[Sugar-devel] RAM DoS

[Sascha Silbe]

On Mon, Mar 09, 2009 at 06:35:59PM -0400, Luke Faraone wrote:

>> IMO Rainbow (the current implementation of process/activity 
>> isolation)
>> should be integrated into Sugar and made mandatory. At the very least 
>> it
>> should be optional, though. I.e. just installing Rainbow should 
>> suffice to
>> make your system more reliable, no Sugar-specific configuration 
>> required.
> That's the problem: Rainbow is not currently compatible with GNOME, as 
> in
> there are no bindings for launching a rainbow'd application.
Sorry, but I fail to see the connection. Care to enlighten me?

> There's nothing to stop you from running it, it just won't isolate 
> non-sugar-activities magically by default,
Gnome would need to add Rainbow support to benefit from it, yes. Given 
my past experience with Gnome maintainers and developers I doubt they're 
going to do it, but let's hope. :)

> and most programs will be incompatible with it. (and will need source 
> changes)
Depending on your usage of Rainbow. Haven't try it yet, but I'd guess 
that a less-than-hardcore Rainbow setup (e.g. provide read-only access 
to the entire /usr tree) would allow most applications to run unaltered, 
though potentially less integrated with the rest of the (desktop) system 
(because config files wouldn't be shared among applications).

CU Sascha

-- 
http://sascha.silbe.org/
http://www.infra-silbe.de/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 489 bytes
Desc: Digital signature
Url : http://lists.sugarlabs.org/archive/sugar-devel/attachments/20090310/cca6e739/attachment.pgp