-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=YoK2
-----END PGP SIGNATURE-----
On 10/23/2015 11:10 AM, Robie Basak wrote:
> On Fri, Oct 23, 2015 at 11:06:34AM -0500, Jamie Strandboge wrote:
>> On 10/23/2015 10:45 AM, Robie Basak wrote:
>>
>>> (This is for an unconfined app - I think some changes will be needed to
>>> the AppArmor profile definitions to make it work confined - for example
>>> push notification helpers are too confined to allow one written in
>>> Python to run currently, despite the what documentation examples do).
>>>
>> Please file bugs[1] on specifics. AIUI, there are already several python push
>> helpers.
>
> I didn't file a bug at the time because there was a comment in the
> AppArmor profile definition (supplied by easyprof IIRC) that said that
> Python was specifically not supported. Although I was following the SDK
> documentation example, I was still getting an AppArmor denial, even
> using identical code to the example.
>
> Perhaps this has changed now, or the release on my phone mismatched the
> documentation I was using?
>
It depends on the template and policy group if that comment is in it. It seems I
misremembered though-- looking at the policy, python isn't allowed for push
clients since it isn't specifically supported. You can always bundle the
interpreter if you want, but that is pretty heavyweight for a push helper but is
allowed for an app.
This is the direction snappy is going too, but in snappy there is a tool to help
with bundling (snapcraft).
--
Jamie Strandboge http://www.ubuntu.com/
