #880441)
|
||||
|
||||
-- Salvatore Bonaccorso <carnil@debian.org> Sat, 04 Nov 2017 09:54:41 +0100
|
||||
|
||||
linux (4.13.10-1) unstable; urgency=medium
|
||||
|
|
|
@ -118,6 +118,7 @@ part-long-xen: This kernel also runs on a Xen hypervisor.
|
|||
|
||||
[image]
|
||||
initramfs-generators: initramfs-tools initramfs-fallback
|
||||
recommends: apparmor
|
||||
|
||||
[relations]
|
||||
# compilers
|
||||
|
|
Loading…
Reference in New Issue