| 2011-08-25 17:19:36 |
Sebastian Heinlein |
bug |
|
|
added bug |
| 2011-08-25 17:19:53 |
Sebastian Heinlein |
bug task added |
|
aptdaemon (Ubuntu) |
|
| 2011-08-25 17:20:01 |
Sebastian Heinlein |
aptdaemon (Ubuntu): importance |
Undecided |
Wishlist |
|
| 2011-08-25 17:20:04 |
Sebastian Heinlein |
aptdaemon (Ubuntu): status |
New |
Fix Committed |
|
| 2011-08-25 17:20:09 |
Sebastian Heinlein |
aptdaemon (Ubuntu): importance |
Wishlist |
Medium |
|
| 2011-08-25 17:35:48 |
Sebastian Heinlein |
description |
There is the need to allow sharing software license key by all users on the system. So they need to be dropped to an accessible location on the system. This bug tracks the discussion and progress of this effort. |
There is the need to allow sharing software license key by all users on the system. So they need to be dropped to an accessible location on the system. This bug tracks the discussion and progress of this effort.
From a security point of view we allow a desktop user to "random" drop files on the system. So we should try to define the dropping area and the content of the file as tight as possible.
Open issues:
* Can we assume that we can patch or force the shipped software in /opt to use a common place defined by our policy (problem with proprietary software)?
* If the above question is yes: Can we store the licenses in a central repository e.g. /var/licenses/pkgname.key? Or should we store them in the corresponding /opt/pkgname dir?
* If the first question is no: Can we still assume that the key has to be stored in the /opt/pkgname dir? E.g. Does a "special" customer insist on uppercase naming which is not allowed as a package name /opt/AcrobatReader?
* Can we sign the key by Launchpad to make sure to only drop a file which can be sure of to be license key? The signature check needs to be done by aptdaemon
* We need a trusted way to transfer the location of the key to aptdaemon - current solution would be to store the key path in a package control field (XB-LicenseKeyPath). But we could also append this information to a signed license key, see question above. |
|
| 2011-08-25 17:36:20 |
Sebastian Heinlein |
description |
There is the need to allow sharing software license key by all users on the system. So they need to be dropped to an accessible location on the system. This bug tracks the discussion and progress of this effort.
From a security point of view we allow a desktop user to "random" drop files on the system. So we should try to define the dropping area and the content of the file as tight as possible.
Open issues:
* Can we assume that we can patch or force the shipped software in /opt to use a common place defined by our policy (problem with proprietary software)?
* If the above question is yes: Can we store the licenses in a central repository e.g. /var/licenses/pkgname.key? Or should we store them in the corresponding /opt/pkgname dir?
* If the first question is no: Can we still assume that the key has to be stored in the /opt/pkgname dir? E.g. Does a "special" customer insist on uppercase naming which is not allowed as a package name /opt/AcrobatReader?
* Can we sign the key by Launchpad to make sure to only drop a file which can be sure of to be license key? The signature check needs to be done by aptdaemon
* We need a trusted way to transfer the location of the key to aptdaemon - current solution would be to store the key path in a package control field (XB-LicenseKeyPath). But we could also append this information to a signed license key, see question above. |
There is the need to allow sharing software license key by all users on the system. So they need to be dropped to an accessible location on the system. This bug tracks the discussion and progress of this effort.
From a security point of view we allow a desktop user to "randomly" drop files on the system. So we should try to define the dropping area and the content of the file as tight as possible.
Open issues:
* Can we assume that we can patch or force the shipped software in /opt to use a common place defined by our policy (problem with proprietary software)?
* If the above question is yes: Can we store the licenses in a central repository e.g. /var/licenses/pkgname.key? Or should we store them in the corresponding /opt/pkgname dir?
* If the first question is no: Can we still assume that the key has to be stored in the /opt/pkgname dir? E.g. Does a "special" customer insist on uppercase naming which is not allowed as a package name /opt/AcrobatReader?
* Can we sign the key by Launchpad to make sure to only drop a file which can be sure of to be license key? The signature check needs to be done by aptdaemon
* We need a trusted way to transfer the location of the key to aptdaemon - current solution would be to store the key path in a package control field (XB-LicenseKeyPath). But we could also append this information to a signed license key, see question above. |
|
| 2011-08-25 17:36:25 |
Sebastian Heinlein |
aptdaemon (Ubuntu): status |
Fix Committed |
In Progress |
|
| 2011-08-25 17:37:16 |
Sebastian Heinlein |
branch linked |
|
lp:~aptdaemon-developers/aptdaemon/add-license-key-call |
|
| 2011-08-25 17:38:18 |
Sebastian Heinlein |
bug |
|
|
added subscriber Michael Vogt |
| 2011-09-08 14:26:22 |
Michael Nelson |
tags |
|
proj-keys |
|
| 2011-09-21 08:00:30 |
Sebastian Heinlein |
aptdaemon (Ubuntu): importance |
Medium |
High |
|
| 2012-03-12 06:01:00 |
Sebastian Heinlein |
aptdaemon (Ubuntu): status |
In Progress |
Fix Released |
|
| 2012-11-16 13:52:48 |
Dave Morley |
software-center-agent: status |
New |
Fix Committed |
|
| 2012-11-16 16:17:56 |
Dave Morley |
software-center-agent: status |
Fix Committed |
Fix Released |
|
