Re: [E-devel] Proposal for modules automatic download

2008-12-15 Thread The Rasterman
On Mon, 15 Dec 2008 17:09:58 -0200 "Gustavo Sverzut Barbieri"
 babbled:

> > Give a look at Edgar as probably we need to discuss some security issue ;)
> 
> yes, executing shell from scripts is too bad to bad!

indeed. VERY BAD. modules are low-level things, compiled and thus they come
with the known ability to be "insecure" - ie can run stuff, modify and delete
files etc. a module like edgar that provided an api (lua for example) and with
k-s's suggestion of data providers etc. in a "organised safe way" would be
good. the problem is a lot of things might want arbitrary network io or disk io
access and this is a security problem when people just "download at a click of
a button". providing a sandbox where anything the module does can be limited to
"innocuous" actions is good. also something like lua is small and fast AND can
be sandboxed, and avoids needing a compile thus this will work. themes and
wallpapers work because they are platform-agnostic. they work everywhere edje
works. modules need compiling and imho probably will always be distributed as
system packages (.deb or .rpm or whatever) or compiled by people. providing a
module like edgar that acts as a stepping-stone to a "safe execution
environment" for stuff is the right thing. nb - edje itself should not do this.
it is a theme/ui abstraction layer. not a programming environment. what you'd
want is a lua script COMBINED with a edje file (the lua can be tagged into
the .edj file as an extra data key and run from there by an "edgar" module).

so.. the gates are open to do it. it's not on the e17 release todo - but its
orthogonal. it can be done any time as a module. my recommendation would be lua
- as it's targetted for use in edje sometime (in the nearish future) to
eventually replace embryo. lua is a damn good language for these small things.
the python people of the world of course will say python is the best thing (it
definitely is much larger and heavier than lua) but i think python fits a
completely different development realm - closer to the "writing a full app in
c/c++" realm, but for those not confident in c/c++ or requiring portability
from the start without compiling.

> if we had lua already, I'd say we should execute sandboxed lua
> scripts, since we do not (and possible will not in near future) we
> should figure out which kind of commands we'd need and expose them in
> embryo, just for edgard modules (I suppose this is possible).
> 
> maybe be flexible enough to do things like store db (sqlite3) values
> for game scores or bare minimum preferences  and download urls +
> regular expressions to parse them, maybe some dbus calls. it's hard to
> say without trying to do some modules and coming with requirements.
> 
> KDE guys have this for plasma as "data providers", they have a bunch
> of available providers like some to report system status from /sys,
> including cpu, memory and cpu (they use their own abstraction called
> "solid").
> 
> splitting our existing modules in providers and views could be useful,
> but it's a huge work and I don't know someone is willing to take that.
> Maybe it would be easier to just write a hal bridge to embryo and use
> generic calls like get_hal_int(property_name),
> get_hal_float(property_name)...
> 
> -- 
> Gustavo Sverzut Barbieri
> http://profusion.mobi embedded systems
> --
> MSN: barbi...@gmail.com
> Skype: gsbarbieri
> Mobile: +55 (19) 9225-2202
> 
> --
> SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
> The future of the web can't happen without you.  Join us at MIX09 to help
> pave the way to the Next Web now. Learn more and register at
> http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
> ___
> enlightenment-devel mailing list
> enlightenment-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/enlightenment-devel
> 


-- 
- Codito, ergo sum - "I code, therefore I am" --
The Rasterman (Carsten Haitzler)ras...@rasterman.com


--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] SUID bits for E17

2008-12-15 Thread The Rasterman
On Mon, 15 Dec 2008 16:12:02 -0200 "Gustavo Sverzut Barbieri"
 babbled:

> On Mon, Dec 15, 2008 at 3:26 PM, sda  wrote:
> > sda wrote:
> >> > another kind request to allow me make a proper build of
> >> > Enlightenment-DR17 Desktop Shell (Window Manager). i'm again advised
> >> > to
> >> > bother you by OBS:
> >> >
> >> > E17.i586: E: permissions-file-setuid-bit (Badness: 1)
> >> > /usr/bin/enlightenment_sys is packaged with setuid/setgid bits
> >> > (04555)
> >> > E17.i586: E: permissions-file-setuid-bit (Badness: 1)
> >> > /usr/lib/enlightenment/modules/cpufreq/linux-gnu-i686/freqset is
> >> > packaged with setuid/setgid bits (04555) Please remove the
> >> > setuid/setgid
> >> > bits or contact secur...@suse.de for review.
> >
> > We normally don't audit packages that are not meant to be included
> > in openSUSE. If you desperately need those setuid bits you may
> > suppress the error via rpmlintrc. However, read below why they are
> > not needed.
> >
> >> the SUID bit for 'enlightenment_sys' is required to allow user to
> >> shutdown or reboot PC (halt, hybernate or use any defined privileged
> >> action described in '/etc/enlightenment/sysactions.conf' file)
> >
> > There are D-Bus methods in both Hal and ConsoleKit for that. There
> > is no need to have an extra setuid program. If you want to
> > seamlessly integrate your program into openSUSE you should invoke
> > those existing methods instead (no extra privilege needed then).
> >
> >> > the second SUID points to the:
> >> > /usr/lib/enlightenment/modules/cpufreq/linux-gnu-i686/freqset
> >> >
> >> > and this is part of a 'cpufreq' module which allow Users to change
> >> > CPU
> >> > Power policy on the fly (according to the existing governors). this
> >> > is
> >> > very useful and nice tool, so it'd be great to add it as an
> >> > exception
> >> > (include into a kind of whitelist) for a checks. this module is
> >> > working
> >> > for years with Enlightenment-DR17 and Users are get used to have it.
> >
> > Same as above. Hal provides power management functions. There is
> > also a command line program 'powersave' that you can call.
> 
> I told you that :-)
> 
> then you just need to do the dbus messages and have an option in
> enlightenment's configure.ac --enable-hal-shutdown and
> --enable-hal-cpufreq
> 
> I'd vote for that, just don't have the time to do it myself.

bingo. no time. don't intend to work on it as what we have already works and
works across distributions and os's. this patch would simply make rpmlint quiet
and not actually improve anything. patches of course accepted (if they are
good) but this is really something we cant go spending time on :(

-- 
- Codito, ergo sum - "I code, therefore I am" --
The Rasterman (Carsten Haitzler)ras...@rasterman.com


--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] Proposal for modules automatic download

2008-12-15 Thread Dave Andreoli

- "Gustavo Sverzut Barbieri"  ha scritto:

> On Mon, Dec 15, 2008 at 4:51 PM, Dave Andreoli
>  wrote:
> >
> > - "Cedric BAIL"  ha scritto:
> >
> >> On Mon, Dec 15, 2008 at 6:31 PM, Viktor Kojouharov
> >>  wrote:
> >> > On Mon, 2008-12-15 at 16:32 +0100, luchezar Petkov wrote:
> >> >> -BEGIN PGP SIGNED MESSAGE-
> >> >> Hash: SHA1
> >> >>
> >> >> On 12/15/08 3:17 PM, Matteo wrote:
> >> >> > Hi,
> >> >> > Do you think that in the future plans could be useful a
> "button"
> >> for
> >> >> > automatic select and download (from the net) third-party
> modules
> >> that e17
> >> >> > could have?
> >> >> >
> >> >> > I mean:
> >> >> > I saw that Massimiliano has integrated the wallpaper
> selection
> >> with an
> >> >> > useful button for download the wallpaper from the e17 website
> >> directly from
> >> >> > the wallpaper selection interface, so I'm asking you: do you
> >> think that
> >> >> > could be useful to made the same thing to modules selection
> >> form?
> >> >> >
> >> >> > It could be useful to have a central widget repository to
> >> download from,
> >> >> > every user interested in making widget could subscribe and
> upload
> >> his work,
> >> >> > and every e17 user could benefit from this.
> >> >> >
> >> >> > Regards
> >> >> >
> >> >>
> >> >> I think this is a good idea. Firefox 3.x has a great
> integration
> >> with
> >> >> AMO (addons.mozilla.org). See Tools > Add-ons > Get Add-ons. It
> >> loads
> >> >> basic info and a screenshot of some popular stuff and the user
> can
> >> >> download and install the thing he/she wants with just one
> click.
> >> >> Similar thing could be done in E and Exchange.
> >> >
> >> > firefox addons are are js/html/css lumped together. modules on
> the
> >> other
> >> > hand are linked libraries, so it'd be very hard to provide
> compiled
> >> > version for every possible combination of systems out there.
> >>
> >> Perhaps it's possible to do something with pure edje modules. I
> >> remember I saw someone proposing this already.
> >>
> >> But doing this kind of work would require giving much more
> >> information
> >> to edje and the ability to manipulate it (Information from E
> itself,
> >> but also from other apps or from the net). And if we go that route
> we
> >> need to do it safely and efficiently. I remember reading something
> >> regarding this kind of issue but for KDE Plasma, where they did
> >> introduce the idea of information producer and information
> consumer.
> >> Or something like that. Anyway, it's a huge amount of work to do.
> >
> > This is exacly what I have done with edgar
> > (http://code.google.com/p/e17mods/wiki/Edgar)
> >
> > It is a module that load edje file as modules, this edje files
> > that i call 'gadgets' can be downloaded from the net without 
> problem
> > and can be very powerfull.
> >
> > You can see some 'gadgets' I'm workin on at
> > http://code.google.com/p/e17mods/wiki/Gadgets
> >
> > Edgar is (and will be) more powerfull than simple edje file
> > as you can send signal from embryo to edgar for doing advanced
> stuff
> > (like save config values and execute shell command).
> >
> > Give a look at Edgar as probably we need to discuss some security
> issue ;)
> 
> yes, executing shell from scripts is too bad to bad!

