Am 06.12.2019 um 01:25 schrieb Simon McVittie:
There has been some upstream unhappiness with the current configuration
arrangements, mostly because the mozjs library that is used for the
JavaScript interpreter does not have a stable API; so it is possible that
a newer upstream version will either change the configuration language
(again), or change the JavaScript implementation to something more friendly
(most likely a smaller interpreter like duktape).

Here is a reference to the upstream PR for the duktape implementation:

https://gitlab.freedesktop.org/polkit/polkit/-/merge_requests/35

I acknowledge that the current situation is barely maintainable (and thanks to @smcv for doing the hard work). Although I'm not a huge fan of using JS for setting up security sensitive configuration, personally I'd be much more comfortable with a JS-based polkit version using duktape, fwiw.

Michael

Reply via email to