On Sat, 2010-11-06 at 22:23 +0000, Ben Hutchings wrote:
> On Sun, 2010-11-07 at 03:43 +0530, Ritesh Raj Sarraf wrote:
> > Hello Kernel Team,
> > http://wiki.debian.org/DebianKernel/Meetings
> > The wiki lists most items marked as done. I am just curious to know what
> > the decision has been made for AppArmor. Will it be enabled ?
> Only if we can find a way to make it modular or discardable.
I've sort of worked out how to do that, but there are still some tricky
issues to deal with. Maybe I'll complete the job, maybe not.
But I realise that AppArmor isn't really that big, so I've enabled it
for the next experimental upload. However, the sizes of the iop32x and
ixp4xx kernel flavours are very close to the limits for those platforms
(without reflashing the boot loader) so we might have to disable one or
other LSM for those two.
Humans are not rational beings; they are rationalising beings.