Re: [qubes-devel] Design questions for the next steps of the Qubes shared folders service

2021-12-15 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Dec 16, 2021 at 01:27:43AM +0100, Manuel Amador (Rudd-O) wrote: > On 16/12/2021 01.07, Marek Marczykowski-Górecki wrote: > > Here is how qrexec policy prompt is doing it: > > https://github.com/QubesOS/qubes-core-qrexec/blob/master/qrexec/too

Re: [qubes-devel] Design questions for the next steps of the Qubes shared folders service

2021-12-15 Thread Manuel Amador (Rudd-O)
On 16/12/2021 01.07, Marek Marczykowski-Górecki wrote: Here is how qrexec policy prompt is doing it: https://github.com/QubesOS/qubes-core-qrexec/blob/master/qrexec/tools/qrexec_policy_exec.py#L64-L112 Bad news, I did not understand any of that code. :-( Just to see if I understand at least th

Re: [qubes-devel] Design questions for the next steps of the Qubes shared folders service

2021-12-15 Thread Manuel Amador (Rudd-O)
On 16/12/2021 01.07, Marek Marczykowski-Górecki wrote: If going with standard qrexec prompt (+#5853), you'd get that for free;) Otherwise, you need a qrexec service that calls into GUI domain to do the prompt (and then validate its output to really allow only the thing that was asked about, not s

Re: [qubes-devel] Design questions for the next steps of the Qubes shared folders service

2021-12-15 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Dec 16, 2021 at 12:17:44AM +0100, Manuel Amador (Rudd-O) wrote: > Prefacing this response with: > > I went with the implementation as designed by the document.  In the future I > will revise argument passing to use the new 4.1 style, instead

Re: [qubes-devel] Design questions for the next steps of the Qubes shared folders service

2021-12-15 Thread Manuel Amador (Rudd-O)
Prefacing this response with: I went with the implementation as designed by the document.  In the future I will revise argument passing to use the new 4.1 style, instead of base64 over pipes. Currently the implementation uses a custom-made dialog — a very nice one, if I do say so myself — in t

Re: [qubes-devel] Design questions for the next steps of the Qubes shared folders service

2021-12-14 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Mon, Dec 13, 2021 at 06:58:02AM +0100, Manuel Amador (Rudd-O) wrote: > Hi folks. > > I wrote the Qubes shared folders service in an afternoon.  It is what it is > -- useful, but not ideal. > > I've come up with a design for an improved version t

[qubes-devel] Design questions for the next steps of the Qubes shared folders service

2021-12-12 Thread Manuel Amador (Rudd-O)
Hi folks. I wrote the Qubes shared folders service in an afternoon.  It is what it is -- useful, but not ideal. I've come up with a design for an improved version that I would like you to review for correctness and to see if it could be implemented better.  I think this design has potential,