Hello Michael and Michael,

So it makes sense to specify the complete absolute path to the global
key file in the package record.

The main problem is that you don't know how secure the soon to be
deployed software in /opt will be. Aptdaemon checks already if the
license key is an executable or starts with a shebang line. Or if there
are any symlinks in the license key path. Furthermore aptdaemon doesn't
overwrite any existing file.

I cannot imagine any locations that should be restricted by the web ui
generally, since it is completely up to the application developer e.g.
if the conf.d directory is used to store configuration snippets or just
keys.

Can we gurantee that all software installed in /opt will follow the
/opt/pkgname schema? Or will there be some exceptions, e.g.
/opt/AdobeAcroread?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/833053

Title:
  license_key_path should not (yet) support per-user location

To manage notifications about this bug go to:
https://bugs.launchpad.net/software-center-agent/+bug/833053/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to