Feature #10120

Consider shipping a pre-compiled AppArmor policy

Added by intrigeri 2015-08-28 09:47:51 . Updated 2018-11-19 09:21:38 .

Status:
Duplicate
Priority:
Low
Assignee:
Category:
Target version:
Start date:
2015-08-28
Due date:
% Done:

0%

Feature Branch:
Type of work:
Research
Blueprint:

https://tails.boum.org/contribute/design/application_isolation/

Starter:
Affected tool:
Deliverable for:

Description

On current Tails the AppArmor policy loading slows down boot sustantially, and pre-compiling it would make things a lot faster.

See the blueprint for implementation notes and potential issues, e.g. with the “additional software packages” feature, or possibly a too tight coupling between the kernel run on build systems and the one shipped in the ISO, that need to be investigated. It may be that the doc is lacking in this respect and should be improved (or at least, bugs reported against it).

Subtasks

Related issues

Is duplicate of Tails - Feature #16138: Ship a pre-compiled AppArmor binary cache Resolved 2018-11-19

History

#1 Updated by intrigeri 2016-07-07 05:41:21

  • Description updated

(Dropped details about a situation that won’t happen since https://bugs.launchpad.net/apparmor/+bug/1488179 was fixed.)

#2 Updated by intrigeri 2018-11-19 09:20:41

  • is duplicate of Feature #16138: Ship a pre-compiled AppArmor binary cache added

#3 Updated by intrigeri 2018-11-19 09:21:38

  • Status changed from Confirmed to Duplicate
  • Assignee deleted (intrigeri)

Well, well, of course I had filed this already. The duplicate I’ve just filed is much more up-to-date so let’s deprecate this one.