Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-09 Thread Michael Terry
On Wed, Jul 9, 2014 at 10:54 AM, Oliver Grawert wrote: > > ACTION (phonedations): Identify how to retrieve the lock screen state > There is a branch waiting to land into unity8 that allows this: https://code.launchpad.net/~mterry/unity8/is-active/+merge/223653 Once that's in, you should be able

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-09 Thread Oliver Grawert
hi, Am Mittwoch, den 09.07.2014, 10:36 -0400 schrieb Marc Deslauriers: > On 14-07-08 04:36 AM, Oliver Grawert wrote: > > hi, > > Am Montag, den 07.07.2014, 17:34 -0400 schrieb Marc Deslauriers: > >> On 14-07-07 06:43 AM, Oliver Grawert wrote: > >>> 3) on request of the security team it should not b

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-09 Thread Marc Deslauriers
On 14-07-08 04:36 AM, Oliver Grawert wrote: > hi, > Am Montag, den 07.07.2014, 17:34 -0400 schrieb Marc Deslauriers: >> On 14-07-07 06:43 AM, Oliver Grawert wrote: >>> 3) on request of the security team it should not be possible to enable >>> adb access if there is no password or the default passwo

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-09 Thread Oliver Grawert
hi, Am Dienstag, den 08.07.2014, 14:57 +0200 schrieb Oliver Grawert: > hi, > Am Montag, den 07.07.2014, 12:43 +0200 schrieb Oliver Grawert: > > > 3) on request of the security team it should not be possible to enable > > adb access if there is no password or the default password set for the > > ph

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Paul Larson
>From a CI point of view, my main concern is that we: 1. Preserve adb shell access and a way to run things as root. If this means we have to setup sudo post-install in our CI infrastructure, that's fine. I already have a patch to do just that, but I am starting to think this should either be anothe

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Barry Warsaw
On Jul 08, 2014, at 12:23 PM, Sergio Schvezov wrote: >On martes 8 de julio de 2014 10h'58:26 ART, Jamie Strandboge wrote: >> On 07/08/2014 03:45 AM, Oliver Grawert wrote: >>> Am Montag, den 07.07.2014, 22:45 +0200 schrieb Alexander Sack: >> ... >> To be clear, we are wanting to support devices th

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Steve Langasek
On Tue, Jul 08, 2014 at 11:03:26AM +0200, Oliver Grawert wrote: > > On Mon, Jul 07, 2014 at 04:47:38PM -0400, Marc Deslauriers wrote: > > > >> 4) you will be able to switch developer mode on/off in the > > > >> system-settings in a sub page of the "about this device" section [1]. > > > >> the firs

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Oliver Grawert
hi, Am Dienstag, den 08.07.2014, 09:02 -0700 schrieb Steve Langasek: > > for RTM only password or number-combination based unlocking will be > > available (no "pattern-drawing" or the like which could not be > > represented by a password in the password file) ... so for both these > > cases we wil

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Sergio Schvezov
On martes 8 de julio de 2014 10h'58:26 ART, Jamie Strandboge wrote: On 07/08/2014 03:45 AM, Oliver Grawert wrote: Am Montag, den 07.07.2014, 22:45 +0200 schrieb Alexander Sack: ... To be clear, we are wanting to support devices that are 'ro' but with adb enabled, right? Ie, I don't want to hav

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Oliver Grawert
hi, Am Dienstag, den 08.07.2014, 08:58 -0500 schrieb Jamie Strandboge: > > see the UI design, the switch to enable dev mode will be unresponsive > > unless you have set a new non empty password that is not the default > > one. (the same goes for ubuntu-device-flash it will not allow using > > --dev

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Jamie Strandboge
On 07/08/2014 03:45 AM, Oliver Grawert wrote: > Am Montag, den 07.07.2014, 22:45 +0200 schrieb Alexander Sack: >> On Mon, Jul 7, 2014 at 12:43 PM, Oliver Grawert wrote: >>> hi, >>> >>> with RTM approaching quickly we are working on the developer mode to >>> make it act in a more secure manner. the

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Ondrej Kubik
On Tue, Jul 8, 2014 at 1:39 PM, Christian Dywan < christian.dy...@canonical.com> wrote: > On 08.07.2014 13:57, Oliver Grawert wrote: > > hi, > > Am Dienstag, den 08.07.2014, 07:11 -0400 schrieb Marc Deslauriers: > > > >> I just want adb to refuse connections if they are attempted _while_ the > scr

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Alexander Sack
On Tue, Jul 8, 2014 at 1:30 PM, Martin Pitt wrote: > Marc Deslauriers [2014-07-08 7:09 -0400]: >> You can make adb detect when running on the emulator, and allow connections >> for >> testing perhaps. > > I wouldn't like to see this. First, we need to test on real hw as well > and don't want to

