Oscar, I really like the idea you mention about trusting entire directories. I can imagine using a ./flowgraphs/trusted directory so I don't need to worry about files with the same name or long lists of trusted flowgraphs.
On Fri, Jul 23, 2021 at 12:04 PM Oscar Ekholm <osc...@gmail.com> wrote: > Hello! > > > *GSoC'21: Week 7 of working on the GRC View Only Mode:* > This week I've continued with the things I did last week: I added an "Add > trusted" button to the trust manager where the user can add files to trust > and I continued improving the trust prompt activation. It's coming > together! Read all about it on the blog: > > https://oscekh.github.io/ > > Have a nice weekend! > /Oscar > <https://oscekh.github.io/> > > On Fri, Jul 16, 2021 at 6:37 PM Oscar Ekholm <osc...@gmail.com> wrote: > >> Hi everyone, >> >> >> *GSoC'21: Week 6 of working on the GRC View Only Mode:* >> This week I've added persistent trust to the view only mode, with a new >> dialog where trusted flowgraphs are listed and where the user can stop >> trusting flowgraphs. Read about it on the blog: >> >> https://oscekh.github.io/ >> >> And big thanks to everyone showing interest in the project, it is very >> encouraging! :) >> >> /Oscar >> >> On Fri, Jul 9, 2021 at 7:36 PM Oscar Ekholm <osc...@gmail.com> wrote: >> >>> Hi, >>> >>> >>> *GSoC'21: Week 5 of working on the GRC View Only Mode:* >>> This week I have begun working on the GUI parts, such as a prompt where >>> the user can choose to trust the flowgraph and a toggle where the user can >>> disable the View Only Mode altogether if they desire. Additionally, I write >>> about the PR I opened, which contains the core parts of the mode. >>> >>> https://oscekh.github.io/ >>> >>> Happy reading! >>> >>> /Oscar Ekholm >>> >>> On Fri, Jul 2, 2021 at 6:44 PM Oscar Ekholm <osc...@gmail.com> wrote: >>> >>>> Hello, >>>> >>>> Another Friday => Another GSoC blog update about my work on the GRC >>>> View Only Mode! This time I've made a test asserting that untrusted code >>>> isn't executed as well as refined the code for the upcoming PR. There will >>>> be a PR this weekend containing the core parts and eventually another PR >>>> containing GUI stuff. Read more about it on the blog: >>>> >>>> https://oscekh.github.io/ >>>> >>>> Best regards, >>>> Oscar Ekholm >>>> >>>> On Fri, Jun 25, 2021 at 7:37 PM Oscar Ekholm <osc...@gmail.com> wrote: >>>> >>>>> Hello everyone! >>>>> >>>>> I've now published my third blog update on the GSoC - GRC View Only >>>>> Mode. This week I've continued with disabling evaluation, mainly on block >>>>> and flowgraph level this time. You can read more about it on the blog: >>>>> >>>>> https://oscekh.github.io/ >>>>> >>>>> Best regards, >>>>> Oscar Ekholm >>>>> >>>>> On Fri, Jun 18, 2021 at 5:33 PM Oscar Ekholm <osc...@gmail.com> wrote: >>>>> >>>>>> Hello, >>>>>> >>>>>> A new Friday means a new *GSoC - View Only Mode* blog update! This >>>>>> time it focuses on using the stored parameter values (from last week) >>>>>> instead of evaluating the expressions. Read more about it on my blog: >>>>>> >>>>>> https://oscekh.github.io/ >>>>>> >>>>>> Best regards, >>>>>> Oscar Ekholm >>>>>> <https://oscekh.github.io/> >>>>>> >>>>>> On Fri, Jun 11, 2021 at 5:24 PM Oscar Ekholm <osc...@gmail.com> >>>>>> wrote: >>>>>> >>>>>>> Hello everyone! >>>>>>> I have now published the first blog post for my GSoC work on the GRC >>>>>>> View-Only Mode. This week I have mainly worked at saving evaluated >>>>>>> values >>>>>>> of parameters in the grc-file. You can read about it here: >>>>>>> >>>>>>> https://oscekh.github.io/ >>>>>>> >>>>>>> I will be posting an update on the blog each Friday, with a >>>>>>> corresponding announcement on this list. >>>>>>> >>>>>>> Best regards, >>>>>>> Oscar Ekholm >>>>>>> >>>>>>> On Mon, May 24, 2021 at 11:19 AM Oscar Ekholm <osc...@gmail.com> >>>>>>> wrote: >>>>>>> >>>>>>>> Hello, >>>>>>>> >>>>>>>> I've been accepted to work with GnuRadio for this year's Google >>>>>>>> Summer of Code. I will be working on implementing a GRC View-Only Mode, >>>>>>>> which is a security feature disabling execution of block parameters in >>>>>>>> untrusted flowgraphs. >>>>>>>> >>>>>>>> I will be posting weekly progress updates on my blog: >>>>>>>> https://oscekh.github.io/ >>>>>>>> >>>>>>>> If you are interested in reading more about the View-Only mode it >>>>>>>> is described further in my project proposal: >>>>>>>> >>>>>>>> https://docs.google.com/document/d/1dL6PziJSopcY3O7gJ6CXiedTSdbhrHVFhR-UJRTmsng/edit?usp=sharing >>>>>>>> >>>>>>>> Please reach out if you have any questions, advice or thoughts you >>>>>>>> want to share. >>>>>>>> >>>>>>>> Best regards, >>>>>>>> Oscar Ekholm >>>>>>>> >>>>>>>