Comment 22 for bug 1964636

I didn't want to block this from getting into focal-proposed because I think it would be good to get some initial testing already, especially that the package has been sponsored by someone from the security team. But I'm not entirely happy with the test/regression-potential stories for this bug, so maybe it would be nice to re-visit that. Both of those seem to be copied from comments under the long thread in the bug here, which is fine, but I'd like to make sure this is all that needs testing.

I don't know apparmor code, but I'd like if someone could re-visit the cap* patches added to this upload and check if there's anything that we could regress *besides* in the actual feature-set. There's a lot of patches here touching a lot of code, so there's surely a risk that we might influence existing code in some additional way? Or are those three cases the only possible risk?

For such a change, is there also some other testing we could do to make sure things work properly?