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Oliver Grawert
hi, Am Montag, den 07.07.2014, 12:43 +0200 schrieb Oliver Grawert: > 3) on request of the security team it should not be possible to enable > adb access if there is no password or the default password set for the > phablet user so that there is no predictable sudo password that is > identical on a

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Oliver Grawert
hi, Am Dienstag, den 08.07.2014, 14:38 +0200 schrieb Alexander Sack: > On Tue, Jul 8, 2014 at 1:30 PM, Martin Pitt wrote: > > Marc Deslauriers [2014-07-08 7:09 -0400]: > >> You can make adb detect when running on the emulator, and allow > >> connections for > >> testing perhaps. > > > > I wouldn

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Christian Dywan
On 08.07.2014 13:57, Oliver Grawert wrote: > hi, > Am Dienstag, den 08.07.2014, 07:11 -0400 schrieb Marc Deslauriers: > >> I just want adb to refuse connections if they are attempted _while_ the >> screen >> is locked. If adb is already servicing a connection, it doesn't need to drop >> it >> whe

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Oliver Grawert
hi, Am Dienstag, den 08.07.2014, 07:11 -0400 schrieb Marc Deslauriers: > I just want adb to refuse connections if they are attempted _while_ the screen > is locked. If adb is already servicing a connection, it doesn't need to drop > it > when the screen then locks. so how would you as a develope

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Martin Pitt
Marc Deslauriers [2014-07-08 7:09 -0400]: > You can make adb detect when running on the emulator, and allow connections > for > testing perhaps. I wouldn't like to see this. First, we need to test on real hw as well and don't want to provide two different approaches to this, and second it would

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Marc Deslauriers
On 14-07-08 04:36 AM, Oliver Grawert wrote: > hi, > Am Montag, den 07.07.2014, 17:34 -0400 schrieb Marc Deslauriers: >> On 14-07-07 06:43 AM, Oliver Grawert wrote: >>> 3) on request of the security team it should not be possible to enable >>> adb access if there is no password or the default passwo

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Marc Deslauriers
On 14-07-08 01:03 AM, Martin Pitt wrote: > Marc Deslauriers [2014-07-07 17:34 -0400]: >> We also asked that adb refuse connections if the screen is locked. Is this >> implemented? > > All the other bits (requiring changing of password etc.) already make > it rather hard for automating tests, but a

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Sergio Schvezov
On Tuesday, July 8, 2014, Martin Pitt wrote: > Marc Deslauriers [2014-07-07 17:34 -0400]: >> We also asked that adb refuse connections if the screen is locked. Is this >> implemented? > > All the other bits (requiring changing of password etc.) already make > it rather hard for automating tests, b

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Oliver Grawert
hi, Am Dienstag, den 08.07.2014, 00:20 +0200 schrieb Alexander Sack: > On Tue, Jul 8, 2014 at 12:14 AM, Steve Langasek > wrote: > > Hi Marc, > > > > On Mon, Jul 07, 2014 at 04:47:38PM -0400, Marc Deslauriers wrote: > >> >> 4) you will be able to switch developer mode on/off in the > >> >> system-s

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Oliver Grawert
hi, Am Montag, den 07.07.2014, 15:14 -0700 schrieb Steve Langasek: > Hi Marc, > > On Mon, Jul 07, 2014 at 04:47:38PM -0400, Marc Deslauriers wrote: > > >> 4) you will be able to switch developer mode on/off in the > > >> system-settings in a sub page of the "about this device" section [1]. > > >

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Oliver Grawert
Am Montag, den 07.07.2014, 22:45 +0200 schrieb Alexander Sack: > On Mon, Jul 7, 2014 at 12:43 PM, Oliver Grawert wrote: > > hi, > > > > with RTM approaching quickly we are working on the developer mode to > > make it act in a more secure manner. the following changes were > > discussed with the se

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-08 Thread Oliver Grawert
hi, Am Montag, den 07.07.2014, 17:34 -0400 schrieb Marc Deslauriers: > On 14-07-07 06:43 AM, Oliver Grawert wrote: > > 3) on request of the security team it should not be possible to enable > > adb access if there is no password or the default password set for the > > phablet user so that there is

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Martin Pitt
Marc Deslauriers [2014-07-07 17:34 -0400]: > We also asked that adb refuse connections if the screen is locked. Is this > implemented? All the other bits (requiring changing of password etc.) already make it rather hard for automating tests, but as there is currently *no* way of programmatically u

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Marc Deslauriers
On 14-07-07 07:09 PM, Steve Langasek wrote: > On Tue, Jul 08, 2014 at 12:20:56AM +0200, Alexander Sack wrote: > Sure, you enable a password/PIN on the lock screen. > >>> I may be misunderstanding; does this imply that one must enable >>> password-based unlock on the screen in order to have p

