Dependencies from universe repo

[Jarek Foksa]

Thanks for fast response.

Node.js backend would be listening for requests from frontend (HTML5
code run inside Chromium). The possible requests are:
- read ~/config/my-app/config.json file
- write ~/config/my-app/config.json file
- read specified .json file from  /opt/my-app/data/ dir

Any other requests send to backend would be rejected. The backend does
not need root permissions to be started.

On Tue, Mar 13, 2012 at 8:17 PM, Allison Randal <allison at lohutok.net> wrote:
> On 03/13/2012 05:40 AM, Jarek Foksa wrote:
>> Hi,
>>
>> Can commercial app have packages from universe repository as dependencies?
>> To be more specific, I would like to use Node.js for filesystem access
>> and Chromium for rendering the UI (started in app mode). Is such
>> configuration allowed?
>
> Packages in commercial and extras (the free software equivalent of
> commercial) are allowed to depend on packages in universe. See the full
> details at:
>
> https://wiki.ubuntu.com/ExtensionRepositoryPolicy
>
> Chromium in app mode would certainly be fine. My only question about
> Node.js for filesystem access would be related to the security policy.
> Basically, what are you using it for? As long as you're only reading
> data/config for the app, and only writing data/config to the user's home
> directory, you're fine. We would want to make sure there's no chance of
> writing outside the user's home directory, and no chance of reading
> privileged files.
>
> Allison