On Mon, Aug 05, 2013 at 05:59:14PM -0500, Jamie Strandboge wrote: > I have written two tools that we may want to optionally ship[3]: > * apparmor-xdg-dirs-simple.py: this takes a locale as an argument and outputs > to stdout something suitable for dropping into /etc/apparmor.d/xdg-dirs.d. > [...] > * apparmor-xdg-dirs.py: this takes the output of 'locale -a' and outputs to > stdout something suitable for dropping into /etc/apparmor.d/xdg-dirs.d as > well, but tries to be a little smarter and only outputs unique > translations, > skipping the 'C' locale (since the C locale dirs are presumed to already be > in /etc/apparmor.d/tunables/xdg-dirs). Eg, on an Ubuntu 13.10 system with > the en, fr and zn locales installed:
This is really cool. :) With this in place, an admin can easily write policy that enforces something sane without even needing to know the languages spoken by his or her users. The policy will make sense, users get their own local languages, and if someone goes to the extreme and wants to supremely customize their XDG directories, we'll have an answer ready for them that is more convenient than a big pile of sed -i. :) I strongly support including these or their offsprings in our upstream source code. Would we, as a distribution, want to hook this up in some automatic fashion to new locale creation? It feels like the polite thing to do, and admins may well welcome one fewer task to perform. Thanks
signature.asc
Description: Digital signature
-- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
