<div class="gmail_quote">On Mon, Mar 9, 2009 at 7:05 PM, Michael Stone <span dir="ltr"><<a href="mailto:michael@laptop.org">michael@laptop.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <div class="im"> <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> as in there are no bindings for launching a rainbow'd application<br> </blockquote> </div> What is a "binding for launching a rainbow'd (sic. isolated) application"?<div class="im"></div></blockquote><div class="im"><br>How do I install an application that is not a sugar bundle and request A) that I be isolated and B) that I be given P_FOO and P_BAR?<br> <br>Will drag-and-drop be considered a "opening action", since non-sugar environments are not full-screen-is-one-window?<br> <br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <div class="im"> <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> and most programs will be incompatible with it. (and will need source<br> changes)<br> </blockquote> <br></div> Evidence, please?</blockquote><div><br>By that I mean if you decided to launch, say OO.o, with Rainbow enabled it would most likely fail to work properly without source changes. (at least from my cursory reading of bitfrost.txt)<br> <br>See also <a href="http://dev.laptop.org/git?p=security;a=blob;f=bitfrost.txt#l902">http://dev.laptop.org/git?p=security;a=blob;f=bitfrost.txt#l902</a> , many common desktop apps are "rare exceptions".<br><br> How do we handle file saving when we lack a journal? (what about temporary backup files that need to persist in between runs, etc)<br><br>Also, the mutual exclusivity of P_DOCUMENT_RO and P_NET make apps like F-Spot require custom exceptions. Possible solutions exist of course, such as treating all distro packages as "signed", and therefor trusted to bypass these exceptions. <br> <br>By the way, doesn't rainbow require X server patches to function, or is access control turned off? (as in how do the isolated apps write to X?)<br></div></div><br>-- <br>Luke Faraone<br><a href="http://luke.faraone.cc">http://luke.faraone.cc</a><br>