Ok, quite agree with you, but... If a module can exec shell why
a gadget should not? A module can waste your system and a gadget not?
it looks discriminating :)

> 
> if we had lua already, I'd say we should execute sandboxed lua
> scripts, since we do not (and possible will not in near future) we
> should figure out which kind of commands we'd need and expose them in
> embryo, just for edgard modules (I suppose this is possible).

IMO sandboxed script is not as usefull, as they can't interact with
your system

> 
> maybe be flexible enough to do things like store db (sqlite3) values
> for game scores or bare minimum preferences  and download urls +
> regular expressions to parse them, maybe some dbus calls. it's hard
> to
> say without trying to do some modules and coming with requirements.

With Edgar you can store simple key->value string, managed internally 
as an hash. I don't think we need the extra power of a db to store
such simple informations.
The postit gadget use this edgar function to store the text of the note.


> 
> KDE guys have this for plasma as "data providers", they have a bunch
> of available providers like some to report system status from /sys,
> including cpu, memory and cpu (they use their own abstraction called
> "solid").

Don't know well how KDE works but seems the old approach also used in
gdesklets, superkaramba etc.
As in the first replay: why a 'data provider' can do nasty things and 
the 'view' not?


> 
> splitting our existing modules in providers and views could be
> useful,
> but it's a huge work and I don't know someone is willing to take
> that.

Don't count on me ;)

> Maybe it would be easier to just write a hal bridge to embryo and use
> generic call

Re: [E-devel] Proposal for modules automatic download

2008-12-15 Thread Viktor Kojouharov
On Mon, 2008-12-15 at 17:09 -0200, Gustavo Sverzut Barbieri wrote:
> On Mon, Dec 15, 2008 at 4:51 PM, Dave Andreoli  wrote:
> >
> > - "Cedric BAIL"  ha scritto:
> >
> >> On Mon, Dec 15, 2008 at 6:31 PM, Viktor Kojouharov
> >>  wrote:
> >> > On Mon, 2008-12-15 at 16:32 +0100, luchezar Petkov wrote:
> >> >> -BEGIN PGP SIGNED MESSAGE-
> >> >> Hash: SHA1
> >> >>
> >> >> On 12/15/08 3:17 PM, Matteo wrote:
> >> >> > Hi,
> >> >> > Do you think that in the future plans could be useful a "button"
> >> for
> >> >> > automatic select and download (from the net) third-party modules
> >> that e17
> >> >> > could have?
> >> >> >
> >> >> > I mean:
> >> >> > I saw that Massimiliano has integrated the wallpaper selection
> >> with an
> >> >> > useful button for download the wallpaper from the e17 website
> >> directly from
> >> >> > the wallpaper selection interface, so I'm asking you: do you
> >> think that
> >> >> > could be useful to made the same thing to modules selection
> >> form?
> >> >> >
> >> >> > It could be useful to have a central widget repository to
> >> download from,
> >> >> > every user interested in making widget could subscribe and upload
> >> his work,
> >> >> > and every e17 user could benefit from this.
> >> >> >
> >> >> > Regards
> >> >> >
> >> >>
> >> >> I think this is a good idea. Firefox 3.x has a great integration
> >> with
> >> >> AMO (addons.mozilla.org). See Tools > Add-ons > Get Add-ons. It
> >> loads
> >> >> basic info and a screenshot of some popular stuff and the user can
> >> >> download and install the thing he/she wants with just one click.
> >> >> Similar thing could be done in E and Exchange.
> >> >
> >> > firefox addons are are js/html/css lumped together. modules on the
> >> other
> >> > hand are linked libraries, so it'd be very hard to provide compiled
> >> > version for every possible combination of systems out there.
> >>
> >> Perhaps it's possible to do something with pure edje modules. I
> >> remember I saw someone proposing this already.
> >>
> >> But doing this kind of work would require giving much more
> >> information
> >> to edje and the ability to manipulate it (Information from E itself,
> >> but also from other apps or from the net). And if we go that route we
> >> need to do it safely and efficiently. I remember reading something
> >> regarding this kind of issue but for KDE Plasma, where they did
> >> introduce the idea of information producer and information consumer.
> >> Or something like that. Anyway, it's a huge amount of work to do.
> >
> > This is exacly what I have done with edgar
> > (http://code.google.com/p/e17mods/wiki/Edgar)
> >
> > It is a module that load edje file as modules, this edje files
> > that i call 'gadgets' can be downloaded from the net without  problem
> > and can be very powerfull.
> >
> > You can see some 'gadgets' I'm workin on at
> > http://code.google.com/p/e17mods/wiki/Gadgets
> >
> > Edgar is (and will be) more powerfull than simple edje file
> > as you can send signal from embryo to edgar for doing advanced stuff
> > (like save config values and execute shell command).
> >
> > Give a look at Edgar as probably we need to discuss some security issue ;)
> 
> yes, executing shell from scripts is too bad to bad!
> 
> if we had lua already, I'd say we should execute sandboxed lua
> scripts, since we do not (and possible will not in near future) we
> should figure out which kind of commands we'd need and expose them in
> embryo, just for edgard modules (I suppose this is possible).
I don't think we should be spending any more time adding stuff to
embryo. There was a guy who is working on integrating lua, so edje+lua
might come out earlier than dnf. Then we should invest time to add more
features to it.
> 
> maybe be flexible enough to do things like store db (sqlite3) values
> for game scores or bare minimum preferences  and download urls +
> regular expressions to parse them, maybe some dbus calls. it's hard to
> say without trying to do some modules and coming with requirements.
> 
> KDE guys have this for plasma as "data providers", they have a bunch
> of available providers like some to report system status from /sys,
> including cpu, memory and cpu (they use their own abstraction called
> "solid").
> 
> splitting our existing modules in providers and views could be useful,
> but it's a huge work and I don't know someone is willing to take that.
> Maybe it would be easier to just write a hal bridge to embryo and use
> generic calls like get_hal_int(property_name),
> get_hal_float(property_name)...
> 


--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
en

Re: [E-devel] Proposal for modules automatic download

2008-12-15 Thread Dave Andreoli

- "Viktor Kojouharov"  ha scritto:

> On Mon, 2008-12-15 at 22:41 +0100, Dave Andreoli wrote:
> > - "Gustavo Sverzut Barbieri"  ha
> scritto:
> > 
> > > On Mon, Dec 15, 2008 at 4:51 PM, Dave Andreoli
> > >  wrote:
> > > >
> > > > - "Cedric BAIL"  ha scritto:
> > > >
> > > >> On Mon, Dec 15, 2008 at 6:31 PM, Viktor Kojouharov
> > > >>  wrote:
> > > >> > On Mon, 2008-12-15 at 16:32 +0100, luchezar Petkov wrote:
> > > >> >> -BEGIN PGP SIGNED MESSAGE-
> > > >> >> Hash: SHA1
> > > >> >>
> > > >> >> On 12/15/08 3:17 PM, Matteo wrote:
> > > >> >> > Hi,
> > > >> >> > Do you think that in the future plans could be useful a
> > > "button"
> > > >> for
> > > >> >> > automatic select and download (from the net) third-party
> > > modules
> > > >> that e17
> > > >> >> > could have?
> > > >> >> >
> > > >> >> > I mean:
> > > >> >> > I saw that Massimiliano has integrated the wallpaper
> > > selection
> > > >> with an
> > > >> >> > useful button for download the wallpaper from the e17
> website
> > > >> directly from
> > > >> >> > the wallpaper selection interface, so I'm asking you: do
> you
> > > >> think that
> > > >> >> > could be useful to made the same thing to modules
> selection
> > > >> form?
> > > >> >> >
> > > >> >> > It could be useful to have a central widget repository to
> > > >> download from,
> > > >> >> > every user interested in making widget could subscribe
> and
> > > upload
> > > >> his work,
> > > >> >> > and every e17 user could benefit from this.
> > > >> >> >
> > > >> >> > Regards
> > > >> >> >
> > > >> >>
> > > >> >> I think this is a good idea. Firefox 3.x has a great
> > > integration
> > > >> with
> > > >> >> AMO (addons.mozilla.org). See Tools > Add-ons > Get Add-ons.
> It
> > > >> loads
> > > >> >> basic info and a screenshot of some popular stuff and the
> user
> > > can
> > > >> >> download and install the thing he/she wants with just one
> > > click.
> > > >> >> Similar thing could be done in E and Exchange.
> > > >> >
> > > >> > firefox addons are are js/html/css lumped together. modules
> on
> > > the
> > > >> other
> > > >> > hand are linked libraries, so it'd be very hard to provide
> > > compiled
> > > >> > version for every possible combination of systems out there.
> > > >>
> > > >> Perhaps it's possible to do something with pure edje modules.
> I
> > > >> remember I saw someone proposing this already.
> > > >>
> > > >> But doing this kind of work would require giving much more
> > > >> information
> > > >> to edje and the ability to manipulate it (Information from E
> > > itself,
> > > >> but also from other apps or from the net). And if we go that
> route
> > > we
> > > >> need to do it safely and efficiently. I remember reading
> something
> > > >> regarding this kind of issue but for KDE Plasma, where they
> did
> > > >> introduce the idea of information producer and information
> > > consumer.
> > > >> Or something like that. Anyway, it's a huge amount of work to
> do.
> > > >
> > > > This is exacly what I have done with edgar
> > > > (http://code.google.com/p/e17mods/wiki/Edgar)
> > > >
> > > > It is a module that load edje file as modules, this edje files
> > > > that i call 'gadgets' can be downloaded from the net without 
> > > problem
> > > > and can be very powerfull.
> > > >
> > > > You can see some 'gadgets' I'm workin on at
> > > > http://code.google.com/p/e17mods/wiki/Gadgets
> > > >
> > > > Edgar is (and will be) more powerfull than simple edje file
> > > > as you can send signal from embryo to edgar for doing advanced
> > > stuff
> > > > (like save config values and execute shell command).
> > > >
> > > > Give a look at Edgar as probably we need to discuss some
> security
> > > issue ;)
> > > 
> > > yes, executing shell from scripts is too bad to bad!
> > 
> > Ok, quite agree with you, but... If a module can exec shell why
> > a gadget should not? A module can waste your system and a gadget
> not?
> > it looks discriminating :)
> > 
> Theoretically, you'd have to compile the module first, which implies
> that you could've read the source. With a gadget that's downloaded
> from
> the net (and updated automatically), I could sneak a command via an
> update to wipe the home directory.

