Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-05 Thread Ted Gould
On Tue, 2014-02-04 at 16:50 +0200, Alberto Mardegan wrote: > On 02/04/2014 04:13 PM, Ted Gould wrote: > > On Tue, 2014-02-04 at 10:05 +0200, Alberto Mardegan wrote: > >> I had a quick look at the untrusted helper branch, but I > >> couldn't understand if it's suitable for my case: > >> > >> " * S

Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-04 Thread Alberto Mardegan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Ted, On 02/04/2014 04:13 PM, Ted Gould wrote: > On Tue, 2014-02-04 at 10:05 +0200, Alberto Mardegan wrote: >> I had a quick look at the untrusted helper branch, but I >> couldn't understand if it's suitable for my case: >> >> " * Start an untruste

Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-04 Thread Ted Gould
On Tue, 2014-02-04 at 10:05 +0200, Alberto Mardegan wrote: > I had a quick look at the untrusted helper branch, but I couldn't > understand if it's suitable for my case: > > " * Start an untrusted helper for a specific @type on a given > * @appid. We don't know how that is done specifically, as

Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-04 Thread Michał Sawicz
On 04.02.2014 14:33, Jamie Strandboge wrote: Is this part of LP: #1230091 (the window reparenting bug)? If so, I wonder what the status of that bug is-- I've not seen any progress in the bug for some time, yet its needed for a number of other things too. Maybe not part of it, but related for su

Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-04 Thread Jamie Strandboge
On 02/03/2014 06:42 PM, Michał Sawicz wrote: > On 03.02.2014 22:51, Jamie Strandboge wrote: >> Is this true? Doesn't the untrusted app call out to the trusted online >> accounts >> which is not part of this lifecycle group, and then online accounts calls the >> plugin? The unconfined app talks to

Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-04 Thread Michał Sawicz
On 04.02.2014 09:07, Alberto Mardegan wrote: We actually need to support the case where multiple instances of the plugin are running, in different trusted sessions. I'm not sure what is the matter of PID tracking; what are the requirements there? My idea was to just start the plugin process, and

Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-04 Thread Alberto Mardegan
On 02/03/2014 10:10 PM, Michał Sawicz wrote: > That said, having upstart manage those would definitely help, having to > track the PID is not something we'd like to do. I don't think you'll > need more than one instance of the plugin? In that case a simple > .desktop file with NoShow=True (or whate

Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-04 Thread Alberto Mardegan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/03/2014 11:50 PM, Ted Gould wrote: > The feature that Content Hub is using I've called "untrusted > helpers" and it has a lot more flexibility than applications do as > we're expecting that the helper managers to do a lot of the > lifecycle manag

Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-03 Thread Michał Sawicz
On 03.02.2014 22:51, Jamie Strandboge wrote: Is this true? Doesn't the untrusted app call out to the trusted online accounts which is not part of this lifecycle group, and then online accounts calls the plugin? The unconfined app talks to online accounts over DBus; I'm not sure how online account

Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-03 Thread Jamie Strandboge
On 02/03/2014 03:10 PM, Michał Sawicz wrote: > On 03.02.2014 17:44, Jamie Strandboge wrote: >> At this point, I think I would suggest just using aa-exec-click, but note by >> doing so it will not be under application lifecycle since it is isn't running >> under upstart. I'm not sure how much of a c

Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-03 Thread Ted Gould
On Mon, 2014-02-03 at 18:05 +0200, Alberto Mardegan wrote: > I'm now facing the choice of how to implement all the above; my original > idea was to execute the plugin with aa-exec-click, but before jumping on > that solution I'd like to double check with a wider audience. I've been > told that the

Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-03 Thread Michał Sawicz
On 03.02.2014 17:44, Jamie Strandboge wrote: At this point, I think I would suggest just using aa-exec-click, but note by doing so it will not be under application lifecycle since it is isn't running under upstart. I'm not sure how much of a concern this is. It is conceivable app authors could ab

[Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-03 Thread Alberto Mardegan
Hi all! One of the tasks I'm working on in Online Accounts is support for account plugins (those bits of code which are responsible to create/edit accounts for a specific provider, e.g. facebook) to be installed as click packages. For security reasons, the Online Accounts (from now on, "OA") ser

Re: [Ubuntu-phone] Executing binaries from click packages, under confinement

2014-02-03 Thread Jamie Strandboge
On 02/03/2014 11:05 AM, Alberto Mardegan wrote: > Hi all! > One of the tasks I'm working on in Online Accounts is support for > account plugins (those bits of code which are responsible to create/edit > accounts for a specific provider, e.g. facebook) to be installed as > click packages. > > For