[Sugar-devel] [SLOBS] [IAEP] Long-term support for Sugar

[Peter Robinson]

On Tue, Sep 22, 2009 at 1:40 PM, Tomeu Vizoso <tomeu at sugarlabs.org> wrote:
> On Tue, Sep 22, 2009 at 00:54, Peter Robinson <pbrobinson at gmail.com> wrote:
>> On Mon, Sep 21, 2009 at 11:47 PM, Martin Dengler
>> <martin at martindengler.com> wrote:
>>> On Mon, Sep 21, 2009 at 05:15:31PM -0500, Yamandu Ploskonka wrote:
>>>> Chris Ball wrote:
>>>> > Hi,
>>>> >
>>>> >    > TBH I'm not 100% sure on that as I'm not a PackageKit developer
>>>> >    > but I believe that is addressed by ConsoleKit and as its in use
>>>> >    > on Fedora and I'm pretty sure Ubuntu and others (and I'm pretty
>>>> >    > sure its an external dependency of gnome too) I'm sure that issue
>>>> >    > has been addressed.
>>>> >
>>>> > My understanding is that the developers consider it addressed by
>>>> > "%post runs as root, and if you don't like it then don't install RPMs
>>>> > [from untrusted sources]".  So, we need to find out what's up there.
>>>> >
>>>> > - Chris.
>>>>
>>>> Very good point you make.  It gets complicated as the users - kids -
>>>> have not been shown they get it regarding giving their full name, age
>>>> and address and some even phone number, so it is unlikely they will deal
>>>> safely with the nuances of "untrusted sources".
>>>> It would be sort of a shame that the first massive attack of malware on
>>>> Linux platforms happened under our watch...
>>>
>>> The whole point of Rainbow is that what I think you're talking about
>>> isn't an issue, and it's encouraged that kids share Activities.
>>> Eliminating this sharing ability is one of the problems with the
>>> current rpm / PackageKit proposals AIUI.
>>
>> How is the sharing implemented currently? I don't see how its
>> different to say installing an activity via the control panel as I
>> don't believe it leaves the .xo lying about for easy sharing.
>
> Yes, the control panel puts the .xo in the journal, from where it gets
> installed.

Excellent so exactly the same could be done if package kit was used.

Peter