Comment 21 for bug 1816548

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

Thanks Jamie!

From the MIR Team we had a list of todos in comment #4:
Some are resolved already around the lib/symbols as well as the formerly open security issues being resolved in the new release.

What is left seems to be:
- Change the current on-install default to block all but host controllers
  to "allow all that is attached on install".
  That can either be done in a postinst or by changing the base
  PresentDevicePolicy config.
- to avoid a install hickup maybe even set PresentDevicePolicy=allow, then
  set all to be allowed and only then reset to "apply-policy"
- set IPCAllowedGroups=root to also allow sudo group
- Fix plug/unplug/plug issues
- implementing an autopkgtest might be required (see current issues with linux 5.0 upstream)

In general adding it to groovy at the current state also feels much safer than when it was late in the focal cycle.

And maybe some of the things above are also already resolved.
@Desktop-team would you mind rechecking if those are also handled already (and if not tackle them or explain why they are not needed).