You can read the source of a downloaded edje file exacly as for module.
Theorically I can wipe your home dir with my next Places module 
(just an example) update  ;)
...or you read the source for all the software you install/update?
Then the only solution I see is to not allow automatic download/update
for modules/gadgets...but is still not secure as you can do it manually.


> 
> > > 
> > > if we had lua already, I'd say we should execute sandboxed lua
> > > scripts, since we do not (and possible will not in near future)
> we
> > > should figure out which kind of commands we'd need and expose them
> in
> > > embryo, just for edgard modules (I suppose this is possible).
> > 
> > IMO sandboxed script is not as usefull, as they can't interact with
> > your sys

Re: [E-devel] Proposal for modules automatic download

2008-12-15 Thread Viktor Kojouharov
On Mon, 2008-12-15 at 22:41 +0100, Dave Andreoli wrote:
> - "Gustavo Sverzut Barbieri"  ha scritto:
> 
> > On Mon, Dec 15, 2008 at 4:51 PM, Dave Andreoli
> >  wrote:
> > >
> > > - "Cedric BAIL"  ha scritto:
> > >
> > >> On Mon, Dec 15, 2008 at 6:31 PM, Viktor Kojouharov
> > >>  wrote:
> > >> > On Mon, 2008-12-15 at 16:32 +0100, luchezar Petkov wrote:
> > >> >> -BEGIN PGP SIGNED MESSAGE-
> > >> >> Hash: SHA1
> > >> >>
> > >> >> On 12/15/08 3:17 PM, Matteo wrote:
> > >> >> > Hi,
> > >> >> > Do you think that in the future plans could be useful a
> > "button"
> > >> for
> > >> >> > automatic select and download (from the net) third-party
> > modules
> > >> that e17
> > >> >> > could have?
> > >> >> >
> > >> >> > I mean:
> > >> >> > I saw that Massimiliano has integrated the wallpaper
> > selection
> > >> with an
> > >> >> > useful button for download the wallpaper from the e17 website
> > >> directly from
> > >> >> > the wallpaper selection interface, so I'm asking you: do you
> > >> think that
> > >> >> > could be useful to made the same thing to modules selection
> > >> form?
> > >> >> >
> > >> >> > It could be useful to have a central widget repository to
> > >> download from,
> > >> >> > every user interested in making widget could subscribe and
> > upload
> > >> his work,
> > >> >> > and every e17 user could benefit from this.
> > >> >> >
> > >> >> > Regards
> > >> >> >
> > >> >>
> > >> >> I think this is a good idea. Firefox 3.x has a great
> > integration
> > >> with
> > >> >> AMO (addons.mozilla.org). See Tools > Add-ons > Get Add-ons. It
> > >> loads
> > >> >> basic info and a screenshot of some popular stuff and the user
> > can
> > >> >> download and install the thing he/she wants with just one
> > click.
> > >> >> Similar thing could be done in E and Exchange.
> > >> >
> > >> > firefox addons are are js/html/css lumped together. modules on
> > the
> > >> other
> > >> > hand are linked libraries, so it'd be very hard to provide
> > compiled
> > >> > version for every possible combination of systems out there.
> > >>
> > >> Perhaps it's possible to do something with pure edje modules. I
> > >> remember I saw someone proposing this already.
> > >>
> > >> But doing this kind of work would require giving much more
> > >> information
> > >> to edje and the ability to manipulate it (Information from E
> > itself,
> > >> but also from other apps or from the net). And if we go that route
> > we
> > >> need to do it safely and efficiently. I remember reading something
> > >> regarding this kind of issue but for KDE Plasma, where they did
> > >> introduce the idea of information producer and information
> > consumer.
> > >> Or something like that. Anyway, it's a huge amount of work to do.
> > >
> > > This is exacly what I have done with edgar
> > > (http://code.google.com/p/e17mods/wiki/Edgar)
> > >
> > > It is a module that load edje file as modules, this edje files
> > > that i call 'gadgets' can be downloaded from the net without 
> > problem
> > > and can be very powerfull.
> > >
> > > You can see some 'gadgets' I'm workin on at
> > > http://code.google.com/p/e17mods/wiki/Gadgets
> > >
> > > Edgar is (and will be) more powerfull than simple edje file
> > > as you can send signal from embryo to edgar for doing advanced
> > stuff
> > > (like save config values and execute shell command).
> > >
> > > Give a look at Edgar as probably we need to discuss some security
> > issue ;)
> > 
> > yes, executing shell from scripts is too bad to bad!
> 
> Ok, quite agree with you, but... If a module can exec shell why
> a gadget should not? A module can waste your system and a gadget not?
> it looks discriminating :)
> 
Theoretically, you'd have to compile the module first, which implies
that you could've read the source. With a gadget that's downloaded from
the net (and updated automatically), I could sneak a command via an
update to wipe the home directory.

> > 
> > if we had lua already, I'd say we should execute sandboxed lua
> > scripts, since we do not (and possible will not in near future) we
> > should figure out which kind of commands we'd need and expose them in
> > embryo, just for edgard modules (I suppose this is possible).
> 
> IMO sandboxed script is not as usefull, as they can't interact with
> your system
They can interact as much as you let them. Whitelisting is always better
than blacklisting.

> 
> > 
> > maybe be flexible enough to do things like store db (sqlite3) values
> > for game scores or bare minimum preferences  and download urls +
> > regular expressions to parse them, maybe some dbus calls. it's hard
> > to
> > say without trying to do some modules and coming with requirements.
> 
> With Edgar you can store simple key->value string, managed internally 
> as an hash. I don't think we need the extra power of a db to store
> such simple informations.
> The postit gadget use this edgar function to store the text of the note.
> 
That would be unpleasant for really larg

Re: [E-devel] EWL evas_fb_la_LIBADD patch

2008-12-15 Thread Peter Wehrfritz
Graham Gower schrieb:
> Peter Wehrfritz wrote:
>   
>> Graham Gower schrieb:
>> 
>>> Peter Wehrfritz wrote:
>>>   
 I committed it without the @EVAS_LIBS@, because Vincent told me that 
 it is not needed. Can you check please if it works now? Since I don't 
 have ecore_fb installed, I cannot test it myself.
 
>>> Yes, this works fine.
>>>   
>> Nice :)
>> 
>>> One other issue which may require attention is
>>> ewl/src/engines/evas_fb/ewl_engine_evas_fb.c: ee_canvas_setup(), line 190
>>>
>>> ewl_object_geometry_request(EWL_OBJECT(win), 0, 0, 240, 320);
>>>
>>> This hardcoded size 240x320 is a problem on our 480x272 framebuffer. It
>>> causes evas to try to access mmap()ed framebuffer memory outside the
>>> size that is actually mmap()ed. Hardcoding the geometry request to 
>>> 480x272
>>> made the problem go away.
>>>
>>> Perhaps this value can be obtained from the size of the framebuffer
>>> instead? I didn't see a 'struct fb_var_screeninfo' lying around, or I'd
>>> have used that and sent a patch.
>>>   
>> Indeed, hardcoding the value is very bad. As I said before I've never 
>> used the evas_fb engine, so I have no experience with it. Maybe it is 
>> possible to query the size with ecore_fb_size_get().
>> 
>
> Cool, I tested this and it works for me (with ewl_simple_test).
>
> --- /home/ggower/ewl_engine_fb.c  2008-12-15 09:06:40.0 +1030
> +++ ewl/src/engines/evas_fb/ewl_engine_evas_fb.c  2008-12-15 
> 09:06:25.0 +1030
> @@ -165,6 +165,7 @@
>  Evas_Engine_Info *info = NULL;
>  Evas_Engine_Info_FB *fbinfo;
>  Ewl_Object *o;
> +int w, h;
>  
>  DENTER_FUNCTION(DLEVEL_STABLE);
>  DCHECK_PARAM_PTR(win);
> @@ -187,7 +188,9 @@
>  fbinfo->info.refresh = 0;
>  fbinfo->info.rotation = 0;
>  evas_engine_info_set(evas, (Evas_Engine_Info *)fbinfo);
> -ewl_object_geometry_request(EWL_OBJECT(win), 0, 0, 240, 320);
> +
> +ecore_fb_size_get(&w, &h);
> +ewl_object_geometry_request(EWL_OBJECT(win), 0, 0, w, h);
>  
>  o = EWL_OBJECT(win);
>  evas_engine_info_set(evas, info);
>   

