On Fri, Sep 18, 2015 at 9:15 AM, Daniel van Vugt <daniel.van.v...@canonical.com> wrote: > For mobile it totally makes sense. > > For desktop I think you will find people will want to run > "unsigned/untrusted" "legacy" apps quite a lot :) > >
Maybe, and if a terminal app is unconfined/unconditionally trusted, that property would extend to applications that are started from within the terminal app without mediation by a trusted third party. However, the mediated launching approach has been put in place on purpose. If the experience is suboptimal we should rather focus on making it easier to use from the terminal than proposing a workaround. The launcher infrastructure will gain even more significance going forward, e.g. setup of cgroups to tightly control resource usage. > On 18/09/15 15:13, Michał Sawicz wrote: >> >> W dniu 18.09.2015 o 09:05, Daniel van Vugt pisze: >>> >>> Sounds like an improvement, thanks. In the long term though, I think you >>> will find power users (and even some apps) want to launch non-Qt apps by >>> simply executing them. Eventually (as with any other desktop OS) they >>> will need to /just work/. So any wrapper will need to go away. >> >> >> It's not about Qt or not. The shell requires to uniquely and reliably >> identify a client. I can't see a way for this to happen securely without >> a trusted third-party (today that's ubuntu-app-launch, it might be >> apparmor). >> Apps aren't able to directly launch other apps, they have to request an >> app to be launched (generally via opening a URL), it's the user that >> will ultimately decide whether they allow that or not. >> >> Those are all security features that we might allow "power users" to >> lift via a setting or similar, but will be the default behaviour for the >> foreseeable future. >> > > -- > Mir-devel mailing list > Mir-devel@lists.ubuntu.com > Modify settings or unsubscribe at: > https://lists.ubuntu.com/mailman/listinfo/mir-devel -- Mir-devel mailing list Mir-devel@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/mir-devel
