[apparmor] [PATCH] split parser build into "arch" "indep" and "check"

Kees Cook kees at ubuntu.com
Fri May 27 21:57:50 UTC 2011


On Fri, May 27, 2011 at 02:33:40PM -0700, Steve Beattie wrote:
> On Fri, May 27, 2011 at 02:19:11PM -0700, Kees Cook wrote:
> > In some cases, it is desirable to build the parser without building the
> > binary portions (Hurd). This patch splits up the build targets so this is
> > possible:
> > 
> > "main" becomes "arch"
> > 
> > "indep" is created and depends on "docs"
> > po building is moved from "main" to "indep"
> > 
> > "all" has "tests" removed (standard build practices are to "make" then
> > "make check" so I think "tests"/"check" should stay separate from "all").
> 
> On the one hand, I dislike this because I'm afraid people will skip
> running the parser tests before submitting patches to the parser. On
> the other hand, we've accumulated enough tests for the parser that it
> interferes with the compile/debug cycle to run all the tests and this
> will mitigate that (though you could work around it in its existing
> state by doing 'make apparmor_parser').

Yeah, I was on the fence a bit, but another goal I have is moving us closer
to an autoconf/automake world. In that situation, the tests will be
separate too, so this gets us the behavior change earlier so it'll
hopefully be less of a shock when we get all the way to autoconf/automake.

> I guess in the end, ACK from me, though you should purge the "not
> strictly necessary" comment from /README:
> 
> parser:
> $ cd parser
> $ make
> $ make tests    # not strictly necessary as they are run during the
>                 # build by default
> $ make install

Oh! Yes, good catch.

-Kees

-- 
Kees Cook
Ubuntu Security Team



More information about the AppArmor mailing list