Thanks, in svn.
>
> ewl_test, on the other hand, still tries to write past the end of the
> framebuffer (it did with a hardcoded value too).
> Something is adding 4 pixels to the x and y dimensions.
>   

4 pixels sound like inset or padding pixels. Since the size request 
happens before the realization some pixels for the inset will be added 
later, when the theme data is loaded. I think for the framebuffer, 
unlike to the x11 engine, the engine should take care of resizing evas 
and not the window. Unfortunately I have not much time before Christmas 
to look on it. Maybe I'll find the time after the holidays. In order 
that you report keeps in mind I put it into bugzilla: 
http://bugs.enlightenment.org/show_bug.cgi?id=553

Thanks

Peter

--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] [RFC] Adding missing Name entry in efreet_menu

2008-12-15 Thread Sebastian Dransfeld
Massimiliano Calamelli wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> On Mon, 15 Dec 2008 17:38:15 +0100
> "Massimiliano Calamelli"  wrote:
> 
>> Uhm, bad programmer, something is wrong in the patch :(
>> I'll try to send a better patch, anyway now the problem is known.
>>
>> Massimiliano
> 
> Ok, the attached looks better.

Patch looks fine, I applied it.

Sebastian

--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] [PATCH] ecore_fb absolute coordinate support

2008-12-15 Thread Michael 'Mickey' Lauer
Am Monday 15 December 2008 11:24:07 schrieb Lars Munch:
> This patch adds absolute coordinate support to ecore_fb, e.g.
> touchscreen support. There is no calibration support yet, it just uses
> the values it gets from the kernel.

Why don't you use tslib? 

-- 
:M:

--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] Proposal for modules automatic download

2008-12-15 Thread Gustavo Sverzut Barbieri
On Mon, Dec 15, 2008 at 4:51 PM, Dave Andreoli  wrote:
>
> - "Cedric BAIL"  ha scritto:
>
>> On Mon, Dec 15, 2008 at 6:31 PM, Viktor Kojouharov
>>  wrote:
>> > On Mon, 2008-12-15 at 16:32 +0100, luchezar Petkov wrote:
>> >> -BEGIN PGP SIGNED MESSAGE-
>> >> Hash: SHA1
>> >>
>> >> On 12/15/08 3:17 PM, Matteo wrote:
>> >> > Hi,
>> >> > Do you think that in the future plans could be useful a "button"
>> for
>> >> > automatic select and download (from the net) third-party modules
>> that e17
>> >> > could have?
>> >> >
>> >> > I mean:
>> >> > I saw that Massimiliano has integrated the wallpaper selection
>> with an
>> >> > useful button for download the wallpaper from the e17 website
>> directly from
>> >> > the wallpaper selection interface, so I'm asking you: do you
>> think that
>> >> > could be useful to made the same thing to modules selection
>> form?
>> >> >
>> >> > It could be useful to have a central widget repository to
>> download from,
>> >> > every user interested in making widget could subscribe and upload
>> his work,
>> >> > and every e17 user could benefit from this.
>> >> >
>> >> > Regards
>> >> >
>> >>
>> >> I think this is a good idea. Firefox 3.x has a great integration
>> with
>> >> AMO (addons.mozilla.org). See Tools > Add-ons > Get Add-ons. It
>> loads
>> >> basic info and a screenshot of some popular stuff and the user can
>> >> download and install the thing he/she wants with just one click.
>> >> Similar thing could be done in E and Exchange.
>> >
>> > firefox addons are are js/html/css lumped together. modules on the
>> other
>> > hand are linked libraries, so it'd be very hard to provide compiled
>> > version for every possible combination of systems out there.
>>
>> Perhaps it's possible to do something with pure edje modules. I
>> remember I saw someone proposing this already.
>>
>> But doing this kind of work would require giving much more
>> information
>> to edje and the ability to manipulate it (Information from E itself,
>> but also from other apps or from the net). And if we go that route we
>> need to do it safely and efficiently. I remember reading something
>> regarding this kind of issue but for KDE Plasma, where they did
>> introduce the idea of information producer and information consumer.
>> Or something like that. Anyway, it's a huge amount of work to do.
>
> This is exacly what I have done with edgar
> (http://code.google.com/p/e17mods/wiki/Edgar)
>
> It is a module that load edje file as modules, this edje files
> that i call 'gadgets' can be downloaded from the net without  problem
> and can be very powerfull.
>
> You can see some 'gadgets' I'm workin on at
> http://code.google.com/p/e17mods/wiki/Gadgets
>
> Edgar is (and will be) more powerfull than simple edje file
> as you can send signal from embryo to edgar for doing advanced stuff
> (like save config values and execute shell command).
>
> Give a look at Edgar as probably we need to discuss some security issue ;)

yes, executing shell from scripts is too bad to bad!

if we had lua already, I'd say we should execute sandboxed lua
scripts, since we do not (and possible will not in near future) we
should figure out which kind of commands we'd need and expose them in
embryo, just for edgard modules (I suppose this is possible).

maybe be flexible enough to do things like store db (sqlite3) values
for game scores or bare minimum preferences  and download urls +
regular expressions to parse them, maybe some dbus calls. it's hard to
say without trying to do some modules and coming with requirements.

KDE guys have this for plasma as "data providers", they have a bunch
of available providers like some to report system status from /sys,
including cpu, memory and cpu (they use their own abstraction called
"solid").

splitting our existing modules in providers and views could be useful,
but it's a huge work and I don't know someone is willing to take that.
Maybe it would be easier to just write a hal bridge to embryo and use
generic calls like get_hal_int(property_name),
get_hal_float(property_name)...

-- 
Gustavo Sverzut Barbieri
http://profusion.mobi embedded systems
--
MSN: barbi...@gmail.com
Skype: gsbarbieri
Mobile: +55 (19) 9225-2202

--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] Proposal for modules automatic download

2008-12-15 Thread Dave Andreoli

- "Cedric BAIL"  ha scritto:

> On Mon, Dec 15, 2008 at 6:31 PM, Viktor Kojouharov
>  wrote:
> > On Mon, 2008-12-15 at 16:32 +0100, luchezar Petkov wrote:
> >> -BEGIN PGP SIGNED MESSAGE-
> >> Hash: SHA1
> >>
> >> On 12/15/08 3:17 PM, Matteo wrote:
> >> > Hi,
> >> > Do you think that in the future plans could be useful a "button"
> for
> >> > automatic select and download (from the net) third-party modules
> that e17
> >> > could have?
> >> >
> >> > I mean:
> >> > I saw that Massimiliano has integrated the wallpaper selection
> with an
> >> > useful button for download the wallpaper from the e17 website
> directly from
> >> > the wallpaper selection interface, so I'm asking you: do you
> think that
> >> > could be useful to made the same thing to modules selection
> form?
> >> >
> >> > It could be useful to have a central widget repository to
> download from,
> >> > every user interested in making widget could subscribe and upload
> his work,
> >> > and every e17 user could benefit from this.
> >> >
> >> > Regards
> >> >
> >>
> >> I think this is a good idea. Firefox 3.x has a great integration
> with
> >> AMO (addons.mozilla.org). See Tools > Add-ons > Get Add-ons. It
> loads
> >> basic info and a screenshot of some popular stuff and the user can
> >> download and install the thing he/she wants with just one click.
> >> Similar thing could be done in E and Exchange.
> >
> > firefox addons are are js/html/css lumped together. modules on the
> other
> > hand are linked libraries, so it'd be very hard to provide compiled
> > version for every possible combination of systems out there.
> 
> Perhaps it's possible to do something with pure edje modules. I
> remember I saw someone proposing this already.
> 
> But doing this kind of work would require giving much more
> information
> to edje and the ability to manipulate it (Information from E itself,
> but also from other apps or from the net). And if we go that route we
> need to do it safely and efficiently. I remember reading something
> regarding this kind of issue but for KDE Plasma, where they did
> introduce the idea of information producer and information consumer.
> Or something like that. Anyway, it's a huge amount of work to do.

This is exacly what I have done with edgar
(http://code.google.com/p/e17mods/wiki/Edgar)

It is a module that load edje file as modules, this edje files
that i call 'gadgets' can be downloaded from the net without  problem
and can be very powerfull.

You can see some 'gadgets' I'm workin on at 
http://code.google.com/p/e17mods/wiki/Gadgets

Edgar is (and will be) more powerfull than simple edje file
as you can send signal from embryo to edgar for doing advanced stuff
(like save config values and execute shell command).

