apparmor adt test failure blocking tcpdump migration

[Steve Beattie]

tcpdump has a sync from debian 4.99.0-2 that is currently blocked in hirsute-proposed due to a regression in the apparmor adt tests. The reason for this failure is that 'compile-policy' testcase is failing; this test ensures that various apparmor policies included in packages are accepted by the apparmor policy parser.

In the new version of tcpdump 4.99.0-2, the tcpdump binary is installed into /usr/bin/tcpdump, and the tcpdump apparmor policy has been renamed from usr.sbin.tcpdump to usr.bin.tcpdump to match. The apparmor adt test however was not also changed to match, and so fails with:

  Addition succeeded for "/usr/sbin/ntpd".
  Testing usr.sbin.tcpdump
  File /etc/apparmor.d/usr.sbin.tcpdump not found, skipping...
  autopkgtest [15:35:53]: test compile-policy: -----------------------]
  autopkgtest [15:35:54]: test compile-policy: - - - - - - - - - - results - - - - - - - - - -
  compile-policy FAIL non-zero exit status 2

causing the entire adt test to fail.

[Launchpad Janitor (janitor)]

This bug was fixed in the package apparmor - 3.0.0-0ubuntu8

---------------
apparmor (3.0.0-0ubuntu8) impish; urgency=medium

  [ Andrea Righi ]
  * add support for CAP_CHECKPOINT_RESTORE in /etc/apparmor/severity.db
   (LP: #1923432):
    - d/p/ubuntu/Add-CAP_CHECKPOINT_RESTORE-to-severity.db.patch

  [ Steve Beattie ]
  * fix adt compile-test to handle the changed name of the tcpdump
    apparmor profile (LP: #1925411)
    - d/t/compile-test: test against usr.bin.tcpdump

 -- Andrea Righi <email address hidden> Mon, 12 Apr 2021 15:51:45 +0000