[apparmor] apparmor utils --json for yast support

Goldwyn Rodrigues rgoldwyn at suse.de
Fri Jan 13 19:22:02 UTC 2017



On 01/13/2017 12:25 PM, Christian Boltz wrote:
> Hi Goldwyn,
> 
> Am Donnerstag, 7. Juli 2016, 21:33:17 CET schrieb Goldwyn Rodrigues:
>> Thanks, Thats a lot of information. I will work on this and let you
>> know as the work progresses.
> 
> Half a year later - any progress?
> 

I've had other pressing matters. In any case. I worked a bit on the
patch to make it more suitable for processing. I basically stripped it
off the new lines so that there is one record per line. I can send the
patch if you wish.


> As you probably noticed, AppArmor 2.11 was released some days ago, and 
> we still have to ship the deprecated and bitrotting perl modules because 
> YaST still needs them. (They were last used by the aa-* tools in 2.8, 
> and contain quite some bugs which are also affect the YaST module.)
> 
> The next AppArmor version will probably come with a new "dconf" rule 
> type, so it might be a good idea to focus on adding --json to the utils 
> and rewriting the YaST module instead of riding^Wmaintaining a dead 
> horse even longer ;-)
> 
> Someone at SUSE recommended that I should announce that the perl modules 
> will finally be dropped in the next release to force progress in YaST. 
> If you need this to get a time budget for working on this, tell me and 
> I'll happily send that announcement to the YaST mailinglist ;-)
> 
> Even without such an announcement, I can tell you that none of the 
> upstream developers will touch the perl modules, so you'll at least have 
> to implement dconf rule support yourself.

Dropping the modules may help. However, since no one is touching it, it
rather might be there. In the meantime, I should get some time to ramp
up with ruby and initiate the port.

As for the time, I hope to do this during Hackweek, which should be
mid-feb, so a timeframe of May/June 2017 should be good. What do you say?

> 
> 
> Regards,
> 
> Christian Boltz
> 
> PS: Maybe this would be a possible GSoC project. I won't be able to 
>     mentor the YaST module [1], but I can co-mentor and help with the 
>     json implementation on the AppArmor side.
> 
> [1] no, I don't want to learn ruby the same way I learned python ;-)
> 

-- 
Goldwyn



More information about the AppArmor mailing list