Give a look at Edgar as probably we need to discuss some security issue ;)

Dave


> -- 
> Cedric BAIL
> 
> --
> SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas,
> Nevada.
> The future of the web can't happen without you.  Join us at MIX09 to
> help
> pave the way to the Next Web now. Learn more and register at
> http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
> ___
> enlightenment-devel mailing list
> enlightenment-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/enlightenment-devel

--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] SUID bits for E17

2008-12-15 Thread Gustavo Sverzut Barbieri
On Mon, Dec 15, 2008 at 3:26 PM, sda  wrote:
> sda wrote:
>> > another kind request to allow me make a proper build of
>> > Enlightenment-DR17 Desktop Shell (Window Manager). i'm again advised
>> > to
>> > bother you by OBS:
>> >
>> > E17.i586: E: permissions-file-setuid-bit (Badness: 1)
>> > /usr/bin/enlightenment_sys is packaged with setuid/setgid bits
>> > (04555)
>> > E17.i586: E: permissions-file-setuid-bit (Badness: 1)
>> > /usr/lib/enlightenment/modules/cpufreq/linux-gnu-i686/freqset is
>> > packaged with setuid/setgid bits (04555) Please remove the
>> > setuid/setgid
>> > bits or contact secur...@suse.de for review.
>
> We normally don't audit packages that are not meant to be included
> in openSUSE. If you desperately need those setuid bits you may
> suppress the error via rpmlintrc. However, read below why they are
> not needed.
>
>> the SUID bit for 'enlightenment_sys' is required to allow user to
>> shutdown or reboot PC (halt, hybernate or use any defined privileged
>> action described in '/etc/enlightenment/sysactions.conf' file)
>
> There are D-Bus methods in both Hal and ConsoleKit for that. There
> is no need to have an extra setuid program. If you want to
> seamlessly integrate your program into openSUSE you should invoke
> those existing methods instead (no extra privilege needed then).
>
>> > the second SUID points to the:
>> > /usr/lib/enlightenment/modules/cpufreq/linux-gnu-i686/freqset
>> >
>> > and this is part of a 'cpufreq' module which allow Users to change
>> > CPU
>> > Power policy on the fly (according to the existing governors). this
>> > is
>> > very useful and nice tool, so it'd be great to add it as an
>> > exception
>> > (include into a kind of whitelist) for a checks. this module is
>> > working
>> > for years with Enlightenment-DR17 and Users are get used to have it.
>
> Same as above. Hal provides power management functions. There is
> also a command line program 'powersave' that you can call.

I told you that :-)

then you just need to do the dbus messages and have an option in
enlightenment's configure.ac --enable-hal-shutdown and
--enable-hal-cpufreq

I'd vote for that, just don't have the time to do it myself.


-- 
Gustavo Sverzut Barbieri
http://profusion.mobi embedded systems
--
MSN: barbi...@gmail.com
Skype: gsbarbieri
Mobile: +55 (19) 9225-2202

--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


[E-devel] SUID bits for E17

2008-12-15 Thread sda
hi guys!

here comes a long story, sorry for that. openSUSE will release version
11.1 soon and this release has a new system of 'brp' checks which are a
bit similar to 'rpmlint' but could not be disabled. yes, i can override
this checks, but this is "illegal". in general, now OBS (OpenSUSE Build
Service) has a single quality standards for all packages and for all
packagers as well (tep, this is a theory or declared note).

i'm trying to keep up Enlightenment repo for openSUSE in a good shape
and for an upcoming version 11.1 following issues appeared:

E17.i586: E: permissions-file-setuid-bit (Badness: 1) 
/usr/bin/enlightenment_sys is packaged with setuid/setgid bits (04555)
E17.i586: E: permissions-file-setuid-bit (Badness: 1) 
/usr/lib/enlightenment/modules/cpufreq/linux-gnu-i686/freqset is
packaged with setuid/setgid bits (04555) Please remove the setuid/setgid bits 
or contact secur...@suse.de for review.

yep, my spec files are not the example to show on exhibitions, but
untill now all worked pretty good and no complains from Users appeared.
i'm also made an openSUSE-Enlightenment forum thread and freenode IRC
channel just in case. step by step improving my repo when i have some 
time for it. (frankly speaking my spec files sucks...)

issues above does not allow to build 'E17' package in OBS. already
emailed/reported this case to the openSUSE Security Team and expecting
their answer. please let me know if you wish to look at the related
emails. 

right now i'm removing the SUID bits to allow 'E17' to be build and
adjust package description to reflect this case.

i'm sorry if this information is useless for you.

regards,
sda


--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] SUID bits for E17

2008-12-15 Thread sda
On 10:09 Mon 15 Dec , Carsten Haitzler wrote:
> On Sun, 14 Dec 2008 12:25:50 -0200 "Gustavo Sverzut Barbieri"
>  babbled:
> 
> > On Sun, Dec 14, 2008 at 3:48 AM, sda  wrote:
> > > hi guys!
> > >
> > > here comes a long story, sorry for that. openSUSE will release version
> > > 11.1 soon and this release has a new system of 'brp' checks which are a
> > > bit similar to 'rpmlint' but could not be disabled. yes, i can override
> > > this checks, but this is "illegal". in general, now OBS (OpenSUSE Build
> > > Service) has a single quality standards for all packages and for all
> > > packagers as well (tep, this is a theory or declared note).
> > >
> > > i'm trying to keep up Enlightenment repo for openSUSE in a good shape
> > > and for an upcoming version 11.1 following issues appeared:
> > >
> > > E17.i586: E: permissions-file-setuid-bit (Badness:
> > > 1) /usr/bin/enlightenment_sys is packaged with setuid/setgid bits
> > > (04555)
> > 
> > this is tricky, commands defined in sysactions.conf need to be
> > executed as root (shutdown, reboot, hibernate...).
> > 
> > do you know how opensuse expect those to be done? how gnome/kde do that?
> 
> as such this needs to be setuid as it needs to be able to run shutdown/reboot
> (or other root-only system actions). there is a whole config defining what
> these actions run (script/command-wise) in /etc/enlightenment/sysactions.conf 
> -
> this file is meant to be customised by integrators where appropriate). but the
> setuid is required for this to work. sure you can jump through hoops and 
> create
> a root or setuid daemon you use dbus or some for of ipc with too - but one way
> or another it requires root perms in the end, and this util accomplishes that.
> so basically it needs to be kept as setuid.
> 
> > > E17.i586: E: permissions-file-setuid-bit (Badness:
> > > 1) /usr/lib/enlightenment/modules/cpufreq/linux-gnu-i686/freqset is
> > > packaged with setuid/setgid bits (04555) Please remove the setuid/setgid
> > > bits or contact secur...@suse.de for review.
> > 
> > i know we can just set frequency using some system utilities like
> > those dbus daemons some systems have. Then we can just remove this
> > suid and rely on policykit or similar for authorization.
> 
> we can - but non-dbus users will see functionality go away. it's needed to be
> setuid so you can change cpu frequency policy or manually change it - this 
> util
> does only that and nothing more. it'd need to be kept for compatibility 
> anyway.
> 
> so i'd suggest you "contact secur...@suse.de" :) as these are setuid for a
> reason. as such cpufreq switching is fairly harmless (the security nuts of
> course will jump up and down, but i disagree with them. if you install e on a
> shared server - you disable any form of cpufreq in the kernel anyway. if you
> use it on a desktop/laptop - you don't allow remote logins anyway - or those 
> you
> do are for trusted users anyway). enlightenment_sys can be dangerous as it
> allows shutdown/reboot - actions with dramatically impact the system, and thus
> it has a whole permission config setup. :)
>
guys, here comes the reply from openSUSE Securuty Team. i'm just
copy-paste it as it is:

sda wrote:
> > another kind request to allow me make a proper build of 
> > 
> >   
> > Enlightenment-DR17 Desktop Shell (Window Manager). i'm again advised
> > to  
> >  
> > bother you by OBS:  
> > 
> >   
> > 
> > 
> >   
> > E17.i586: E: permissions-file-setuid-bit (Badness: 1)
> > /usr/bin/enlightenment_sys is packaged with setuid/setgid bits
> > (04555)  
> > E17.i586: E: permissions-file-setuid-bit (Badness: 1)
> > /usr/lib/enlightenment/modules/cpufreq/linux-gnu-i686/freqset is
> > 
> > packaged with setuid/setgid bits (04555) Please remove the
> > setuid/setgid   
> >
> > bits or contact secur...@suse.de for review.
> > 
> >   

We normally don't audit packages that are not meant to be included
in openSUSE. If you desperately need those setuid bits you may
suppress the error via rpmlintrc. However, read below why they are
not needed.

