[apparmor] [Merge] lp:~intrigeri/apparmor-profiles/gstreamer-abstraction into lp:apparmor-profiles

intrigeri intrigeri at boum.org
Mon Jul 28 11:03:30 UTC 2014


Hi,

Seth Arnold wrote (28 Jul 2014 03:45:39 GMT) :
> This looks like a good cleanup to me.

Thank you.

> It does seem a bit strange that /usr/bin/totem brings in a totem
> abstraction which then brings in the gstreamer abstraction.

Would you prefer it if usr.bin.totem{,-previewers} both pulled the
gstreamer abstraction themselves?

> And I don't understand why pkcs11 support is included in any of
> these (but that's not new, I've never understood why it's included.)

ldd tells me that /usr/bin/totem is linked against libp11-kit.so.0,
for whatever reason. Not looked at the source.

> So while I don't want to block this on figuring out the totem abstraction
> I do wonder if we want/need it, [...]

Do you mean we might not need the totem abstraction at all? I think
it's useful because two profiles (namely: usr.bin.totem{,-previewers})
need common rules. But perhaps I'm missing something?

Cheers!

-- 
https://code.launchpad.net/~intrigeri/apparmor-profiles/gstreamer-abstraction/+merge/228398
Your team AppArmor Developers is requested to review the proposed merge of lp:~intrigeri/apparmor-profiles/gstreamer-abstraction into lp:apparmor-profiles.



More information about the AppArmor mailing list