Private Activities rpm packages

[Lamarque V. Souza]

Em Wednesday 18 January 2012, martin brook escreveu:
> Hi,
> 
> Looking a this from the Mer point of view there are a couple of points :-
> 
> 1. Mer currently has util-linux 2.19.1, I will raise a bug to get this
> upgraded to 2.20 or latest upstream.

	There is no need for you to upgrade, fuse requires util-linux 2.18 so 
you are Ok. I upgraded to 2.20 because it is the latest one I could find in 
obs and the MeeGo image uses 2.16.

> 2. Mer has systemd and not sysvinit system so that may need some work.
> Modules can be configured at /etc/modules-load.d/*.conf

	Also no need to upgrade. Sysvinit is not a requirement, I changed 
sysvinit package just to make it not conflict with util-linux (both include 
the same file).

	So for Mer you just need to include encfs, fuse and rlog. Just ignore 
util-linux and sysvinit packages from Project:KDE:Security.

> > 
> BR
> 
> vgrade
> 
> On Wed, Jan 18, 2012 at 11:20 AM, Lamarque V. Souza <lamarque at kde.org>wrote:
> > **
> > 
> > Hi all,
> > 
> > 
> > 
> > I am integrating private activities in basysKom's MeeGo image, this is a
> > summary of what I have done so far. I created some dependencies packages
> > for encfs in Project:KDE:Security in obs:
> > 
> > 
> > 
> > encfs: this is a direct private activities dependency.
> > 
> > 
> > 
> > fuse: dependency for encfs
> > 
> > 
> > 
> > rlog: dependency for encfs
> > 
> > 
> > 
> > sysvinit: this is almost the same package used in MeeGo image, I just
> > removed /bin/mount-point from the sysvinit-tools subpackage so that it
> > does not conflict with the package below.
> > 
> > 
> > 
> > util-linux: fuse passes parameters '--no-canonicalize' and sometimes
> > '--fake', which requires util-linux >= 2.18 (MeeGo uses util-linux-ng
> > 2.16). I needed to upgrade util-linux-ng to utilinux-2.20 to make those
> > parameters available. The parameters are there for security reasons
> > according to fuse changelog.
> > 
> > 
> > 
> > Javier, Maurice, as discussed in the last telco you can start integrating
> > those packages in the next devel image. Just one notice: fuse kernel
> > module should be loaded before using encfs and I have not found how to
> > autoload kernel modules in MeeGo. What I did in my test image is add the
> > line below to /etc/rc.local:
> > 
> > 
> > 
> > modprobe fuse
> > 
> > 
> > 
> > If there is no other way to autoload kernel modules I can add a
> > post-install script to the fuse package to add the line to rc.local.
> > 
> > 
> > 
> > We also need to update libkactivities package to use the code from branch
> > ivan/activity-encryption (kactivities repository), which Marco created a
> > couple of days ago. I pushed some fixes to that branch yesterday. Anyone
> > can take care of this?
> > 
> > 
> > 
> > I have been changing the activity configuration dialog to add a switch to
> > mark one activity as private like in the mock-ups Fania sent to the list
> > last Monday. It should be ready by the evening (Brazil's time :-)).
> > 
> > 
> > 
> > There are some problems I postponed for now:
> > 
> > 
> > 
> > . when marking the activity as public (not encrypted) the encfs xml
> > configuration file is not removed. I think we should remove it if it is
> > not needed anymore.
> > 
> > 
> > 
> > . when typing a wrong password kamd shows error message but still switch
> > to the activity. It should abort the switching. By what I saw I think
> > kamd is doing the switch and only afterwards it asks for the password. I
> > think it should do the opposite.
> > 
> > 
> > 
> > . sometimes the kdialog gets behind other windows. For example, when
> > booting sometimes it gets behind the ksplash, sometimes it is behind
> > plasma-device's home screen. In this last case we can use the task
> > switcher to make it to the front, still it is important to make it
> > kdialog really modal.
> > 
> > 
> > 
> > . there is a Ok and Cancel buttons in the kdialog used to ask for
> > password. When we click/tap on the Cancel button or when the password is
> > wrong kamd should not try to open the private activity and try to open a
> > public one, like we have been discussing in the other thread. For now it
> > opens the private one even if the encryped data remains inaccessible.
> > 
> > 
> > 
> > --
> > 
> > Lamarque V. Souza
> > 
> > KDE's Network Management maintainer
> > 
> > http://planetkde.org/pt-br
> > 
> > _______________________________________________
> > Active mailing list
> > Active at kde.org
> > https://mail.kde.org/mailman/listinfo/active


-- 
Lamarque V. Souza
KDE's Network Management maintainer
http://planetkde.org/pt-br
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/active/attachments/20120118/5e8c51f0/attachment-0001.html>