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Marc Deslauriers
On 14-07-07 06:14 PM, Steve Langasek wrote: > Hi Marc, > > On Mon, Jul 07, 2014 at 04:47:38PM -0400, Marc Deslauriers wrote: 4) you will be able to switch developer mode on/off in the system-settings in a sub page of the "about this device" section [1]. > the first bit (1) is alrea

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Michael Terry
On Mon, Jul 7, 2014 at 7:09 PM, Steve Langasek wrote: > Right, but that wasn't my question. I don't want to use a password to > unlock my phone screen. I *do* want a password for sudo use over adb. Is > this supported, or not? > Disabling sudo on pseudo-ttys when the user has no password is t

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Steve Langasek
On Tue, Jul 08, 2014 at 12:20:56AM +0200, Alexander Sack wrote: > >> Sure, you enable a password/PIN on the lock screen. > > I may be misunderstanding; does this imply that one must enable > > password-based unlock on the screen in order to have password-based sudo > > over adb? I would not like

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Alexander Sack
On Tue, Jul 8, 2014 at 12:14 AM, Steve Langasek wrote: > Hi Marc, > > On Mon, Jul 07, 2014 at 04:47:38PM -0400, Marc Deslauriers wrote: >> >> 4) you will be able to switch developer mode on/off in the >> >> system-settings in a sub page of the "about this device" section [1]. > >> >> the first bit

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Steve Langasek
Hi Marc, On Mon, Jul 07, 2014 at 04:47:38PM -0400, Marc Deslauriers wrote: > >> 4) you will be able to switch developer mode on/off in the > >> system-settings in a sub page of the "about this device" section [1]. > >> the first bit (1) is already implemented but will need some extension to > >>

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Alexander Sack
On Mon, Jul 7, 2014 at 11:34 PM, Marc Deslauriers wrote: > On 14-07-07 06:43 AM, Oliver Grawert wrote: >> 3) on request of the security team it should not be possible to enable >> adb access if there is no password or the default password set for the >> phablet user so that there is no predictable

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Marc Deslauriers
On 14-07-07 06:43 AM, Oliver Grawert wrote: > 3) on request of the security team it should not be possible to enable > adb access if there is no password or the default password set for the > phablet user so that there is no predictable sudo password that is > identical on all devices. there are st

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Paul Larson
I have a WIP patch [1] for the CI scripts to enable NOPASSWD sudo for the phablet user, and I'm trying to pick off all the adb shell calls and ensure we always sudo to the proper user. This mostly works for provisioning right now, even with a mocked up image to include the new adbd. Where I run in

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Marc Deslauriers
On 14-07-07 04:45 PM, Alexander Sack wrote: > On Mon, Jul 7, 2014 at 12:43 PM, Oliver Grawert wrote: >> hi, >> >> with RTM approaching quickly we are working on the developer mode to >> make it act in a more secure manner. the following changes were >> discussed with the security team and will be

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Alexander Sack
On Mon, Jul 7, 2014 at 12:43 PM, Oliver Grawert wrote: > hi, > > with RTM approaching quickly we are working on the developer mode to > make it act in a more secure manner. the following changes were > discussed with the security team and will be implemented soon ... this > will require a bunch of

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Robert Park
On Mon, Jul 7, 2014 at 10:09 AM, Oliver Grawert wrote: > hmm, didnt we discuss trying to run a "loopback-user-owned-sshd" on an > unprivileged port ? probably thats the way to go ... i'm not sure i want > the user to be able to just enable ssh without sudo'ing first ... cjwatson advised that the

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Oliver Grawert
hi, Am Montag, den 07.07.2014, 10:02 -0700 schrieb Robert Park: > On Mon, Jul 7, 2014 at 3:43 AM, Oliver Grawert wrote: > > 2) adb will not allow root and only let you in as phablet user (you will > > have to use sudo like on any other ubuntu installation when doing > > administrative tasks) > >

Re: [Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Robert Park
On Mon, Jul 7, 2014 at 3:43 AM, Oliver Grawert wrote: > 2) adb will not allow root and only let you in as phablet user (you will > have to use sudo like on any other ubuntu installation when doing > administrative tasks) I had a look over phablet-shell and the only thing it needs root for is to s

[Ubuntu-phone] Status update: Planned changes to the developer mode/adb access

2014-07-07 Thread Oliver Grawert
hi, with RTM approaching quickly we are working on the developer mode to make it act in a more secure manner. the following changes were discussed with the security team and will be implemented soon ... this will require a bunch of changes in out external tools that use adb access for tests or dev