ubuntu-appstore-developers team mailing list archive

[Sergio Schvezov <sergio.schvezov@xxxxxxxxxxxxx>]

On Thu, Oct 17, 2013 at 10:06 AM, Jamie Strandboge <jamie@xxxxxxxxxxxxx>wrote:

>
> Beyond that, I can think of other interesting situations. Suppose a carrier
> wants to preinstall something on Ubuntu Touch. Eg,
> com.carrier.billing-app. This
> is installed in /usr/share/click/preinstalled and everything is fine--
> until
> some decides to upload a trojaned app to the app store that is also
> com.carrier.billing-app. Users get the 'upgrade' installed (into /opt) and
> are
> no longer using the preinstalled app. Sure, we can have policies around
> how to
> handle this, etc, etc, but wouldn't it be easier to just avoid scenarios
> like
> this altogether (at the very least while we are bootstrapping the system)?
>

I was asked to upload all the preinstalled apps to the store since
everything seems to expect if click -> in store. So this case while
plausible, is unlikely.

That design assumption may need to be revisited though, not sure you want
com.carrier.billing-app in the store or unfiltered to everyone.