Replacing polkit JS backend
Ikey Doherty
ikey at solus-project.com
Sat Oct 21 18:34:41 UTC 2017
So for libvirt *itself* its easy to do the rules [1] but if push
comes to shove I'm happy to help port the upstream projects if
they're reliant on dynamic rule generation.
As for the verbs part of the equation I do intend to have a part
of the format allowing this, something along the lines of:
ExpectedKeys=blah,blah1
ExpectedValues=foo,foo1
[1]
https://dev.solus-project.com/R1891:ab17e2be050aeb5815f78cac068402efeea2b198
For the majority of distros this would be a documented transition
across major releases due to the nature of the breakage, but
obviously if we can get as much of that anticipated before hand..
- ikey
On 21/10/17 18:55, Jasper St. Pierre wrote:
> The last time this came up (when I tried to replace mozjs with Duktape),
> it was pointed out that libvirt uses JS rules [0], and there's some
> evidence that administrators are doing it as well. [1]
>
> [0] https://libvirt.org/aclpolkit.html
> [1] https://github.com/systemd/systemd/pull/1159
>
> On Sat, Oct 21, 2017 at 10:28 AM, Matthew Miller <mattdm at mattdm.org
> <mailto:mattdm at mattdm.org>> wrote:
>
> On Sat, Oct 21, 2017 at 03:40:40AM +0100, Ikey Doherty wrote:
> > I've opted to make it an **alternative** backend to ease migration,
> > thus:
> >
> > --with-backend=js|keyfile
>
> Nice. I'm personally super in favor of it. Not speaking for Red Hat
> officially, by any means. From a pure Fedora point of view...
> I don't think we have many users taking advantage of the javascript
> format, but if there are, I would prefer to not break them.
>
>
> --
> Matthew Miller mattdm at mattdm.org
> <mailto:mattdm at mattdm.org> <http://mattdm.org/>
> Fedora Project Leader mattdm at fedoraproject.org
> <mailto:mattdm at fedoraproject.org> <http://fedoraproject.org/>
> _______________________________________________
> polkit-devel mailing list
> polkit-devel at lists.freedesktop.org
> <mailto:polkit-devel at lists.freedesktop.org>
> https://lists.freedesktop.org/mailman/listinfo/polkit-devel
> <https://lists.freedesktop.org/mailman/listinfo/polkit-devel>
>
>
>
>
> --
> Jasper
More information about the polkit-devel
mailing list