Package Details: apparmor 2.11.0-3

Git Clone URL: (read-only)
Package Base: apparmor
Description: Linux application security framework - mandatory access control for programs (metapackage)
Upstream URL:
Keywords: hardening linux LSM MAC security
Licenses: GPL
Submitter: Harvie
Maintainer: edh
Last Packager: edh
Votes: 96
Popularity: 3.667324
First Submitted: 2010-10-28 14:55
Last Updated: 2017-09-30 13:59

Latest Comments

michaelkempff commented on 2017-10-16 21:33

Hi Edh,

I'm getting the following error when trying to install the apparmor metapackage:

==> Verifying source file signatures with gpg...
apparmor-2.11.0.tar.gz ... FAILED (unknown public key 6689E64E3D3664BB)
==> ERROR: One or more PGP signatures could not be verified!

Any ideas?
Thanks in advance!

edh commented on 2017-10-02 14:58

The distribution of the dependencies into the different arrays is intentional. Package specific dependencies (those e.g. defined by apparmor-profiles) behave differently than than their pkgbase counterpart. The latter one is always present when building while the first one not necessarily.

Concerning your '/usr/lib/perl5/vendor_perl' and perl-rpc-xml problem: The command you specified would yield nothing since the path has been deprecated in favor of '/usr/lib/perl5/PERL_VENDORARCH/vendor_perl'.

Irvine commented on 2017-09-30 15:05

Glad to see a new maintainer volunteering and outstanding issues being fixed so quickly.

With regard to "apparmor-utils": Noting that perl itself is a "make dependency", should this also be the case for "perl-rpc-xml". In particular, should I be concerned that running "pacman -Qqo '/usr/lib/perl5/vendor_perl'" lists "perl-rpc-xml" as not being used by the updated perl interpreter.

Best wishes

Just noticed that is listed twice in the dependency tree, once as a "make depends" and once as a "depends"??

edh commented on 2017-09-30 14:01

Done. Thanks for the reminder.

egrupled commented on 2017-09-30 13:19

@edh Can you add patch which I mentioned before? Unless I'm missing something it affects everyone who actually use those tools.

some apparmor utils are currently broken with python 3.6, see

I recommend adding patch which fixes issue:

edh commented on 2017-09-30 10:52

I recently obtain the maintainership for the apparmor packages and will do my best to keep them up-to-date and clean. As a starting point, I fixed the bug related to perl's 'vendorarch' hence the package should at least be working again. Furthermore I removed unnecessary bash code and hardened the script against errors handling strings containing spaces.
If you have any additional suggestions which might make sense to include into the PKGBUILD, please let me know.

lukeyeager commented on 2017-09-12 00:54

Tested working patch:

- install -D -m644 "libraries/libapparmor/swig/perl/" "${pkgdir}/usr/lib/perl5/vendor_perl/"
+ perldir="$(perl -V:vendorarch | cut -d"'" -f2)"
+ install -D -m644 "libraries/libapparmor/swig/perl/" "${pkgdir}${perldir}"

edh commented on 2017-09-04 19:03

You could have easily answered that question yourself, by clicking on the 'View Changes' Link in the top-right corner [1]. It will display the last git commits and therefore list any potential changes. However to answer your question: No, it has not been changed yet.

Your suggestion would lock the package to perl version 5.26 and hence require changing the PKGBUILD for each new release. In order to ease maintenance it should therefore be preferred to use the output of `perl -V:vendorarch` within the PKGBUILD directly whereby only a rebuild against new releases would be required.


francoism90 commented on 2017-09-04 18:45

Does this package work seeing the recent comments?

egrupled commented on 2017-09-04 14:59

You can change line:
install -D -m644 "libraries/libapparmor/swig/perl/" "${pkgdir}/usr/lib/perl5/vendor_perl/"

install -D -m644 "libraries/libapparmor/swig/perl/" "${pkgdir}/usr/lib/perl5/5.26/vendor_perl/"

All comments