[apparmor] Cache update broken

Christian Boltz apparmor at cboltz.de
Tue Aug 7 20:34:28 UTC 2012


Hello,

John, thanks for honoring the golden rules of bad programming in your 
patch! I'm especially talking about rule 18 - "take great care in 
setting bad defaults" ;-)

Am Dienstag, 7. August 2012 schrieb Seth Arnold:
> I expect --clear-cache-if-needed to be the default set in the config
> file 

Let me ask a simple question: Can you give me a good reason _not_ to 
automatically clear the cache if .features differs, and to keep an 
outdated cache? [1]

IMHO most people want their cache updated automatically, and it doesn't 
make much sense to force everybody to add --clear-cache-if-needed to the 
initscript or the config file.

Can we please make it the default _without_ the need for an additional 
parameter or config option?


If you really want, feel free to introduce a 
    --never-clear-cache-automatically
parrameter / config file option - but I doubt many people will use it 
;-)

> -- redundant for ubuntu but also a chance to bring both
> initscripts together again -- at least for this feature.

I don't know the history and background why there are separate 
initscripts (pointers welcome), but I'm a big fan of avoiding duplicate 
work (especially if I have to maintain the duplicate ;-))

> A direct --clear-cache would just be a debugging tool for admins, and
> rarely used (hopefully) at that.

Indeed. It might be a nice feature, but I'd give it a low priority [2].
The avarage admin most probably knows how to delete all files in a 
directory ;-)


Regards,

Christian Boltz

[1] oh, now I remember: 
        rule 22 - "invent new ways to make your program slow" 
    ;-)

[2] aa-enable is more important IMHO because it needs to
    a) delete a symlink
    b) load the profile
-- 
Ich selbst benutze kweather nicht (ich guck einfach aus dem Fenster).
[Hartmut Meyer in suse-linux]




More information about the AppArmor mailing list