----- "Viktor Kojouharov" <vkojouha...@gmail.com> ha scritto:
> On Mon, 2008-12-15 at 22:41 +0100, Dave Andreoli wrote: > > ----- "Gustavo Sverzut Barbieri" <barbi...@profusion.mobi> ha > scritto: > > > > > On Mon, Dec 15, 2008 at 4:51 PM, Dave Andreoli > > > <d...@gurumeditation.it> wrote: > > > > > > > > ----- "Cedric BAIL" <cedric.b...@free.fr> ha scritto: > > > > > > > >> On Mon, Dec 15, 2008 at 6:31 PM, Viktor Kojouharov > > > >> <vkojouha...@gmail.com> wrote: > > > >> > On Mon, 2008-12-15 at 16:32 +0100, luchezar Petkov wrote: > > > >> >> -----BEGIN PGP SIGNED MESSAGE----- > > > >> >> Hash: SHA1 > > > >> >> > > > >> >> On 12/15/08 3:17 PM, Matteo wrote: > > > >> >> > Hi, > > > >> >> > Do you think that in the future plans could be useful a > > > "button" > > > >> for > > > >> >> > automatic select and download (from the net) third-party > > > modules > > > >> that e17 > > > >> >> > could have? > > > >> >> > > > > >> >> > I mean: > > > >> >> > I saw that Massimiliano has integrated the wallpaper > > > selection > > > >> with an > > > >> >> > useful button for download the wallpaper from the e17 > website > > > >> directly from > > > >> >> > the wallpaper selection interface, so I'm asking you: do > you > > > >> think that > > > >> >> > could be useful to made the same thing to modules > selection > > > >> form? > > > >> >> > > > > >> >> > It could be useful to have a central widget repository to > > > >> download from, > > > >> >> > every user interested in making widget could subscribe > and > > > upload > > > >> his work, > > > >> >> > and every e17 user could benefit from this. > > > >> >> > > > > >> >> > Regards > > > >> >> > > > > >> >> > > > >> >> I think this is a good idea. Firefox 3.x has a great > > > integration > > > >> with > > > >> >> AMO (addons.mozilla.org). See Tools > Add-ons > Get Add-ons. > It > > > >> loads > > > >> >> basic info and a screenshot of some popular stuff and the > user > > > can > > > >> >> download and install the thing he/she wants with just one > > > click. > > > >> >> Similar thing could be done in E and Exchange. > > > >> > > > > >> > firefox addons are are js/html/css lumped together. modules > on > > > the > > > >> other > > > >> > hand are linked libraries, so it'd be very hard to provide > > > compiled > > > >> > version for every possible combination of systems out there. > > > >> > > > >> Perhaps it's possible to do something with pure edje modules. > I > > > >> remember I saw someone proposing this already. > > > >> > > > >> But doing this kind of work would require giving much more > > > >> information > > > >> to edje and the ability to manipulate it (Information from E > > > itself, > > > >> but also from other apps or from the net). And if we go that > route > > > we > > > >> need to do it safely and efficiently. I remember reading > something > > > >> regarding this kind of issue but for KDE Plasma, where they > did > > > >> introduce the idea of information producer and information > > > consumer. > > > >> Or something like that. Anyway, it's a huge amount of work to > do. > > > > > > > > This is exacly what I have done with edgar > > > > (http://code.google.com/p/e17mods/wiki/Edgar) > > > > > > > > It is a module that load edje file as modules, this edje files > > > > that i call 'gadgets' can be downloaded from the net without > > > problem > > > > and can be very powerfull. > > > > > > > > You can see some 'gadgets' I'm workin on at > > > > http://code.google.com/p/e17mods/wiki/Gadgets > > > > > > > > Edgar is (and will be) more powerfull than simple edje file > > > > as you can send signal from embryo to edgar for doing advanced > > > stuff > > > > (like save config values and execute shell command). > > > > > > > > Give a look at Edgar as probably we need to discuss some > security > > > issue ;) > > > > > > yes, executing shell from scripts is too bad.... tooooo bad! > > > > Ok, quite agree with you, but... If a module can exec shell why > > a gadget should not? A module can waste your system and a gadget > not? > > it looks discriminating :) > > > Theoretically, you'd have to compile the module first, which implies > that you could've read the source. With a gadget that's downloaded > from > the net (and updated automatically), I could sneak a command via an > update to wipe the home directory. You can read the source of a downloaded edje file exacly as for module. Theorically I can wipe your home dir with my next Places module (just an example) update ;) ...or you read the source for all the software you install/update? Then the only solution I see is to not allow automatic download/update for modules/gadgets...but is still not secure as you can do it manually. > > > > > > > if we had lua already, I'd say we should execute sandboxed lua > > > scripts, since we do not (and possible will not in near future) > we > > > should figure out which kind of commands we'd need and expose them > in > > > embryo, just for edgard modules (I suppose this is possible). > > > > IMO sandboxed script is not as usefull, as they can't interact with > > your system > They can interact as much as you let them. Whitelisting is always > better > than blacklisting. > > > > > > > > > maybe be flexible enough to do things like store db (sqlite3) > values > > > for game scores or bare minimum preferences and download urls + > > > regular expressions to parse them, maybe some dbus calls. it's > hard > > > to > > > say without trying to do some modules and coming with > requirements. > > > > With Edgar you can store simple key->value string, managed > internally > > as an hash. I don't think we need the extra power of a db to store > > such simple informations. > > The postit gadget use this edgar function to store the text of the > note. > > > That would be unpleasant for really large quantity of data. I think a module/gadget will never have really large quantity of data to overfill an hash table stored in eet. Or at least we don't have any module atm with such requirements. > > > > > > > > > KDE guys have this for plasma as "data providers", they have a > bunch > > > of available providers like some to report system status from > /sys, > > > including cpu, memory and cpu (they use their own abstraction > called > > > "solid"). > > > > Don't know well how KDE works but seems the old approach also used > in > > gdesklets, superkaramba etc. > > As in the first replay: why a 'data provider' can do nasty things > and > > the 'view' not? > > > > > > > > > > splitting our existing modules in providers and views could be > > > useful, > > > but it's a huge work and I don't know someone is willing to take > > > that. > > > > Don't count on me ;) > > > > > Maybe it would be easier to just write a hal bridge to embryo and > use > > > generic calls like get_hal_int(property_name), > > > get_hal_float(property_name)... > > > > and hal_exec_shell() ??? > > > > > > > > -- > > > Gustavo Sverzut Barbieri > > > http://profusion.mobi embedded systems > > > -------------------------------------- > > > MSN: barbi...@gmail.com > > > Skype: gsbarbieri > > > Mobile: +55 (19) 9225-2202 ------------------------------------------------------------------------------ SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future of the web can't happen without you. Join us at MIX09 to help pave the way to the Next Web now. Learn more and register at http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/ _______________________________________________ enlightenment-devel mailing list enlightenment-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/enlightenment-devel
