Re: Terminals

2008-08-02 Thread Albert Cahalan
Look, there is no reason to care about hashes. What is the fear here, that the jffs2 filesystem will fail? We have pathnames. Permissions are granted by the user. The only exception is when the OS is initially installed, or when the whole OS is upgraded. Permissions are tied to an inode. Since th

Re: Terminals

2008-08-02 Thread Jameson "Chema" Quinn
> As above, hashes can be computed on the unpacked activity bundles. No > modification to the bundle format is necessary; moreover, why would you > ever rely on the correctness of a manifest supplied by the bundle > itself? > The current manifest format hashes everything in a directory. That inclu

Re: Terminals

2008-08-02 Thread Michael Stone
On Sat, Aug 02, 2008 at 03:03:24PM -0600, Jameson Chema Quinn wrote: >> >> As you can see, the present security difficulties stem from the lack of >> effort spent on recording user intentions about what permissions should >> be applied to what activities. Signatures do absolutely nothing to >> addr

Re: Terminals

2008-08-02 Thread Jameson "Chema" Quinn
> > As you can see, the present security difficulties stem from the lack of > effort spent on recording user intentions about what permissions should > be applied to what activities. Signatures do absolutely nothing to > address this problem -- they only permit an as-yet undesigned system > interpr

Re: Terminals

2008-08-02 Thread Michael Stone
On Fri, Aug 01, 2008 at 07:32:11PM -0400, Benjamin M. Schwartz wrote: >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA1 > >Eben Eliason wrote: >| Is it possible that we could >| simply have a P_ROOT permission as well, or does that blow Bitfrost out of >| the water? 1. According to my reading of

Re: Terminals

2008-08-01 Thread Gary C Martin
On 1 Aug 2008, at 14:54, Walter Bender wrote: > The keyboard issue is simply a matter of having the correct console > keyboard map files installed. The one for Spanish is attached. Not > sure what the current plan is for inclusion of these files (Dennis?). > It should be installed in /lib/kbd/keym

Re: Terminals

2008-08-01 Thread Benjamin M. Schwartz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Eben Eliason wrote: | Is it possible that we could | simply have a P_ROOT permission as well, or does that blow Bitfrost out of | the water? It's called P_SF_RUN or P_SF_CORE, depending on what you mean by root. In other words, yes, this was planned.

Re: Terminals

2008-08-01 Thread david
On Fri, 1 Aug 2008, Walter Bender wrote: > Why does it matter that you cannot adjust the screen brightness from > the console using the special keys? You can adjust it from Sugar > without root access. so you switch from sugar to the console, something changes (including noticing that the font n

Re: Terminals

2008-08-01 Thread Jameson "Chema" Quinn
2008/8/1 Eben Eliason <[EMAIL PROTECTED]> > > > On Fri, Aug 1, 2008 at 4:07 PM, John Gilmore <[EMAIL PROTECTED]> wrote: > >> > Why does it matter that you cannot adjust the screen brightness from >> > the console using the special keys? You can adjust it from Sugar >> > without root access. The id

Re: Terminals

2008-08-01 Thread Eben Eliason
On Fri, Aug 1, 2008 at 4:07 PM, John Gilmore <[EMAIL PROTECTED]> wrote: > > Why does it matter that you cannot adjust the screen brightness from > > the console using the special keys? You can adjust it from Sugar > > without root access. The idea was to understand what limits we'd face > > using

Re: Terminals

2008-08-01 Thread John Gilmore
> Why does it matter that you cannot adjust the screen brightness from > the console using the special keys? You can adjust it from Sugar > without root access. The idea was to understand what limits we'd face > using the console for root access instead of a special terminal > activity. What are th

Re: Terminals

2008-08-01 Thread Benjamin M. Schwartz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Walter Bender wrote: | What are the Sugar/X Window actions that require root | access? This discussion is becoming a little confusing. The problem is not just "root" access. There are three accounts in play here: root, olpc, and 10005 (an arbitrary

Re: Terminals

2008-08-01 Thread Walter Bender
Why does it matter that you cannot adjust the screen brightness from the console using the special keys? You can adjust it from Sugar without root access. The idea was to understand what limits we'd face using the console for root access instead of a special terminal activity. What are the Sugar/X

Re: Terminals

2008-08-01 Thread pgf
erik wrote: > On Fri, Aug 01, 2008 at 11:03:39AM -0700, [EMAIL PROTECTED] wrote: > > numerous 'special keys' don't work at the console, including adjusting the > > screen brightness. > > To get this to work we would have to push olpc-specific drivers into the > kernel, correct? not necessa

Re: Terminals

2008-08-01 Thread Erik Garrison
On Fri, Aug 01, 2008 at 11:03:39AM -0700, [EMAIL PROTECTED] wrote: > numerous 'special keys' don't work at the console, including adjusting the > screen brightness. To get this to work we would have to push olpc-specific drivers into the kernel, correct? Erik __

