LWN.net Logo

Sandboxed file access

Sandboxed file access

Posted Sep 5, 2012 5:42 UTC (Wed) by dlang (✭ supporter ✭, #313)
In reply to: Sandboxed file access by geofft
Parent article: Ubuntu's new app developer upload process proposal

remember that this is not a set of requirements for all applications in Ubuntu, it's only for those who don't want to be in the main repository and instead want to be in the 'software store' with little review

nothing prevents them from doing a more complete review of other apps and allowing them in the software store without being limited like this.

This seems to me to be a great balance between the "install anything with no review and plan on finding malware after the fact" world of android and the "we control everything, don't make us angry, you wouldn't like us angry" world of Apple (where they still end up catching malware after the fact)

making these sorts of apps distinctly second-class citizens, in exchange for reduced review requirements, seems like a good compromise.


(Log in to post comments)

Sandboxed file access

Posted Sep 6, 2012 1:35 UTC (Thu) by geofft (subscriber, #59789) [Link]

Well, sure, but my thesis here is basically that if the open-a-file API is unusable, nobody will use this approach. It's very easy to design secure and unusable systems. So the effort for it would be wasted, and one of the existing submission interfaces, e.g. manually-reviewed Extras or Debian packaging, would be the only things people actually use.

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds