[Panel-devel] plasmoids and security

[Aaron J. Seigo]

On Tuesday 18 September 2007, Ivan Čukić wrote:
> > > IT WILL EAT YOUR CHILDREN.
> :
> :)
> :
> > How does it compare to other solutions? Apple's stuff is sandboxed, as
>
> Since Plasma is one process it would be very easy for distro makers to put
> restrains on it using AppArmor or SELinux... if there is a need for that.

moreover, with JS we'll be able to somewhat control what's possible from what 
i understand and Ruby does have some very basic sandboxing. but yeah, 
something like AppArmor/SELinux is the Correct Approach(tm).

additionally, we have cryptographic signing with GHNS2 which we should use as 
well.

-- 
Aaron J. Seigo
humru othro a kohnu se
GPG Fingerprint: 8B8B 2209 0C6F 7C47 B1EA  EE75 D6B7 2EB1 A7F1 DB43

KDE core developer sponsored by Trolltech
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.kde.org/pipermail/panel-devel/attachments/20070918/c37be1f0/attachment.pgp