@Oliver - that is the plan. The gsettings/apparmor mediation I am referring to is not simply 'you can access gsettings', it is 'you can access these gsettings keys' and like everything else, that will be default deny and we'll only allow app-specific keys and read only access to safe global keys.
@Mark - yes, though my list was a series of steps not options. :) You picking '3' is clear though-- unblock people now with an interface that allows access to gsettings, work on full mediation and SRU that. Thanks!
@Oliver - that is the plan. The gsettings/apparmor mediation I am referring to is not simply 'you can access gsettings', it is 'you can access these gsettings keys' and like everything else, that will be default deny and we'll only allow app-specific keys and read only access to safe global keys.
@Mark - yes, though my list was a series of steps not options. :) You picking '3' is clear though-- unblock people now with an interface that allows access to gsettings, work on full mediation and SRU that. Thanks!