Support additional policy directories #134
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
DemiMarie
force-pushed
the
runtime-policy-dir
branch
5 times, most recently
from
69f5fe1
to
23d87ef
Compare
DemiMarie
force-pushed
the
runtime-policy-dir
branch
from
23d87ef
to
b16224c
Compare
DemiMarie
force-pushed
the
runtime-policy-dir
branch
from
b16224c
to
db6f542
Compare
This allows multiple directories to contain qrexec policy, which allows for transient policy that disappears on reboot. Fixes: QubesOS/qubes-issues#8513
Replace it with Python 3.7+ importlib.
This avoids a deprecation warning from pylint. Also fix an incorrect comment.
DemiMarie
force-pushed
the
runtime-policy-dir
branch
from
db6f542
to
1f83e62
Compare
|
There has been some community demand for having user directory on the user's home to ease backup and restore. Would this be a good place / timing to consider it? |
|
I don't think keeping (some) policy in user home is a good idea. Better approach is to extend backup to include additional files/directories. |
|
I agree that's the correct approach. I was thinking here more pragmatically as to what could help users in the short-term, since policy backups will need careful consideration. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This allows multiple directories to contain qrexec policy, which allows for transient policy that disappears on reboot.
Fixes: QubesOS/qubes-issues#8513