Merge ~sdeziel/ubuntu/+source/squid3:apparmor-lp1792728 into ubuntu/+source/squid3:ubuntu/devel

[Simon Déziel]

* Update apparmor profile to grant read access to squid binary (LP: #1792728)

[Christian Ehrhardt  (paelzer)]

Hi Simon, this is good - small change and working as described.
Thanks, I'm sponsoring it as it.

review: Approve

[Christian Ehrhardt  (paelzer)]

To ssh://git.launchpad.net/~usd-import-team/ubuntu/+source/squid3
 * [new tag] upload/3.5.27-1ubuntu2 -> upload/3.5.27-1ubuntu2

[Christian Ehrhardt  (paelzer)]

Uploading to ubuntu (via ftp to upload.ubuntu.com):
  Uploading squid3_3.5.27-1ubuntu2.dsc: done.
  Uploading squid3_3.5.27-1ubuntu2.debian.tar.xz: done.
  Uploading squid3_3.5.27-1ubuntu2_source.buildinfo: done.
  Uploading squid3_3.5.27-1ubuntu2_s

diff --git a/debian/changelog b/debian/changelog
index cd27aed..ad19081 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+squid3 (3.5.27-1ubuntu2) cosmic; urgency=medium
+
+  * Update apparmor profile to grant read access to squid binary (LP: #1792728)
+
+ -- Simon Deziel <[e-mail]>  Sat, 15 Sep 2018 13:55:32 -0400
+
 squid3 (3.5.27-1ubuntu1) bionic; urgency=medium
 
   * Merge with Debian unstable (LP: #1751286). Remaining changes:
diff --git a/debian/usr.sbin.squid b/debian/usr.sbin.squid
index 2a400e9..92a959d 100644
--- a/debian/usr.sbin.squid
+++ b/debian/usr.sbin.squid
@@ -14,7 +14,7 @@
   capability sys_chroot,
 
   # allow child processes to run execvp(argv[0], [kidname, ...])
-  /usr/sbin/squid ix,
+  /usr/sbin/squid rix,
 
   # pinger
   network inet raw,