[apparmor] gstreamer abstraction [Was: [PATCH 1/3] Allow Totem to read /etc/wildmidi/wildmidi.cfg.]

intrigeri intrigeri at debian.org
Mon Jun 16 23:23:51 UTC 2014


intrigeri wrote (23 Oct 2013 08:21:01 GMT) :
> Jamie Strandboge wrote (09 Oct 2013 14:55:53 GMT) :
>> gst-plugin-scanner is actually used for audio and video codecs so
>> keeping it out of the audio profile makes some degree of sense.

> OK, I'll add a gstreamer abstraction, then.

>> I'm also not a huge fan of adding ix rules to the upstream
>> abstractions unless we absolutely have to, so would prefer if the ix
>> was left in the totem profile. If others strongly disagree, I could
>> be convinced otherwise.

> Do you mean the gstreamer abstraction should not itself grant any
> execution right on gst-plugin-scanner, or something else that
> I'm missing?

Unless I've missed something, I'm still blocking on this for creating
a gstreamer abstraction, where I should move the few lines I had added
to the Totem profile back then.

(I have some more Totem profile updates needed to make it work on
current Debian sid: dconf and udev stuff. But I'd like to clean this
plate of mine before starting another review/improve/../merge cycle.)


More information about the AppArmor mailing list