On Sat, 2010-11-06 at 22:23 +0000, Ben Hutchings wrote: > On Sun, 2010-11-07 at 03:43 +0530, Ritesh Raj Sarraf wrote: > > Hello Kernel Team, > > > > http://wiki.debian.org/DebianKernel/Meetings > > > > The wiki lists most items marked as done. I am just curious to know what > > the decision has been made for AppArmor. Will it be enabled ? > > Only if we can find a way to make it modular or discardable. I've sort of worked out how to do that, but there are still some tricky issues to deal with. Maybe I'll complete the job, maybe not. But I realise that AppArmor isn't really that big, so I've enabled it for the next experimental upload. However, the sizes of the iop32x and ixp4xx kernel flavours are very close to the limits for those platforms (without reflashing the boot loader) so we might have to disable one or other LSM for those two. Ben. -- Ben Hutchings Humans are not rational beings; they are rationalising beings.
Attachment:
signature.asc
Description: This is a digitally signed message part