bigon · HackerTrans

anno scorsodiscuss

In Belgium we have "tax on web" for more than 20 years and since a few years 90% of the things pre-filled for simple situations (mainly people without kids)

bigon

anno scorsodiscuss

Wait, the USA/IRS is not providing a free platform for individuals to fill their tax?

bigon

8 anni fadiscuss

Isn't the the license used for OEM that prevents Debian to upload the update? https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906158

bigon

8 anni fadiscuss

What did you try to do with it that was so hard to do?

bigon

9 anni fadiscuss

That's actually not true at all...

  * https://packages.qa.debian.org/s/systemd.html
  * https://packages.qa.debian.org/u/upstart.html (it's gone from stretch that's true but still supported in jessie)
  * https://packages.qa.debian.org/o/openrc.html
  * https://packages.qa.debian.org/s/sysvinit.html

bigon

9 anni fadiscuss

And who will do all the QA to be able to support a core component of the system like that? Because that the cost of that freedom

bigon

9 anni fadiscuss

Did you open a bug?

bigon

9 anni fadiscuss

SELinux is made of 3 things

- The kernel doing the permissions check (called object manager) - The policy telling the kernel what is allowed or not - Some userspace tools and libraries to load and manipulate the policy and the state of SELinux

The kernel and the userspace tools are almost the same across all distributions (Well Fedora/RHEL are carrying some patches).

But for the policy it's a different story. RHEL/Fedora have a gigantic patch applied to the refpolicy (reference policy developed by the SELinux upstream).

The policy allowing docker to work has not been upstreamed so it's not that easy for other distributions to use it

bigon

9 anni fadiscuss

The problem is that the docker policy is RHEL/Fedora centric and is not upstreamed in the refpolicy AFAIK

bigon

9 anni fadiscuss

This one is (partially) for me I guess.

There is still some work needed for this to happen.

The SELinux support should be added in the debian-installer and the policy needs to be generic enough to support several (basic?) usecases.

The later is the difficult part, if the policy is not working for them, people will in most of the case just disable SELinux completely.

Having a list of well tested usecases (LAMP, DNS,...) that we could support would maybe be a good start.

Help is always welcome of course.

bigon

9 anni fadiscuss

Also don't forget SELinux https://github.com/SELinuxProject/ which is a project that comes from the NSA as well

bigon

9 anni fadiscuss

Did you look at apt-cacher-ng or the other similar tools?

bigon

9 anni fadiscuss

GNOME will more than probably be running in wayland as default in Buster

You can already try it in Stretch by selecting the proper option in GDM. I'm personally using wayland on both my desktop and (work) laptop for months

comments