This was a nice DebCamp! Here is what I've been up to.

Relaunched , with a concrete proposal, the discussion about reconciling Apertis' packaging Git repository for src:apparmor with the Vcs-Git now shared by Debian and Ubuntu.

Submitted a merge request to mark libapparmor-perl Multi-Arch: same , promptly merged by one of the Ubuntu maintainers for the package.

Please make apparmor Multi-Arch: foreign : learned a little bit about Multi-Arch, documented my findings on the bug and requested more information from better skilled people.

Don't include python-apparmor nor python-libapparmor in Buster : submitted a merge request , promptly merged by one of the Ubuntu maintainers of the package.

Uploaded 2.13-3 to sid after a long review process by the Ubuntu maintainers (Salsa FTW!). Highlights:

clamav-freshclam: AppArmor denies access to /proc//status: had a quick look and provided hints for further debugging.

thunderbird: missing AppArmor entries: proposed cheap solutions.

usr.bin.chromium-browser: Cumulative update for Bionic / Chromium 65: did a few more rounds of review and finally merged.

openntpd: Apparmor denies logging: confirmed that the proposed solution is good enough IMO.

Please support AppArmor network rules: clarified status (tl;dr: this was merged in mainline Linux but the userspace to benefit from it is not ready yet).

Played with Thunderbird 60 from experimental, looking for necessary updates of the corresponding AppArmor policy… and found none. In passing, found a few minor issues with Enigmail (merge request) and reported a bug that makes Thunderbird 60 unusable for me.