← Back to team overview

ubuntu-sdk-bugs team mailing list archive

[Bug 1293586] [NEW] qtcreator should use the click-apparmor query API to obtain the policy version

 

Public bug reported:

Currently qtcreator hard codes the apparmor policy_version in the
security manifest to be 1.0. With the new 14.04 framework definitions,
the policy_version should be 1.1 for 14.04 and 1.0 for 13.10. In order
to prevent this mapping being stored in multiple places, click-apparmor
0.2 now provides a python API and a CLI tool for querying the profile
version and you may query for the policy_version for the specified
framework (https://wiki.ubuntu.com/Click/Frameworks). Eg:

$ aa-clickquery --click-framework=<framework> -q policy_version

Specific examples:
$ aa-clickquery --click-framework=ubuntu-sdk-13.10 -q policy_version
1.0

Supported 14.04 frameworks as of ubuntu-touch-meta (1.115):
$ aa-clickquery --click-framework=ubuntu-sdk-14.04-qml-dev1 -q policy_version
1.1
$ aa-clickquery --click-framework=ubuntu-sdk-14.04-papi-dev1 -q policy_version
1.1
$ aa-clickquery --click-framework=ubuntu-sdk-14.04-html-dev1 -q policy_version
1.1

Future 14.04 frameworks:
$ aa-clickquery --click-framework=ubuntu-sdk-14.04-qml -q policy_version
1.1
$ aa-clickquery --click-framework=ubuntu-sdk-14.04-papi -q policy_version
1.1
$ aa-clickquery --click-framework=ubuntu-sdk-14.04-html -q policy_version
1.1

Ie, this change will allow you to dynamically discover the
policy_version based on the click framework that is installed on the
system and you shouldn't have to do anything special when 14.10, 15.04,
15.10, etc are added.

IMPORTANT: click-apparmor does not currently use libclick but it is
planned to do so this cycle. When it does use libclick, qtcreator may
need to run aa-clickquery in a chroot that contains the installed
framework, since libclick can only look at installed framework
definitions for the API click-apparmor will use.

** Affects: qtcreator-plugin-ubuntu (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
SDK bug tracking, which is subscribed to qtcreator-plugin-ubuntu in
Ubuntu.
https://bugs.launchpad.net/bugs/1293586

Title:
  qtcreator should use the click-apparmor query API to obtain the policy
  version

Status in “qtcreator-plugin-ubuntu” package in Ubuntu:
  New

Bug description:
  Currently qtcreator hard codes the apparmor policy_version in the
  security manifest to be 1.0. With the new 14.04 framework definitions,
  the policy_version should be 1.1 for 14.04 and 1.0 for 13.10. In order
  to prevent this mapping being stored in multiple places, click-
  apparmor 0.2 now provides a python API and a CLI tool for querying the
  profile version and you may query for the policy_version for the
  specified framework (https://wiki.ubuntu.com/Click/Frameworks). Eg:

  $ aa-clickquery --click-framework=<framework> -q policy_version

  Specific examples:
  $ aa-clickquery --click-framework=ubuntu-sdk-13.10 -q policy_version
  1.0

  Supported 14.04 frameworks as of ubuntu-touch-meta (1.115):
  $ aa-clickquery --click-framework=ubuntu-sdk-14.04-qml-dev1 -q policy_version
  1.1
  $ aa-clickquery --click-framework=ubuntu-sdk-14.04-papi-dev1 -q policy_version
  1.1
  $ aa-clickquery --click-framework=ubuntu-sdk-14.04-html-dev1 -q policy_version
  1.1

  Future 14.04 frameworks:
  $ aa-clickquery --click-framework=ubuntu-sdk-14.04-qml -q policy_version
  1.1
  $ aa-clickquery --click-framework=ubuntu-sdk-14.04-papi -q policy_version
  1.1
  $ aa-clickquery --click-framework=ubuntu-sdk-14.04-html -q policy_version
  1.1

  Ie, this change will allow you to dynamically discover the
  policy_version based on the click framework that is installed on the
  system and you shouldn't have to do anything special when 14.10,
  15.04, 15.10, etc are added.

  IMPORTANT: click-apparmor does not currently use libclick but it is
  planned to do so this cycle. When it does use libclick, qtcreator may
  need to run aa-clickquery in a chroot that contains the installed
  framework, since libclick can only look at installed framework
  definitions for the API click-apparmor will use.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qtcreator-plugin-ubuntu/+bug/1293586/+subscriptions


Follow ups

References