← Back to team overview

launchpad-dev team mailing list archive

Re: Instead of authorizing individual applications against the Launchpad web service, let's authorize the Ubuntu desktop as a whole

 

On Wed, Oct 06, 2010 at 10:17:00AM +1300, Robert Collins wrote:
> On Wed, Oct 6, 2010 at 9:18 AM, Leonard Richardson
> <leonard.richardson@xxxxxxxxxxxxx> wrote:
> > If we're aiming so high that "trusted computing base" is actually on
> > the table, then I'll stop shooting down ideas that assume it, and
> > start putting them in the appropriate tier.
> 
> We're part of a community building an entire desktop and server
> operating system. We should absolutely aim at a TCB if that makes
> doing what we want to do better. ( think it does - Kees or other
> security team members will know more).

TCB isn't seriously even on the horizon yet. And it doesn't really help
this situation either.

Or, alternatively: /me runs screaming from TCB

-Kees

-- 
Kees Cook
Ubuntu Security Team



Follow ups

References