openstore-team team mailing list archive

[Brian Douglass <bhdouglass@xxxxxxxxx>]

Hi Mikhail,

I just uploaded those screenshots and updated the description.

Let me know if you need anything else.
Brian

On Tue, Aug 9, 2016 at 1:56 AM Mikhail Milikhin <milikhin@xxxxxxxxx> wrote:

> Thank you for your help, Michael.
>
> Best regards,
> Mikhail.
>
> 2016-08-07 5:31 GMT+07:00 Michael Zanetti <michael.zanetti@xxxxxxxxxxxxx>:
>
>> Right, write path is what you want then. Not sure if it requires to have
>> both, read and write paths, but we'll see.
>>
>>
>> On 06.08.2016 19:13, Mikhail Milikhin wrote:
>> > Thank you, Michael.
>> >
>> > I'd like to give users ability to read and edit any file in Home
>> directory.
>> > That's why I think read_path is not the best solution as it will allow
>> > only reading files but not writing.
>> >
>> > I read the docs again and understand that I just missed that there is
>> > also "write_path" field available.
>> > So I think adding the following line to the manifest will be a good way
>> > to give read/write access to Home directory:
>> >
>> >     "write_path": ["@{HOME}/"]
>> >
>> >
>> > Is that correct?
>> > If so, I updated build instructions (replaced /unconfined/ template with
>> > /write_path/ in apparmor patch) at
>> >
>> https://github.com/milikhin/seabass/blob/master/building.md#31-patch-for-an-unconfined-version
>> .
>> >
>> > Best regards,
>> > Mikhail.
>> >
>> > 2016-08-06 16:44 GMT+07:00 Michael Zanetti
>> > <michael.zanetti@xxxxxxxxxxxxx <mailto:michael.zanetti@xxxxxxxxxxxxx>>:
>> >
>> >     Hi Mikhail,
>> >
>> >     thanks for your submission. I will try to review it today. One thing
>> >     that immediately jumps to mind is the question why you'd need to
>> use the
>> >     unconfined template. If you only require reading files in the home
>> >     directory, it would be better if you'd use read_paths instead.
>> Here's an
>> >     example:
>> >
>> >     https://open.uappexplorer.com/app/falcon.bhdouglass
>> >     <https://open.uappexplorer.com/app/falcon.bhdouglass>
>> >
>> >     Click on the "Manifest" button, it will also contain the apparmor
>> >     profile for this app and show you how you can access those files
>> without
>> >     dropping apparmor completely. What do you think?
>> >
>> >     Best regards,
>> >     Michael
>> >
>> >     On 06.08.2016 08:13, Mikhail Milikhin wrote:
>> >     > Hello OpenStore team,
>> >     >
>> >     > I'd like to submit new application - Seabass code editor - to
>> OpenStore.
>> >     > The app is already available in Ubuntu Store
>> >     > (https://uappexplorer.com/app/seabass.mikhael
>> >     <https://uappexplorer.com/app/seabass.mikhael>) but it's
>> restricted to
>> >     > read/edit files only in it's own directory at
>> >     > /.local/share/seabass.mikhael/. I'd like to upload the same app
>> >     but with
>> >     > unconfined AppArmor template. It'll give app unrestricted access
>> to
>> >     > user's Home directory. Hence users will be able to read/edit any
>> files
>> >     > in Home directory.
>> >     >
>> >     > Application sources are available on GitHub:
>> >     > https://github.com/milikhin/seabass/releases/latest
>> >     <https://github.com/milikhin/seabass/releases/latest>.
>> >     > Ubuntu SDK is not required to build .click package, instead of it
>> latest
>> >     > Cordova for Ubuntu is used.
>> >     > Complete build instructions are available on GitHub:
>> >     > https://github.com/milikhin/seabass/blob/master/building.md
>> >     <https://github.com/milikhin/seabass/blob/master/building.md>.
>> >     >
>> >     > Since within Cordova framework AppArmor profile is generated
>> >     > automatically during the build process, I don't have permanent
>> >     > /.apparmor/ and /.apparmor.openstore/ files. The app uses standard
>> >     > Cordova AppArmor profile but with additional hak
>> >     >
>> >     (
>> https://github.com/milikhin/seabass/blob/master/building.md#31-patch-for-an-unconfined-version
>> >     <
>> https://github.com/milikhin/seabass/blob/master/building.md#31-patch-for-an-unconfined-version
>> >)
>> >     > to set template to Unconfined.
>> >     >
>> >     > Please, send me a message if you have any questions about app or
>> build
>> >     > process.
>> >     >
>> >     > Best regards,
>> >     > Mikhael Milikhin
>> >     >
>> >     >
>> >
>> >
>>
>>
> --
> Mailing list: https://launchpad.net/~openstore-team
> Post to     : openstore-team@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstore-team
> More help   : https://help.launchpad.net/ListHelp
>