← Back to team overview

ubuntu-phone team mailing list archive

Re: Executing binaries from click packages, under confinement

 

On 02/03/2014 06:42 PM, Michał Sawicz wrote:
> On 03.02.2014 22:51, Jamie Strandboge wrote:
>> Is this true? Doesn't the untrusted app call out to the trusted online accounts
>> which is not part of this lifecycle group, and then online accounts calls the
>> plugin? The unconfined app talks to online accounts over DBus; I'm not sure how
>> online accounts would fall under the apps lifecycle group in this case.
> 
> I believe a conversation between the trusted online accounts and shell will
> create the binding between app and "untrusted helper", as Ted aptly named them,
> and from then on they will be considered together for lifecycle management, does
> that make sense?
>
Yes.

> Of course we'll need to make sure that nothing bad happens between trusted
> online accounts and the untrusted helper while it's being suspended (or even
> stopped, for that matter), but app and untrusted helper need to be considered
> whole.

Is this part of LP: #1230091 (the window reparenting bug)? If so, I wonder what
the status of that bug is-- I've not seen any progress in the bug for some time,
yet its needed for a number of other things too.

-- 
Jamie Strandboge                 http://www.ubuntu.com/

Attachment: signature.asc
Description: OpenPGP digital signature


Follow ups

References