Merge ~ahasenack/ubuntu/+source/squid:squid-apparmor-1792728 into ubuntu/+source/squid:ubuntu/devel

[Andreas Hasenack]

This is re-applying the apparmor fix from Simon Deziel <email address hidden> that was sponsored by @paelzer in https://code.launchpad.net/~sdeziel/ubuntu/+source/squid3/+git/squid3/+merge/354989 and which got trumped by my squid-4 upload.

I slightly changed the d/changelog entry to match our custom of specifying which file is being changed. I figured it's not a big deal since it's a new source package anyway, new major version, and I will have to test this again anyway. But if you think I should preserve the original d/changelog as proposed by him, please let me know. I did a cherry-pick of the fix, though, so the git commit is as he made it.

Bileto ticket, currently still running: https://bileto.ubuntu.com/#/ticket/3427

[Christian Ehrhardt  (paelzer)]

The changes are correctly rebased onto squid4 and I agree to the changelog being kept as-is but bumped to the new version.

+1

review: Approve

[Christian Ehrhardt  (paelzer)]

Since you can't sponsor this yet until the seed change reflecting the rename is fully complete I'll do that for you.

To ssh://git.launchpad.net/~usd-import-team/ubuntu/+source/squid
 * [new tag] upload/4.1-1ubuntu2 -> upload/4.1-1ubuntu2

[Christian Ehrhardt  (paelzer)]

PPA build ok
Fix in PPA seems ok in my quick test
It is default off, so likely a no-op, but never the less dep8 tests on the PPA are good as well.

[Christian Ehrhardt  (paelzer)]

Uploading to ubuntu (via ftp to upload.ubuntu.com):
  Uploading squid_4.1-1ubuntu2.dsc: done.
  Uploading squid_4.1-1ubuntu2.debian.tar.xz: done.
  Uploading squid_4.1-1ubuntu2_source.buildinfo: done.
  Uploading squid_4.1-1ubuntu2_source.changes: done.
Successfully uploaded packages

diff --git a/debian/changelog b/debian/changelog
index e957d13..2b85ae0 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+squid (4.1-1ubuntu2) cosmic; urgency=medium
+
+  * d/usr.sbin.squid: Update apparmor profile to grant read access to squid
+    binary (LP: #1792728)
+
+ -- Simon Deziel <[e-mail]>  Sat, 15 Sep 2018 13:55:32 -0400
+
 squid (4.1-1ubuntu1) cosmic; urgency=medium
 
   * Merged with Debian unstable (LP: #1780944, LP: #1097032, LP: #16669).
diff --git a/debian/usr.sbin.squid b/debian/usr.sbin.squid
index d80c8ea..07a9642 100644
--- a/debian/usr.sbin.squid
+++ b/debian/usr.sbin.squid
@@ -24,7 +24,7 @@
   capability sys_chroot,
 
   # allow child processes to run execvp(argv[0], [kidname, ...])
-  /usr/sbin/squid ix,
+  /usr/sbin/squid rix,
 
   # pinger
   network inet raw,