Infrastructure

Our postinst debian script relies on the aa-complain command to allow slapd to read files outside of its sandbox (particularly /etc/dataone/client/*). Ubuntu 12.04 LTS doesn't include the apparmor-utils package in the stock install, so we need to require it. Installation in the DEV2 environment failed because slapd would not start up, due to the following issue in /var/log/dataone/dataone-cn-os-core.install.log:

/var/lib/dpkg/info/dataone-cn-os-core.postinst: line 1464: aa-complain: command not found

This was confirmed by the following apparmor denial in /var/log/syslog:

Jul 23 14:50:24 cn-dev-ucsb-2 kernel: [600625.511199] type=1400 audit(1437688224.309:42): apparmor="DENIED" operation="open" parent=4977 profile="/usr/sbin/slapd" name="/var/log/slapd.log" pid=5970 comm="slapd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0
Jul 23 14:50:24 cn-dev-ucsb-2 slapd[5970]: main: TLS init def ctx failed: -1
Jul 23 14:50:24 cn-dev-ucsb-2 slapd[5970]: slapd stopped.

Add the dependency to the debian control file. To continue to install the CCI 1.x stack, we'll need to patch that branch as well (currently 1.5) and include this in the 1.5.3 patch release.