abstractions/ubuntu-browsers should include drop-in snippets from a directory

Bug #1730220 reported by intrigeri
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
AppArmor
New
Undecided
intrigeri
thunderbird (Debian)
Confirmed
Unknown

Bug Description

We're trying to maintain a complete list of all available browsers in abstractions/ubuntu-browsers. This approach has a few problems:

1. We have to update the list constantly
2. Updating the list requires an upload of the apparmor package
3. As https://bugs.debian.org/880424 shows, this is not flexible enough: there's no way we keep track of all popular browsers that are not shipped in distro

IMO abstractions/ubuntu-browsers should "#include <abstrations/some-directory.d>" and e.g. google-chrome-beta could ship its own snippet in there. Sadly ubuntu-browsers.d already exists and is used for something else but if this approach seems like a good idea to you folks, I'm happy to think about another suitable name.

Thoughts, opinions?

Tags: aa-policy
intrigeri (intrigeri)
Changed in apparmor:
assignee: nobody → intrigeri (intrigeri)
Changed in thunderbird (Debian):
status: Unknown → Confirmed
Revision history for this message
Vincas Dargis (talkless) wrote :

Yeah, in fact any abstraction (as abstractions/ubuntu-{media-players,email,bittorent-clients}) could be improved with a .d directory.

Not sure what to suggest about naming.

Maybe abstractions/include{,.d}/{browsers.d,media-plauyers.d,text-editors.d,email.d,...}

Revision history for this message
Vincas Dargis (talkless) wrote :

Ping. Any ideas how could this be organized?

Although even if we have these `.d` directories, there's no guarantee that third party proprietary software provides would care to place abstraction there...

Revision history for this message
intrigeri (intrigeri) wrote :

I've no strong opinion about this at the moment.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.