[Bug 1035207] Re: passwordless install of webapps (based on repo whitelist)

2012-08-24 Thread Michael Vogt
The whitelist file looks like: $ cat /etc/aptdaemon/repository-whitelist.cfg [webapps test] origin = Ubuntu component = universe pkgnames = 2vcard [more whitelist] origin = Ubuntu component = main pkgnames = ^unity.* ** Summary changed: - passwordless install of webapps (based on repo whiteli

[Bug 1035207] Re: passwordless install of webapps (based on repo whitelist)

2012-08-24 Thread Michael Vogt
Thanks a lot Marc for your thoughts on this topic. I'm working on this currently in the linked branch and for (1) and (2) we will need something like the "policykit-desktop-priviledges" package for webapps that install something like "/var/lib/polkit-1/localauthority/10-vendor.d/com.ubuntu.webapp

[Bug 1035207] Re: passwordless install of webapps (based on repo whitelist)

2012-08-23 Thread Michael Vogt
** Branch linked: lp:~mvo/aptdaemon/support-for-whitelisted-repositories -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1035207 Title: passwordless install of webapps (based on repo whitelist) To ma

[Bug 1035207] Re: passwordless install of webapps (based on repo whitelist)

2012-08-14 Thread Marc Deslauriers
There are two requests in this bug, the first being to add whitelist functionality to aptdaemon, and the second is to add a webapps repository to that whitelist. I will address them separately. Aptdaemon: I believe adding the whitelist functionality to aptdaemon is reasonable. This would also per

[Bug 1035207] Re: passwordless install of webapps (based on repo whitelist)

2012-08-13 Thread Michael Vogt
** Changed in: aptdaemon (Ubuntu) Importance: Undecided => High ** Changed in: aptdaemon (Ubuntu) Status: New => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1035207 Title: passw

[Bug 1035207] Re: passwordless install of webapps (based on repo whitelist)

2012-08-10 Thread Sebastien Bacher
The approch seems fine to me, those don't really have lot of code and those websites can already be accessed without password from a web browser anyway, I would still like to get the security team opinion on the topic though, installing random .js from the web in an easy way is somewhat a bit scary