[Sugar-devel] [IAEP] Long-term support for Sugar

[C. Scott Ananian]

Yes, a PackageKit backend that handles .xo files could be written.  I
believe I've suggested this before.
  --Scott

On Tuesday, September 22, 2009, Peter Robinson <pbrobinson at gmail.com> wrote:
> On Tue, Sep 22, 2009 at 1:40 PM, Tomeu Vizoso <tomeu at sugarlabs.org> wrote:
>> On Tue, Sep 22, 2009 at 00:54, Peter Robinson <pbrobinson at gmail.com> wrote:
>>> On Mon, Sep 21, 2009 at 11:47 PM, Martin Dengler
>>> <martin at martindengler.com> wrote:
>>>> On Mon, Sep 21, 2009 at 05:15:31PM -0500, Yamandu Ploskonka wrote:
>>>>> Chris Ball wrote:
>>>>> > Hi,
>>>>> >
>>>>> >    > TBH I'm not 100% sure on that as I'm not a PackageKit developer
>>>>> >    > but I believe that is addressed by ConsoleKit and as its in use
>>>>> >    > on Fedora and I'm pretty sure Ubuntu and others (and I'm pretty
>>>>> >    > sure its an external dependency of gnome too) I'm sure that issue
>>>>> >    > has been addressed.
>>>>> >
>>>>> > My understanding is that the developers consider it addressed by
>>>>> > "%post runs as root, and if you don't like it then don't install RPMs
>>>>> > [from untrusted sources]".  So, we need to find out what's up there.
>>>>> >
>>>>> > - Chris.
>>>>>
>>>>> Very good point you make.  It gets complicated as the users - kids -
>>>>> have not been shown they get it regarding giving their full name, age
>>>>> and address and some even phone number, so it is unlikely they will deal
>>>>> safely with the nuances of "untrusted sources".
>>>>> It would be sort of a shame that the first massive attack of malware on
>>>>> Linux platforms happened under our watch...
>>>>
>>>> The whole point of Rainbow is that what I think you're talking about
>>>> isn't an issue, and it's encouraged that kids share Activities.
>>>> Eliminating this sharing ability is one of the problems with the
>>>> current rpm / PackageKit proposals AIUI.
>>>
>>> How is the sharing implemented currently? I don't see how its
>>> different to say installing an activity via the control panel as I
>>> don't believe it leaves the .xo lying about for easy sharing.
>>
>> Yes, the control panel puts the .xo in the journal, from where it gets
>> installed.
>
> Excellent so exactly the same could be done if package kit was used.
>
> Peter
> _______________________________________________
> Sugar-devel mailing list
> Sugar-devel at lists.sugarlabs.org
> http://lists.sugarlabs.org/listinfo/sugar-devel
>

-- 
                         ( http://cscott.net/ )