Re: Terminals

2008-08-01 Thread david
On Fri, 1 Aug 2008, Gary C Martin wrote: > On 1 Aug 2008, at 03:25, Walter Bender wrote: > >> Curious as to what occasions need root access within X Windows? Maybe >> the console is enough? >> >> -walter > > I don't think I've used the console in months, nice to know it's there > in an emergency,

Re: Terminals

2008-08-01 Thread Martin Dengler
On Fri, Aug 01, 2008 at 12:08:25PM -0400, Michael Stone wrote: > On Fri, Aug 01, 2008 at 02:45:38PM +0100, Gary C Martin wrote: > > 2) Often the olpc related scripts I'd be trying to use would have some > > hooks into X, and other environment variables. Without a lot of env > > hacking/guessing

Re: Terminals

2008-08-01 Thread Michael Stone
On Fri, Aug 01, 2008 at 02:45:38PM +0100, Gary C Martin wrote: > On 1 Aug 2008, at 03:25, Walter Bender wrote: > >> Curious as to what occasions need root access within X Windows? Maybe >> the console is enough? That would work nicely for me, though it will work much less well for people who desir

Re: Terminals

2008-08-01 Thread Walter Bender
The keyboard issue is simply a matter of having the correct console keyboard map files installed. The one for Spanish is attached. Not sure what the current plan is for inclusion of these files (Dennis?). It should be installed in /lib/kbd/keymaps/i386/qwerty Regarding your second point, this is r

Re: Terminals

2008-08-01 Thread Gary C Martin
On 1 Aug 2008, at 03:25, Walter Bender wrote: > Curious as to what occasions need root access within X Windows? Maybe > the console is enough? > > -walter I don't think I've used the console in months, nice to know it's there in an emergency, but it was problematic to use for normal admin tasks

Re: Terminals

2008-08-01 Thread Bert Freudenberg
On 01.08.2008, at 14:43, James Cameron wrote: > On Fri, Aug 01, 2008 at 11:23:49AM +0200, Bert Freudenberg wrote: >> http://dev.laptop.org/~bert/whiteonblack.tar.gz > > +1 > > Works for me. But. > > Odd that it is slower than an xterm for displaying a "ps ax" ... > 0.517s > on 703 in the xterm

Re: Terminals

2008-08-01 Thread James Cameron
On Fri, Aug 01, 2008 at 11:23:49AM +0200, Bert Freudenberg wrote: > http://dev.laptop.org/~bert/whiteonblack.tar.gz +1 Works for me. But. Odd that it is slower than an xterm for displaying a "ps ax" ... 0.517s on 703 in the xterm, 3.068s in the text console ... why is it six times slower? (The

Re: Terminals

2008-08-01 Thread Bert Freudenberg
On 01.08.2008, at 04:29, [EMAIL PROTECTED] wrote: > On Thu, 31 Jul 2008, Walter Bender wrote: > >> Maybe the console is enough? > > if the console font has been changed to something more readable it > can be > used. Still wondering why Albert's font has not been adopted. Every time I olpc-upd

Re: Terminals

2008-07-31 Thread Albert Cahalan
Michael Stone writes: > One of our present security difficulties is that the Terminal activity > is not isolated. It is de-isolated so that it can serve the dual role of > root terminal and 'general exploration' terminal. Perhaps reviving the > Quake Terminal for the root-terminal role and isolati

Re: Terminals

2008-07-31 Thread Martin Dengler
On Thu, Jul 31, 2008 at 11:08:17PM -0400, [EMAIL PROTECTED] wrote: > michael wrote: > > One of our present security difficulties is that the Terminal activity > > is not isolated. It is de-isolated so that it can serve the dual role of > > root terminal and 'general exploration' terminal. Perhap

Re: Terminals

2008-07-31 Thread pgf
michael wrote: > One of our present security difficulties is that the Terminal activity > is not isolated. It is de-isolated so that it can serve the dual role of > root terminal and 'general exploration' terminal. Perhaps reviving the > Quake Terminal for the root-terminal role and isolating t

Re: Terminals

2008-07-31 Thread Jameson "Chema" Quinn
Note that I am currently working on a (somewhat large) patch which will not turn off isolation for anything outside share/... (that is, the activities in ~/Activities will all be isolated). This will close the gigantic security hole where anything named "Terminal" or "Journal" was not isolated. ___

Re: Terminals

2008-07-31 Thread david
On Thu, 31 Jul 2008, Walter Bender wrote: > Curious as to what occasions need root access within X Windows? Maybe > the console is enough? if the console font has been changed to something more readable it can be used. there end up being a surprising number of things where advanced users end u

Re: Terminals

2008-07-31 Thread Walter Bender
Curious as to what occasions need root access within X Windows? Maybe the console is enough? -walter On Thu, Jul 31, 2008 at 9:38 PM, Michael Stone <[EMAIL PROTECTED]> wrote: > One of our present security difficulties is that the Terminal activity > is not isolated. It is de-isolated so that it c

Terminals

2008-07-31 Thread Michael Stone
One of our present security difficulties is that the Terminal activity is not isolated. It is de-isolated so that it can serve the dual role of root terminal and 'general exploration' terminal. Perhaps reviving the Quake Terminal for the root-terminal role and isolating the Terminal activity proper