Hi all,

now, scripts can be signed. User keys can be used. But, there is a FreeMind key, which is by default trusted. I've placed the corresponding keystore into our sf directory at the following place:

[EMAIL PROTECTED] ScriptingKeystore]$ pwd
/home/groups/f/fr/freemind/htdocs/ScriptingKeystore
[EMAIL PROTECTED] ScriptingKeystore]$ dir -l
total 8
-rw-rw----  1 christianfoltin freemind    0 Apr 18 14:21 index.html
-rw-rw----  1 christianfoltin freemind 1293 Apr 18 14:23 keystore
-rw-rw----  1 christianfoltin freemind 1478 Apr 18 14:28 readme.txt

The readme.txt contains the password. This directory is not visible from outside ( ;-) ).

If there is a doubt about the security of this place, I'm open for other suggestions, and at this point, we can still change this key, until
it is released into a proper FreeMind version.

Best regards,

Chris

Dan Polansky schrieb:
Hi Chris,

I recommend that the security manager becomes a part of 0.9.0. I have actually raised this issue many months ago, in an email that raised two issues, one of which you have solved at that time. The one that you solved was my request to ask users for confirmation before allowing running scripts embedded in mind maps.

Best regards,
Dan


On Fri, Mar 7, 2008 at 10:36 AM, Christian Foltin <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote:

    Hi Eric,

    the solution has advanced in the meantime. I still have to revise
    the actual limitations, but this is not a big problem.

    Regards, Chris
    -------- Original-Nachricht --------
    > Datum: Fri, 7 Mar 2008 09:27:22 +0100 (CET)
    > Von: "Eric Lavarde - FreeMind" <[EMAIL PROTECTED]
    <mailto:[EMAIL PROTECTED]>>
    > An: [email protected]
    <mailto:[email protected]>
    > Betreff: Re: [Freemind-developer] Security Manager

    > Hi,
    >
    > that would be great! Nevertheless, looking at releasing 0.9.0 in
    a timely
    > fashion, it could possibly wait for 0.9.1...
    >
    > Eric
    >
    > Christian Foltin said:
    > > Dear Eric,
    > >
    > > I'll have a try to install a special security manager for the
    groovy
    > > plugin. Thus it is possible to restrict network and file access.
    > >
    > > Regards, Chris
    > > --
    > > Psst! Geheimtipp: Online Games kostenlos spielen bei den GMX
    Free Games!
    > > http://games.entertainment.web.de/de/entertainment/games/free
    > >
    > >
    >
    -------------------------------------------------------------------------
    > > This SF.net email is sponsored by: Microsoft
    > > Defy all challenges. Microsoft(R) Visual Studio 2008.
    > > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
    > > _______________________________________________
    > > Freemind-developer mailing list
    > > [email protected]
    <mailto:[email protected]>
    > > https://lists.sourceforge.net/lists/listinfo/freemind-developer
    > >
    > >
    >
    >
    > --
    > Eric de France, d'Allemagne et de Navarre
    >
    >
    -------------------------------------------------------------------------
    > This SF.net email is sponsored by: Microsoft
    > Defy all challenges. Microsoft(R) Visual Studio 2008.
    > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
    > _______________________________________________
    > Freemind-developer mailing list
    > [email protected]
    <mailto:[email protected]>
    > https://lists.sourceforge.net/lists/listinfo/freemind-developer

    --
    Psst! Geheimtipp: Online Games kostenlos spielen bei den GMX Free
    Games!
    http://games.entertainment.web.de/de/entertainment/games/free

    -------------------------------------------------------------------------
    This SF.net email is sponsored by: Microsoft
    Defy all challenges. Microsoft(R) Visual Studio 2008.
    http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
    _______________________________________________
    Freemind-developer mailing list
    [email protected]
    <mailto:[email protected]>
    https://lists.sourceforge.net/lists/listinfo/freemind-developer


------------------------------------------------------------------------

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
------------------------------------------------------------------------

_______________________________________________
Freemind-developer mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/freemind-developer
-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Freemind-developer mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/freemind-developer

Reply via email to