[sugar] [OLPC Security] P_READ_LOGS

[Benjamin M. Schwartz]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jameson "Chema" Quinn wrote:
| For when we actually have bitfrost permissions in the interface, I propose
| another simple bitfrost permission: P_READ_LOGS.

I agree that reading logs is a valuable capability for Sugar to provide.
I don't see why any new Bitfrost permissions are required to enable it.

The easiest way to present logs, especially failure logs, is to make them
available through the standard Journal/Datastore interface.  For example,
we have some agreement that when an Activity fails to launch, the failure
should appear as such in the Journal time-view, connected to an object
representing the log file for that failure.  This log object has a "text"
type, and so can naturally be opened by any Activity that accepts this
type.  No additional permissions are required.  The user is responsible
for determining when to provide both sensitive data and P_NETWORK to the
same Activity.

Perhaps it would be helpful if you could give an example of a case in
which a P_READ_LOGS permission is the best solution, and better than
simply exposing the logs through the Journal.

- --Ben
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkifqvEACgkQUJT6e6HFtqT6hACfc6zPgteAJRf1zFWD6WjGAQLc
lREAn1Baic0HhwGDiOGLHB/diN5XLOh1
=Xpe7
-----END PGP SIGNATURE-----