[Elementary-dev-community] elementary's path forward for application containment and security.

2014-03-18 Thread Cameron Norman
Hello all, I recently have taken an interest in some of the containment and security features being developed for Ubuntu touch, as well as Lennart Poettering's plans for containment on GNOME. One of the recurring aspects that I see is a Content Hub (Ubuntu) or application Portals (GNOME)

Re: [Elementary-dev-community] elementary's path forward for application containment and security.

2014-03-18 Thread Daniel Foré
Hey Cameron, I've been thinking about app containment too and I know I feel better on iOS that apps have to ask my permission to use things like location services. I think it would be worth looking at the solutions from both Canonical and GNOME first before we go building our own solution. 

Re: [Elementary-dev-community] elementary's path forward for application containment and security.

2014-03-18 Thread Cameron Norman
Yes, I can definitely see how much this would expand Contractor's scope, but it is possible that we could engage with the GNOME community to work on Contractor, since it does not seem like Lennart Poettering has begun the portals work. Content Hub seems to be already developed, but its API is

Re: [Elementary-dev-community] elementary's path forward for application containment and security.

2014-03-18 Thread Akshay Shekher
The earlier implementation IIRC worked in the following way. App - contractor [give me a list if programs that handle file type x] - [program a b ... ..] App asks the user to select one or selects one itself and App - Contractor [program Id x, for file/uri y] - [command string] App executes

Re: [Elementary-dev-community] elementary's path forward for application containment and security.

2014-03-18 Thread Cameron Norman
I guess what I do not understand is how the application gets the data by executing the command. What I see in that implementation is simply a return of a command to run with an existing file as an argument, instead of a way to retrieve a new file. The difference is that the former says I have

Re: [Elementary-dev-community] elementary's path forward for application containment and security.

2014-03-18 Thread Akshay Shekher
Contractor only implements the first one it does not fetch data for an app, it just enables the application to send its data to another application for further work. The latter would require more work on the 3rd party application while the current setup just needs a contract file and everything