> the SUID bit for 'enlightenment_sys' is required to allow user to 
>   
> shutdown or reboot PC (halt, hybernate or use any defined pri

Re: [E-devel] SUID bits for E17

2008-12-15 Thread sda
On 18:10 Sun 14 Dec , sda wrote:
On 12:25 Sun 14 Dec , Gustavo Sverzut Barbieri wrote:
> On Sun, Dec 14, 2008 at 3:48 AM, sda  wrote:
> > hi guys!
> >
> > here comes a long story, sorry for that. openSUSE will release version
> > 11.1 soon and this release has a new system of 'brp' checks which are a
> > bit similar to 'rpmlint' but could not be disabled. yes, i can override
> > this checks, but this is "illegal". in general, now OBS (OpenSUSE Build
> > Service) has a single quality standards for all packages and for all
> > packagers as well (tep, this is a theory or declared note).
> >
> > i'm trying to keep up Enlightenment repo for openSUSE in a good shape
> > and for an upcoming version 11.1 following issues appeared:
> >
> > E17.i586: E: permissions-file-setuid-bit (Badness: 1) 
> > /usr/bin/enlightenment_sys is packaged with setuid/setgid bits (04555)
> 
> this is tricky, commands defined in sysactions.conf need to be
> executed as root (shutdown, reboot, hibernate...).
> 
> do you know how opensuse expect those to be done? how gnome/kde do that?
>
in general - exactly in the same manner. the matter here is that
openSUSE is the only distro (IMHO) where each officially distributed
package has it's Novell/SUSE maintainer/engineer to provide 7/24
services and Security Team keep an eye on that to publish their security
patches/updates for all SUSE-Linux distributions.

i'm expecting that this binary will be included into the "whitelist" for 
brp checks after a review. another variant - to allow all packagers
simply override such checks without some "extra" efforts similar to the 
voodoo rpm magic (that's what we've got now for 11.1).
> 
> > E17.i586: E: permissions-file-setuid-bit (Badness: 1) 
> > /usr/lib/enlightenment/modules/cpufreq/linux-gnu-i686/freqset is
> > packaged with setuid/setgid bits (04555) Please remove the setuid/setgid 
> > bits or contact secur...@suse.de for review.
> 
> i know we can just set frequency using some system utilities like
> those dbus daemons some systems have. Then we can just remove this
> suid and rely on policykit or similar for authorization.
> 
default SUSE security policies are very strict because openSUSE is a
base for a corporate SLED/SLES and i can't say that editing of this
xml-based configs is pleasant. 

i'm waiting the response from our Sec Team. hope that all mentioned 
files will keep the required SUID and situation will be clarified
without a single penalty to Users or Developers.

thank you very much for your response.

regards,
sda
> -- 
> Gustavo Sverzut Barbieri
> http://profusion.mobi embedded systems
> --
> MSN: barbi...@gmail.com
> Skype: gsbarbieri
Mobile: +55 (19) 9225-2202

--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] [e-users] [Announce] Edgar + Places

2008-12-15 Thread Benone Marcos

You did an excelent job with places. Since I'm not a programer, I was
waiting for something like this to be done for a long time.

Thanks a lot.

- Ben

---
Em Fri, 7 Nov 2008 20:52:16 +0100 (CET)
Dave Andreoli  resmungou:

> 
> Hi all
> I can finally present you my new modules, for the occasion I have
> open an account on google-code and I'm going to move all the contents
> of my site on google.
> 
> You can find all the new stuff at
> http://code.google.com/p/e17mods/
> 
> The new modules are Places and Edgar (plus some new gadgets for
> edgar).
> 
> Hope you like the work...and wait for suggestions.
> 
> DaveMDS
> 
> -
> This SF.Net email is sponsored by the Moblin Your Move Developer's
> challenge Build the coolest Linux based applications with Moblin SDK
> & win great prizes Grand prize is a trip for two to an Open Source
> event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> ___ enlightenment-users
> mailing list enlightenment-us...@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/enlightenment-users


-- 
Economics, n.:
Economics is the study of the value and meaning of J. K.
Galbraith ...
-- Mike Harding, "The Armchair Anarchist's Almanac"


signature.asc
Description: PGP signature
--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] Proposal for modules automatic download

2008-12-15 Thread Cedric BAIL
On Mon, Dec 15, 2008 at 6:31 PM, Viktor Kojouharov
 wrote:
> On Mon, 2008-12-15 at 16:32 +0100, luchezar Petkov wrote:
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>> On 12/15/08 3:17 PM, Matteo wrote:
>> > Hi,
>> > Do you think that in the future plans could be useful a "button" for
>> > automatic select and download (from the net) third-party modules that e17
>> > could have?
>> >
>> > I mean:
>> > I saw that Massimiliano has integrated the wallpaper selection with an
>> > useful button for download the wallpaper from the e17 website directly from
>> > the wallpaper selection interface, so I'm asking you: do you think that
>> > could be useful to made the same thing to modules selection form?
>> >
>> > It could be useful to have a central widget repository to download from,
>> > every user interested in making widget could subscribe and upload his work,
>> > and every e17 user could benefit from this.
>> >
>> > Regards
>> >
>>
>> I think this is a good idea. Firefox 3.x has a great integration with
>> AMO (addons.mozilla.org). See Tools > Add-ons > Get Add-ons. It loads
>> basic info and a screenshot of some popular stuff and the user can
>> download and install the thing he/she wants with just one click.
>> Similar thing could be done in E and Exchange.
>
> firefox addons are are js/html/css lumped together. modules on the other
> hand are linked libraries, so it'd be very hard to provide compiled
> version for every possible combination of systems out there.

Perhaps it's possible to do something with pure edje modules. I
remember I saw someone proposing this already.

But doing this kind of work would require giving much more information
to edje and the ability to manipulate it (Information from E itself,
but also from other apps or from the net). And if we go that route we
need to do it safely and efficiently. I remember reading something
regarding this kind of issue but for KDE Plasma, where they did
introduce the idea of information producer and information consumer.
Or something like that. Anyway, it's a huge amount of work to do.
-- 
Cedric BAIL

--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] Proposal for modules automatic download

2008-12-15 Thread Viktor Kojouharov
On Mon, 2008-12-15 at 16:32 +0100, luchezar Petkov wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> On 12/15/08 3:17 PM, Matteo wrote:
> > Hi,
> > Do you think that in the future plans could be useful a "button" for
> > automatic select and download (from the net) third-party modules that e17
> > could have?
> > 
> > I mean:
> > I saw that Massimiliano has integrated the wallpaper selection with an
> > useful button for download the wallpaper from the e17 website directly from
> > the wallpaper selection interface, so I'm asking you: do you think that
> > could be useful to made the same thing to modules selection form?
> > 
> > It could be useful to have a central widget repository to download from,
> > every user interested in making widget could subscribe and upload his work,
> > and every e17 user could benefit from this.
> > 
> > Regards
> > 
> 
> I think this is a good idea. Firefox 3.x has a great integration with
> AMO (addons.mozilla.org). See Tools > Add-ons > Get Add-ons. It loads
> basic info and a screenshot of some popular stuff and the user can
> download and install the thing he/she wants with just one click.
> Similar thing could be done in E and Exchange.

firefox addons are are js/html/css lumped together. modules on the other
hand are linked libraries, so it'd be very hard to provide compiled
version for every possible combination of systems out there.
> 
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.8 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> 
> iEYEARECAAYFAklGeJAACgkQBPWeYFFltb+kgACeP+EP9hQNlqKwwojgmWVRAWJn
> Rh4An1QItFaLJd/BboMIiTN/MAtnXVlZ
> =Zaj8
> -END PGP SIGNATURE-
> 
> --
> SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
> The future of the web can't happen without you.  Join us at MIX09 to help
> pave the way to the Next Web now. Learn more and register at
> http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
> ___
> enlightenment-devel mailing list
> enlightenment-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] Proposal for modules automatic download

2008-12-15 Thread Fedor Gusev
On Mon, Dec 15, 2008 at 03:17:31PM +0100, Matteo wrote:
> Hi,
> Do you think that in the future plans could be useful a "button" for
> automatic select and download (from the net) third-party modules that e17
> could have?
> 
> I mean:
> I saw that Massimiliano has integrated the wallpaper selection with an
> useful button for download the wallpaper from the e17 website directly from
> the wallpaper selection interface, so I'm asking you: do you think that
> could be useful to made the same thing to modules selection form?
> 
> It could be useful to have a central widget repository to download from,
> every user interested in making widget could subscribe and upload his work,
> and every e17 user could benefit from this.
> 
> Regards
> 
> __Matteo__

How do you solve a problem of dependencies?

--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] Bugfix for screenshot module

2008-12-15 Thread Christopher Michael
Either way...doesn't matter :)

dh

Andreas Volz wrote:
> Am Sun, 14 Dec 2008 12:21:54 -0500 schrieb Christopher Michael:
> 
> Do you propose the replace the default theme of your screenshot
> module? Don't you like your current default? I could also provide it as
> external theme in exchange.
> 
> regards
> Andreas
> 
>> Andreas,
>>
>> Thanks :) After getting those files manually, it works fine as the 
>> default module theme if you want to commit it, that's fine with me :)
>>
>> Thanks,
>> devilhorns
>>
>> Andreas Volz wrote:
>>> Am Sun, 14 Dec 2008 11:57:52 -0500 schrieb Christopher Michael:
>>>
>>> Hello Christoper,
>>>
>>> I copied it to ~/.e/e/themes/ and choosed it with the E theme
>>> chooser instead of the default one. I could also decompress it with
>>> edje_decc. Maybe you should download it again. Anyway, I uploaded
>>> the source:
>>>
>>> http://tux-style.de/linux/themes/e-module-screenshot-digital/src/
>>>
>>> regards
>>> Andreas
>>>
 Thanks for checking with me before you did the commit :)

 The code patch looks fine, that can go in, However the new edj does
 not work by default with the screenshot module. When I copied the
 new edj in place of the old one, the module basically disappeared
 from the shelf. Also, for some reason, the edj file cannot be
 decompressed with edje_decc, it just spits out an error. Can you
 provide the edc so I can see what's going on there ?

