That sucks. That means that upstreams can't write JS rules files,
because Debian / Ubuntu wouldn't enforce them. But that also means
that it might be possible for us to revert back out of JS rules files.

( I do wonder how Debian runs gnome-initial-setup then --
https://git.gnome.org/browse/gnome-initial-setup/tree/data/20-gnome-initial-setup.rules
-- there's one upstream that uses that ability )

Miloslav, do you want to consider reverting JS rules files then, if
Debian is never going to switch to them?

On Thu, Sep 3, 2015 at 6:09 PM, Michael Biebl <mbi...@gmail.com> wrote:
> 2015-08-18 20:11 GMT+02:00 Shawn Walker-Salas <shawn.wal...@oracle.com>:
>> polkit's dependency on mozjs is a royal pain, especially for distributions
>> that build on more "niche" platforms where mozjs is only recently gaining
>> support for some hardware and operating systems.
>
> Let me add here, that Debian and Ubuntu never made the switch to a
> JS-based polkit, i.e. we still use v0.105 in all our current stable
> releases and development branches.
>
> The idea of using a turing complete language which makes it impossible
> to audit the polkit configuration never struck us as a good idea.
> Also seeing the pain which is involved getting polkit updated to newer
> mozjs releases, and the fact that mozjs, afaik, is not officially
> blessed/security supported by mozilla, didn't really to convince us to
> do the switch either.
>
> Michael
>
>
> --
> Why is it that all of the instruments seeking intelligent life in the
> universe are pointed away from Earth?



-- 
  Jasper
_______________________________________________
polkit-devel mailing list
polkit-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/polkit-devel

Reply via email to