#3920 NORM Untriag: Policy decision needed on what constitutes an admissible update request.

[Zarro Boogs per Child]

#3920: Policy decision needed on what constitutes an admissible update request.
-------------------------------+--------------------------------------------
 Reporter:  mstone             |       Owner:  jg       
     Type:  task               |      Status:  new      
 Priority:  normal             |   Milestone:  Untriaged
Component:  distro             |     Version:           
 Keywords:  updates, security  |    Verified:  0        
-------------------------------+--------------------------------------------
 The framework for this question is:

 "Given <credential>, please update to tree <hash>".

 The question is, what credentials are adequate to cause us to perform an
 update?

 Clearly one answer should be receiving a valid message update message from
 Bentham. Clearly booting with a developer key and receiving a message
 signed with that key should also be adequate.

 Probably, we want to allow the XO user to decide to update to anything
 they want.

 Still, some decisions need to be made here.

-- 
Ticket URL: <https://dev.laptop.org/ticket/3920>
One Laptop Per Child <https://dev.laptop.org>
OLPC bug tracking system