[Sugar-devel] [IAEP] [SLOBS] Long-term support for Sugar

[Martin Dengler]

On Mon, Sep 21, 2009 at 05:15:31PM -0500, Yamandu Ploskonka wrote:
> Chris Ball wrote:
> > Hi,
> >
> >    > TBH I'm not 100% sure on that as I'm not a PackageKit developer
> >    > but I believe that is addressed by ConsoleKit and as its in use
> >    > on Fedora and I'm pretty sure Ubuntu and others (and I'm pretty
> >    > sure its an external dependency of gnome too) I'm sure that issue
> >    > has been addressed.
> >
> > My understanding is that the developers consider it addressed by
> > "%post runs as root, and if you don't like it then don't install RPMs
> > [from untrusted sources]".  So, we need to find out what's up there.
> >
> > - Chris.
>
> Very good point you make.  It gets complicated as the users - kids - 
> have not been shown they get it regarding giving their full name, age 
> and address and some even phone number, so it is unlikely they will deal 
> safely with the nuances of "untrusted sources".
> It would be sort of a shame that the first massive attack of malware on 
> Linux platforms happened under our watch...

The whole point of Rainbow is that what I think you're talking about
isn't an issue, and it's encouraged that kids share Activities.
Eliminating this sharing ability is one of the problems with the
current rpm / PackageKit proposals AIUI.

> Yama

Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.sugarlabs.org/archive/sugar-devel/attachments/20090921/76644d93/attachment-0001.pgp