[apparmor] [PATCH] Convert aa-status to Python

Jamie Strandboge jamie at canonical.com
Thu May 26 18:45:26 UTC 2011


On Thu, 2011-05-26 at 18:08 +0000, Seth Arnold wrote:
> You might want to profile boottimes with this change. I can't blame
> you for wanting to migrate tools away from Perl :) but aa-status is
> called in several startup scripts to see if apparmor profiles for
> those specific services should be loaded. Throwing python into boot
> sequence too might introduce significant costs compared to Perl.

IMHO, this should not be an issue. The rc.apparmor.* scripts that we
provide use aa-status, but only when used with '/etc/init.d/apparmor
status', not on boot. Upstart jobs in Ubuntu also do not use aa-status
(see /lib/init/apparmor-profile-load).

All that said, if a distribution wrote their own initscript to use
aa-status and doesn't want python in their boot chart, then they should
look again at the initscripts provided by us as upstream on how to do
that.

-- 
Jamie Strandboge             | http://www.canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20110526/548027ef/attachment.pgp>


More information about the AppArmor mailing list