Re: [Sugar-devel] [SLOBS] [IAEP] Long-term support for Sugar
On Tue, Sep 22, 2009 at 00:54, Peter Robinson pbrobin...@gmail.com wrote: On Mon, Sep 21, 2009 at 11:47 PM, Martin Dengler mar...@martindengler.com wrote: On Mon, Sep 21, 2009 at 05:15:31PM -0500, Yamandu Ploskonka wrote: Chris Ball wrote: Hi, TBH I'm not 100% sure on that as I'm not a PackageKit developer but I believe that is addressed by ConsoleKit and as its in use on Fedora and I'm pretty sure Ubuntu and others (and I'm pretty sure its an external dependency of gnome too) I'm sure that issue has been addressed. My understanding is that the developers consider it addressed by %post runs as root, and if you don't like it then don't install RPMs [from untrusted sources]. So, we need to find out what's up there. - Chris. Very good point you make. It gets complicated as the users - kids - have not been shown they get it regarding giving their full name, age and address and some even phone number, so it is unlikely they will deal safely with the nuances of untrusted sources. It would be sort of a shame that the first massive attack of malware on Linux platforms happened under our watch... The whole point of Rainbow is that what I think you're talking about isn't an issue, and it's encouraged that kids share Activities. Eliminating this sharing ability is one of the problems with the current rpm / PackageKit proposals AIUI. How is the sharing implemented currently? I don't see how its different to say installing an activity via the control panel as I don't believe it leaves the .xo lying about for easy sharing. Yes, the control panel puts the .xo in the journal, from where it gets installed. Regards, Tomeu There's nothing to say that the Package kit can't leave the rpm for the kid/child/student installed activity in a folder somewhere for them the share via the Chat application if the interface supports sending of files. And when the other kid/child/student receives the file Chat could even offer to install it automatically for them. You could even use it as a way of a teacher pushing out an activity through a shared chat activity to ensure all the class have a a new activity or even a URL to the activity on a school server where when they click on it it will install. I've never seen any of that be able to be done with the current .xo format except for the hack to the mime type in the browse activity. Peter ___ SLOBs mailing list sl...@lists.sugarlabs.org http://lists.sugarlabs.org/listinfo/slobs -- «Sugar Labs is anyone who participates in improving and using Sugar. What Sugar Labs does is determined by the participants.» - David Farning ___ Sugar-devel mailing list Sugar-devel@lists.sugarlabs.org http://lists.sugarlabs.org/listinfo/sugar-devel
Re: [Sugar-devel] [SLOBS] [IAEP] Long-term support for Sugar
On Tue, Sep 22, 2009 at 1:40 PM, Tomeu Vizoso to...@sugarlabs.org wrote: On Tue, Sep 22, 2009 at 00:54, Peter Robinson pbrobin...@gmail.com wrote: On Mon, Sep 21, 2009 at 11:47 PM, Martin Dengler mar...@martindengler.com wrote: On Mon, Sep 21, 2009 at 05:15:31PM -0500, Yamandu Ploskonka wrote: Chris Ball wrote: Hi, TBH I'm not 100% sure on that as I'm not a PackageKit developer but I believe that is addressed by ConsoleKit and as its in use on Fedora and I'm pretty sure Ubuntu and others (and I'm pretty sure its an external dependency of gnome too) I'm sure that issue has been addressed. My understanding is that the developers consider it addressed by %post runs as root, and if you don't like it then don't install RPMs [from untrusted sources]. So, we need to find out what's up there. - Chris. Very good point you make. It gets complicated as the users - kids - have not been shown they get it regarding giving their full name, age and address and some even phone number, so it is unlikely they will deal safely with the nuances of untrusted sources. It would be sort of a shame that the first massive attack of malware on Linux platforms happened under our watch... The whole point of Rainbow is that what I think you're talking about isn't an issue, and it's encouraged that kids share Activities. Eliminating this sharing ability is one of the problems with the current rpm / PackageKit proposals AIUI. How is the sharing implemented currently? I don't see how its different to say installing an activity via the control panel as I don't believe it leaves the .xo lying about for easy sharing. Yes, the control panel puts the .xo in the journal, from where it gets installed. Excellent so exactly the same could be done if package kit was used. Peter ___ Sugar-devel mailing list Sugar-devel@lists.sugarlabs.org http://lists.sugarlabs.org/listinfo/sugar-devel
