PackageKit policy: background and plans

Panu Matilainen pmatilai at laiskiainen.org
Tue Nov 24 07:27:22 UTC 2009


On Mon, 23 Nov 2009, Seth Vidal wrote:
>
> On Mon, 23 Nov 2009, Colin Walters wrote:
>
>> On Mon, Nov 23, 2009 at 10:02 PM, James Morris <jmorris at namei.org> wrote:
>>> 
>>> 
>>> Possibly (it could simply be that an updated policy is weaker for some
>>> reason) -- but it doesn't matter, there should be no way to change MAC
>>> policy without MAC privilege.
>> 
>> It'd be nice here if we had the ability to only grant the ability to
>> install applications, not packages.  We could possibly do this even
>> now inside PackageKit by always downloading the filelists data, and
>> looking for a .desktop file.  It'd be even better if we could get at
>> the data inside the .desktop file, but that's not necessary for this.
>> That leaves aside the packagekit-command-not-found feature for unix
>> binaries, but that's more of a technical use case.
>
> Or - you could more easily generate the 'which pkgs have .desktop files' and 
> propagate that into a package Provides.
>
> since yum can install by provides - that takes care of that need.
>
> example:
>
> Provides: App('foo')

We're already collecting provides from .desktop files for mime types, 
adding more provides would be a no-brainer.

 	- Panu -




More information about the fedora-devel-list mailing list