 Thanks,
 devilhorns

 Andreas Volz wrote:
> Hello Christopher,
>
> I fixed two problems in the E17 screenshot module:
>
> 1. The aspect of the edje theme was fixed to a special size.
>
> 2. If you change timer config while active count it could get
> negative.
>
> For both problems I provide this patch:
>
> http://tux-style.de/linux/enlightenment/patches/screenshot_module/e_screenshot_module_counter_bug_and_aspect.patch
>
> The reason to fix 1. was that I liked to create a digital camera.
> See this edj file: (not yet finished; e.g. the flash)
>
> http://tux-style.de/linux/themes/e-module-screenshot-digital/e-module-screenshot.edj
>
> Here a screenshot:
>
> http://tux-style.de/linux/enlightenment/patches/screenshot_module/2008-12-14-131312.png
>
> I could apply the patch because I've commit right. But I don't
> like to do that before you confirm.
>
> regards
> Andreas
> 
> --
> SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
> The future of the web can't happen without you.  Join us at MIX09 to help
> pave the way to the Next Web now. Learn more and register at
> http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
> ___
> enlightenment-devel mailing list
> enlightenment-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/enlightenment-devel
> 


--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] Bugfix for screenshot module

2008-12-15 Thread Christopher Michael
How DARE you use the 'S' word :P

luchezar Petkov wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> On 12/14/08 6:13 PM, Christopher Michael wrote:
>> Andreas,
>>
>> I went and applied the code patch to cvs...thanks 
> 
> I know how much you'd love to read this:
> 
> It's SVN now, not CVS ;-)
> 
> - --Mano
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.8 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> 
> iEYEARECAAYFAklFQ1sACgkQBPWeYFFltb+RpQCeIMOMAWYAk0m+Nls4UuZlD/92
> 7ggAoMjtX7tSl7peovWRU1yH0c5RrX5V
> =0RV9
> -END PGP SIGNATURE-
> 


--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] [RFC] Adding missing Name entry in efreet_menu

2008-12-15 Thread Massimiliano Calamelli
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Mon, 15 Dec 2008 17:38:15 +0100
"Massimiliano Calamelli"  wrote:

> Uhm, bad programmer, something is wrong in the patch :(
> I'll try to send a better patch, anyway now the problem is known.
> 
> Massimiliano

Ok, the attached looks better.

Ciao

Massimiliano
- -- 
Massimiliano Calamelli
http://mcalamelli.netsons.org
mcalame...@gmail.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFJRo5fleGEL56NNP4RAnJOAJ471En5Om8cyafnX4/eL4I0JuV5TACgxSmA
h3pVCqmVpvs/L7FRoRw/dbs=
=7x8H
-END PGP SIGNATURE-
Index: src/lib/efreet_menu.c
===
--- src/lib/efreet_menu.c   (revisione 38149)
+++ src/lib/efreet_menu.c   (copia locale)
@@ -557,12 +557,25 @@
 eina_stringshare_shutdown();
 }
 
+/**
+ * @param name The internal name of the menu
+ * @return Returns the Efreet_Menu on success or
+ * NULL on failure
+ * @brief Creates a new menu
+ */
 EAPI Efreet_Menu *
-efreet_menu_new(void)
+efreet_menu_new(const char *name)
 {
 Efreet_Menu *menu;
+
+if (!name)
+{
+printf("Error creating a new menu, name is missing\n");
+return 0;
+}
 menu = efreet_menu_entry_new();
 menu->type = EFREET_MENU_ENTRY_MENU;
+menu->name = eina_stringshare_add(name);
 return menu;
 }
 
Index: src/lib/efreet_menu.h
===
--- src/lib/efreet_menu.h   (revisione 38149)
+++ src/lib/efreet_menu.h   (copia locale)
@@ -51,7 +51,7 @@
 
 EAPI int  efreet_menu_kde_legacy_init(void);
 
-EAPI Efreet_Menu *efreet_menu_new(void);
+EAPI Efreet_Menu *efreet_menu_new(const char *name);
 EAPI void efreet_menu_file_set(const char *file);
 EAPI Efreet_Menu *efreet_menu_get(void);
 EAPI Efreet_Menu *efreet_menu_parse(const char *path);
--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] [RFC] Adding missing Name entry in efreet_menu

2008-12-15 Thread Massimiliano Calamelli
2008/12/15 Massimiliano Calamelli :
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Hi, the attached patchset try to solve a issue in efreet_menu, that
> doesn't fill properly the Efreet_Menu structure, in detail menu->name
> isn't defined.
> This issue is doesn't appears in Linux, just a little warning if you
> run E into a Xnest/Xephyr session, but seems more problematic on
> Solaris, see ticket #152 on trac.
>
> This patchset contains:
> 0) changes on efreet_menu, efree_menu_new(void) now is efreet_menu_new
> (const char *name), and if no name is passed the function returns 0
> instead of Efreet_Menu
> 1) changes in e/src/modules/conf_applications to use new API
> 2) changes in E-MODULES-EXTRA/iiirk to use new API
>
> References:
> 0] the ticket
> http://trac.enlightenment.org/e/ticket/152
> 1] FDO spec
> http://standards.freedesktop.org/menu-spec/latest/ar01s04.html#menu-file-elements
>
> Ciao
>
> Massimiliano
> - --
> Massimiliano Calamelli
> http://mcalamelli.netsons.org
> mcalame...@gmail.com
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.7 (MingW32)
>
> iD8DBQFJRoIzleGEL56NNP4RAnfGAJkBkLFDpr9pn8HF2+7mr0VLUOWstgCghsy3
> kc28L3yZfJKvnCXL6Bpzu+o=
> =guHZ
> -END PGP SIGNATURE-
>

Uhm, bad programmer, something is wrong in the patch :(
I'll try to send a better patch, anyway now the problem is known.

Massimiliano

--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


[E-devel] [RFC] Adding missing Name entry in efreet_menu

2008-12-15 Thread Massimiliano Calamelli
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi, the attached patchset try to solve a issue in efreet_menu, that
doesn't fill properly the Efreet_Menu structure, in detail menu->name
isn't defined.
This issue is doesn't appears in Linux, just a little warning if you
run E into a Xnest/Xephyr session, but seems more problematic on
Solaris, see ticket #152 on trac.

This patchset contains: 
0) changes on efreet_menu, efree_menu_new(void) now is efreet_menu_new
(const char *name), and if no name is passed the function returns 0
instead of Efreet_Menu
1) changes in e/src/modules/conf_applications to use new API
2) changes in E-MODULES-EXTRA/iiirk to use new API

References:
0] the ticket 
http://trac.enlightenment.org/e/ticket/152
1] FDO spec
http://standards.freedesktop.org/menu-spec/latest/ar01s04.html#menu-file-elements

Ciao

Massimiliano
- -- 
Massimiliano Calamelli
http://mcalamelli.netsons.org
mcalame...@gmail.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFJRoIzleGEL56NNP4RAnfGAJkBkLFDpr9pn8HF2+7mr0VLUOWstgCghsy3
kc28L3yZfJKvnCXL6Bpzu+o=
=guHZ
-END PGP SIGNATURE-
Index: e_int_config_iiirk.c
===
--- e_int_config_iiirk.c(revisione 38149)
+++ e_int_config_iiirk.c(copia locale)
@@ -568,7 +568,7 @@
Efreet_Menu *menu = NULL;
int i, ret;
 
-   menu = efreet_menu_new();
+   menu = efreet_menu_new("Iiirk");
for (i = 0, l = e_widget_ilist_items_get(cfdata->o_sel); l; l = l->next, 
i++) 
  {
E_Ilist_Item *item = NULL;
Index: src/lib/efreet_menu.c
===
--- src/lib/efreet_menu.c   (revisione 38149)
+++ src/lib/efreet_menu.c   (copia locale)
@@ -557,12 +557,25 @@
 eina_stringshare_shutdown();
 }
 
+/**
+ * @param name The internal name of the menu
+ * @return Returns the Efreet_Menu on success or
+ * NULL on failure
+ * @brief Creates a new menu
+ */
 EAPI Efreet_Menu *
-efreet_menu_new(void)
+efreet_menu_new(const char *name)
 {
 Efreet_Menu *menu;
+
+if (!name)
+{
+printf("Error creating a new menu, name is missing\n");
+return 0;
+}
 menu = efreet_menu_entry_new();
 menu->type = EFREET_MENU_ENTRY_MENU;
+menu->name = name;
 return menu;
 }
 
Index: src/lib/efreet_menu.h
===
--- src/lib/efreet_menu.h   (revisione 38149)
+++ src/lib/efreet_menu.h   (copia locale)
@@ -51,7 +51,7 @@
 
 EAPI int  efreet_menu_kde_legacy_init(void);
 
-EAPI Efreet_Menu *efreet_menu_new(void);
+EAPI Efreet_Menu *efreet_menu_new(const char *name);
 EAPI void efreet_menu_file_set(const char *file);
 EAPI Efreet_Menu *efreet_menu_get(void);
 EAPI Efreet_Menu *efreet_menu_parse(const char *path);
Index: e_int_config_apps.c
===
--- e_int_config_apps.c (revisione 38149)
+++ e_int_config_apps.c (copia locale)
@@ -656,7 +656,7 @@
Efreet_Menu *menu = NULL;
int i, ret;
 
-   menu = efreet_menu_new();
+   menu = efreet_menu_new("Favorites");
for (i = 0, l = e_widget_ilist_items_get(cfdata->o_sel); l; l = l->next, 
i++) 
  {
E_Ilist_Item *item = NULL;
--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] Proposal for modules automatic download

2008-12-15 Thread luchezar Petkov
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 12/15/08 3:17 PM, Matteo wrote:
> Hi,
> Do you think that in the future plans could be useful a "button" for
> automatic select and download (from the net) third-party modules that e17
> could have?
> 
> I mean:
> I saw that Massimiliano has integrated the wallpaper selection with an
> useful button for download the wallpaper from the e17 website directly from
> the wallpaper selection interface, so I'm asking you: do you think that
> could be useful to made the same thing to modules selection form?
> 
> It could be useful to have a central widget repository to download from,
> every user interested in making widget could subscribe and upload his work,
> and every e17 user could benefit from this.
> 
> Regards
> 

I think this is a good idea. Firefox 3.x has a great integration with
AMO (addons.mozilla.org). See Tools > Add-ons > Get Add-ons. It loads
basic info and a screenshot of some popular stuff and the user can
download and install the thing he/she wants with just one click.
Similar thing could be done in E and Exchange.

