#5657 NORM Update.: Rainbow should check that loophole'd activities come from /usr/share/activities.

[Zarro Boogs per Child]

#5657: Rainbow should check that loophole'd activities come from
/usr/share/activities.
-----------------------+----------------------------------------------------
  Reporter:  cscott    |       Owner:  mstone                       
      Type:  defect    |      Status:  new                          
  Priority:  normal    |   Milestone:  Update.1                     
 Component:  security  |     Version:                               
Resolution:            |    Keywords:  security, rainbow-integration
  Verified:  0         |    Blocking:                               
 Blockedby:            |  
-----------------------+----------------------------------------------------

Comment(by cscott):

 SimCity doesn't work with security turned on, for instance.  That might be
 a start for a discussion about "downloaded" activities.

 There was some discussion that Log Viewer and Analyze might be stuck into
 the library as "downloadable activities" rather than installed by default;
 I don't think we can safely do that with the current deisolation scheme.

 I'm fine with changing our 'okay' to a list of okay *paths*.  That does
 seem like that would solve the present problem (at least for activities
 installed by default in our stable builds).

-- 
Ticket URL: <http://dev.laptop.org/ticket/5657#comment:4>
One Laptop Per Child <http://dev.laptop.org>
OLPC bug tracking system