← Back to team overview

touch-packages team mailing list archive

[Bug 1480492] [NEW] aa-status in apparmor-2.10 depends on python3-apparmor

 

Public bug reported:

The apparmor 2.10-0ubuntu1 package did not migrate from wily-proposed
due to the content-hub autopkgtests failing. This turned out to be due
to the dh_apparmor postinst snippet failing to load the content-hub test
apparmor profiles because aa-status failed to run due to
python3-apparmor not being installed. The dependency was added in the
apparmor 2.10 cycle due to wanting to get fancier tracebacks that
contain more diagnostic information when errors occur. In a minimal
ubuntu environment, python-utils and python3-apparmor are not installed
by default (which is also why aa-status is included in the main apparmor
package).

There are a couple of possible short term solutions to this:

1) make the apparmor package depend on python3-apparmor
2) make aa-status function even when python3-apparmor isn't installed, either by reverting the added import entirely, or catching the exception and continuing even when it fails.

Long term, aa-status could be re-written (again), this time in C to help
minimal environments become even more minimal by getting rid of the
dependency on python.

** Affects: apparmor (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1480492

Title:
  aa-status in apparmor-2.10 depends on python3-apparmor

Status in apparmor package in Ubuntu:
  New

Bug description:
  The apparmor 2.10-0ubuntu1 package did not migrate from wily-proposed
  due to the content-hub autopkgtests failing. This turned out to be due
  to the dh_apparmor postinst snippet failing to load the content-hub
  test apparmor profiles because aa-status failed to run due to
  python3-apparmor not being installed. The dependency was added in the
  apparmor 2.10 cycle due to wanting to get fancier tracebacks that
  contain more diagnostic information when errors occur. In a minimal
  ubuntu environment, python-utils and python3-apparmor are not
  installed by default (which is also why aa-status is included in the
  main apparmor package).

  There are a couple of possible short term solutions to this:

  1) make the apparmor package depend on python3-apparmor
  2) make aa-status function even when python3-apparmor isn't installed, either by reverting the added import entirely, or catching the exception and continuing even when it fails.

  Long term, aa-status could be re-written (again), this time in C to
  help minimal environments become even more minimal by getting rid of
  the dependency on python.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1480492/+subscriptions


Follow ups