> -----Original Message-----
> From: José Bollo [mailto:jose.bo...@open.eurogiciel.org]
> Sent: Tuesday, December 09, 2014 7:50 AM
> To: Schaufler, Casey
> Cc: Rafał Krypa; d...@lists.tizen.org; crosswalk-dev@lists.crosswalk-
> project.org
> Subject: Re: [Dev] [Intent to implement] Crosswalk uses Dual process model
> on Tizen
> 
> Le mardi 09 décembre 2014 à 14:49 +0000, Schaufler, Casey a écrit :
> 
> (snip)
> 
> > The Cynara checks are going to have to be removed. I am curious as
> > to how the resources that were managed by the BP in the prior design
> > are going to be managed in the dual-process model.
> 
> Hi Casey,
> 
> That is an interesting question. How to remove cynara checks from BP?

I would use "dd" in vi.

> But there is also a very interesting question that I am seeing now:
> should any client of cynara be considered as privileged (that was my
> previous requirement) if this client is already constrained by smack
> isolation? I'm thinking that it is not possible but I can also
> understand that it could be the opposite.

I keep hearing scary notions about allowing 3rd party services to
be downloaded from an AppStore. There's no reason they couldn't
use Cynara to do access checks, even though the 3rd party service
isn't trusted by the platform.

> > > I am also skeptical on the fact that BP will run without privileges. But
> >
> > The BP can start with privilege, but will need to drop it before it goes
> > anywhere near application code. That is, until it invokes EP or GP or
> > forks off RP.  And of course, it can't make decisions about resource
> > access.
> >
> > > I am not expert and should trust developers of crosswalk.
> >
> > Trust should be based on understanding. If you don't understand
> > there is no reason you  should trust.
> 
> Right =D
> 
> But so why having 2 processes? One is enough.
> What is shared? BP+EP? Then how are managed hybrid apps?
> 
> Best regards
> José
> 
> 

_______________________________________________
Crosswalk-dev mailing list
Crosswalk-dev@lists.crosswalk-project.org
https://lists.crosswalk-project.org/mailman/listinfo/crosswalk-dev

Reply via email to