On Tue, Sep 22, 2009 at 00:54, Peter Robinson <pbrobin...@gmail.com> wrote: > On Mon, Sep 21, 2009 at 11:47 PM, Martin Dengler > <mar...@martindengler.com> wrote: >> On Mon, Sep 21, 2009 at 05:15:31PM -0500, Yamandu Ploskonka wrote: >>> Chris Ball wrote: >>> > Hi, >>> > >>> > > TBH I'm not 100% sure on that as I'm not a PackageKit developer >>> > > but I believe that is addressed by ConsoleKit and as its in use >>> > > on Fedora and I'm pretty sure Ubuntu and others (and I'm pretty >>> > > sure its an external dependency of gnome too) I'm sure that issue >>> > > has been addressed. >>> > >>> > My understanding is that the developers consider it addressed by >>> > "%post runs as root, and if you don't like it then don't install RPMs >>> > [from untrusted sources]". So, we need to find out what's up there. >>> > >>> > - Chris. >>> >>> Very good point you make. It gets complicated as the users - kids - >>> have not been shown they get it regarding giving their full name, age >>> and address and some even phone number, so it is unlikely they will deal >>> safely with the nuances of "untrusted sources". >>> It would be sort of a shame that the first massive attack of malware on >>> Linux platforms happened under our watch... >> >> The whole point of Rainbow is that what I think you're talking about >> isn't an issue, and it's encouraged that kids share Activities. >> Eliminating this sharing ability is one of the problems with the >> current rpm / PackageKit proposals AIUI. > > How is the sharing implemented currently? I don't see how its > different to say installing an activity via the control panel as I > don't believe it leaves the .xo lying about for easy sharing.
Yes, the control panel puts the .xo in the journal, from where it gets installed. Regards, Tomeu > There's > nothing to say that the Package kit can't leave the rpm for the > kid/child/student installed activity in a folder somewhere for them > the share via the Chat application if the interface supports sending > of files. And when the other kid/child/student receives the file Chat > could even offer to install it automatically for them. > > You could even use it as a way of a teacher pushing out an activity > through a shared chat activity to ensure all the class have a a new > activity or even a URL to the activity on a school server where when > they click on it it will install. I've never seen any of that be able > to be done with the current .xo format except for the hack to the mime > type in the browse activity. > > Peter > _______________________________________________ > SLOBs mailing list > sl...@lists.sugarlabs.org > http://lists.sugarlabs.org/listinfo/slobs > -- «Sugar Labs is anyone who participates in improving and using Sugar. What Sugar Labs does is determined by the participants.» - David Farning _______________________________________________ Sugar-devel mailing list Sugar-devel@lists.sugarlabs.org http://lists.sugarlabs.org/listinfo/sugar-devel
