On 08/09/15 17:29, Jasper St. Pierre wrote:
> ( I do wonder how Debian runs gnome-initial-setup then --
> https://git.gnome.org/browse/gnome-initial-setup/tree/data/20-gnome-initial-setup.rules
> -- there's one upstream that uses that ability )

The answer is currently "we don't": gnome-initial-setup isn't packaged
yet. However, that clearly isn't ideal. gnome-control-center also has
non-trivial JavaScript rules that aren't active in Debian unstable.

I've been looking into what it would take to get the up-to-date polkit
from Debian experimental into general use within Debian/Ubuntu. All our
packaged .pkla files have a JavaScript equivalent, and I've been using
the newer polkit myself for months; I think the major concern, apart
from mozjs' footprint and the fact that mozjs > 1.8.5 is such a moving
target API-wise, is that sysadmins' local .pkla files (if any) would be
ignored after we upgrade.

I personally don't have a strong objection to JS as an embeddable
configuration language: general purpose systems often need it anyway, if
only for proxy autoconfiguration support (I'm not a fan of proxy
servers, particularly non-transparent ones, but large corporations seem
to be inexplicably keen on them). However, I'm not a maintainer of
polkit in Debian (the maintainers are Michael Biebl and Martin Pitt) so
my opinion counts rather less than theirs.

Earlier in the thread, Jasper wrote:
> Going back to PKLA rules might also mean
> that someone who can't express complex ACL logic in those rules means
> that they reinvent polkit in their app.

That's certainly a valid point; the PKLA rules are less expressive than
JavaScript rules, as far as I understand it.

Even earlier in the thread, Jasper wrote:
> Perhaps not, but since Duktape is two files, has a stable API (outside
> of a 2.x release, coming at some point, with promises that 1.x will be
> maintained), I don't see it as being that much of a burden.
>
> But, as mentioned, if other distributions want to package Duktape, I
> am fine with that too. I just chose the easier, recommended approach.

The fact that duktape does actually have releases and API stability is
reassuring, and puts it way ahead of "copy these files into your
project" pseudo-libraries; a bundled copy isn't such a problem if
there's a --with-system-duktape configuration option, similar to how
GLib handles PCRE.

-- 
Simon McVittie
Collabora Ltd. <http://www.collabora.com/>

_______________________________________________
polkit-devel mailing list
polkit-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/polkit-devel

Reply via email to