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAklGeJAACgkQBPWeYFFltb+kgACeP+EP9hQNlqKwwojgmWVRAWJn
Rh4An1QItFaLJd/BboMIiTN/MAtnXVlZ
=Zaj8
-END PGP SIGNATURE-

--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


[E-devel] Proposal for modules automatic download

2008-12-15 Thread Matteo
Hi,
Do you think that in the future plans could be useful a "button" for
automatic select and download (from the net) third-party modules that e17
could have?

I mean:
I saw that Massimiliano has integrated the wallpaper selection with an
useful button for download the wallpaper from the e17 website directly from
the wallpaper selection interface, so I'm asking you: do you think that
could be useful to made the same thing to modules selection form?

It could be useful to have a central widget repository to download from,
every user interested in making widget could subscribe and upload his work,
and every e17 user could benefit from this.

Regards

-- 
__Matteo__

http://www.youtube.com/watch?v=UqkKurZ22KM
http://maps.google.com/maps?f=q&hl=en&geocode=&q=Strada+dei+Campi,+34072+Gorizia,+Friuli-Venezia+Giulia,+Italia&sll=37.0625,-95.677068&sspn=28.611123,82.265625&ie=UTF8&ll=45.910682,13.507696&spn=0.00153,0.005021&t=h&z=18
--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


Re: [E-devel] Bugfix for screenshot module

2008-12-15 Thread Andreas Volz
Am Sun, 14 Dec 2008 12:21:54 -0500 schrieb Christopher Michael:

Do you propose the replace the default theme of your screenshot
module? Don't you like your current default? I could also provide it as
external theme in exchange.

regards
Andreas

> Andreas,
> 
> Thanks :) After getting those files manually, it works fine as the 
> default module theme if you want to commit it, that's fine with me :)
> 
> Thanks,
> devilhorns
> 
> Andreas Volz wrote:
> > Am Sun, 14 Dec 2008 11:57:52 -0500 schrieb Christopher Michael:
> > 
> > Hello Christoper,
> > 
> > I copied it to ~/.e/e/themes/ and choosed it with the E theme
> > chooser instead of the default one. I could also decompress it with
> > edje_decc. Maybe you should download it again. Anyway, I uploaded
> > the source:
> > 
> > http://tux-style.de/linux/themes/e-module-screenshot-digital/src/
> > 
> > regards
> > Andreas
> > 
> >> Thanks for checking with me before you did the commit :)
> >>
> >> The code patch looks fine, that can go in, However the new edj does
> >> not work by default with the screenshot module. When I copied the
> >> new edj in place of the old one, the module basically disappeared
> >> from the shelf. Also, for some reason, the edj file cannot be
> >> decompressed with edje_decc, it just spits out an error. Can you
> >> provide the edc so I can see what's going on there ?
> >>
> >> Thanks,
> >> devilhorns
> >>
> >> Andreas Volz wrote:
> >>> Hello Christopher,
> >>>
> >>> I fixed two problems in the E17 screenshot module:
> >>>
> >>> 1. The aspect of the edje theme was fixed to a special size.
> >>>
> >>> 2. If you change timer config while active count it could get
> >>> negative.
> >>>
> >>> For both problems I provide this patch:
> >>>
> >>> http://tux-style.de/linux/enlightenment/patches/screenshot_module/e_screenshot_module_counter_bug_and_aspect.patch
> >>>
> >>> The reason to fix 1. was that I liked to create a digital camera.
> >>> See this edj file: (not yet finished; e.g. the flash)
> >>>
> >>> http://tux-style.de/linux/themes/e-module-screenshot-digital/e-module-screenshot.edj
> >>>
> >>> Here a screenshot:
> >>>
> >>> http://tux-style.de/linux/enlightenment/patches/screenshot_module/2008-12-14-131312.png
> >>>
> >>> I could apply the patch because I've commit right. But I don't
> >>> like to do that before you confirm.
> >>>
> >>> regards
> >>> Andreas
> 

--
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
___
enlightenment-devel mailing list
enlightenment-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-devel


[E-devel] [PATCH] ecore_fb absolute coordinate support

2008-12-15 Thread Lars Munch
This patch adds absolute coordinate support to ecore_fb, e.g.
touchscreen support. There is no calibration support yet, it just uses
the values it gets from the kernel.

Lars Munch

---

Index: src/lib/ecore_fb/ecore_fb_private.h
===
--- src/lib/ecore_fb/ecore_fb_private.h (revision 38149)
+++ src/lib/ecore_fb/ecore_fb_private.h (working copy)
@@ -19,8 +19,8 @@
  #define kernel_ulong_t unsigned long 
  #define BITS_PER_LONG 32
  #include 
- #undef kernel_ulong_t <-added
- #undef BITS_PER_LONG <-added
+ #undef kernel_ulong_t
+ #undef BITS_PER_LONG
 #else
  #include 
 #endif
@@ -52,7 +52,7 @@
/* absolute axis */
int min_w, min_h;
double rel_w, rel_h;
-
+   int event;
} mouse;
struct
{
Index: src/lib/ecore_fb/ecore_fb_li.c
===
--- src/lib/ecore_fb/ecore_fb_li.c  (revision 38149)
+++ src/lib/ecore_fb/ecore_fb_li.c  (working copy)
@@ -250,52 +250,110 @@
 static void
 _ecore_fb_li_device_event_abs(Ecore_Fb_Input_Device *dev, struct input_event 
*iev)
 {
+   static int prev_x = 0, prev_y = 0, prev_pressure = 0;
+   int v = 0;
+   int pressure;
+   int num;
+   char *ptr;
+   double t;
+
if(!dev->listen)
return;
+
switch(iev->code)
{
case ABS_X:
-   case ABS_Y:
-   {
-   Ecore_Fb_Event_Mouse_Move *ev;
-   if((iev->code == ABS_X) && (dev->mouse.w != 0))
+   if(dev->mouse.w != 0)
{
int tmp;
 
tmp = (int)((double)(iev->value - 
dev->mouse.min_w) / dev->mouse.rel_w);
-   if(tmp < 0)
+   if(tmp < 0) {
dev->mouse.x = 0;
-   else if(tmp > dev->mouse.w)
+   }
+   else if(tmp > dev->mouse.w) {
dev->mouse.x = dev->mouse.w;
-   else
+   }
+   else {
dev->mouse.x = tmp;
+   }
+   dev->mouse.event = ECORE_FB_EVENT_MOUSE_MOVE;
}
-   else if((iev->code == ABS_Y) && (dev->mouse.h != 0))
+   break;
+
+   case ABS_Y:
+   if(dev->mouse.h != 0)
{
int tmp;
 
tmp = (int)((double)(iev->value - 
dev->mouse.min_h) / dev->mouse.rel_h);
-   if(tmp < 0)
+   if(tmp < 0) {
dev->mouse.y = 0;
-   else if(tmp > dev->mouse.h)
+   }
+   else if(tmp > dev->mouse.h) {
dev->mouse.y = dev->mouse.h;
-   else
+   }
+   else {
dev->mouse.y = tmp;
+   }
+   dev->mouse.event = ECORE_FB_EVENT_MOUSE_MOVE;
}
-   ev = calloc(1,sizeof(Ecore_Fb_Event_Mouse_Move));
-   ev->x = dev->mouse.x;
-   ev->y = dev->mouse.y;
-   ev->dev = dev;
+   break;
 
-   ecore_event_add(ECORE_FB_EVENT_MOUSE_MOVE, ev, NULL, 
NULL);
-   break;
-   }
case ABS_PRESSURE:
-   /* TODO emulate a button press */
+   pressure = iev->value;
+   if ((pressure) && (!prev_pressure))
+   {
+   /* DOWN: mouse is down, but was not now */
+   dev->mouse.event = 
ECORE_FB_EVENT_MOUSE_BUTTON_DOWN;
+   }
+   else if ((!pressure) && (prev_pressure))
+   {
+   /* UP: mouse was down, but is not now */
+   dev->mouse.event = 
ECORE_FB_EVENT_MOUSE_BUTTON_UP;
+   }
+
+   prev_pressure = pressure;
+
break;
}
 }
 
+static void
+_ecore_fb_li_device_event_syn(Ecore_Fb_Input_Device *dev, struct input_event 
*iev)
+{
+   if(!dev->listen)
+   return;
+
+   if(dev->mouse.event == ECORE_FB_EVENT_MOUSE_MOVE)
+   {
+   Ecore_Fb_Event_Mouse_Move *ev;
+