Dependencies from universe repo

[Allison Randal]

Okay, thanks. Sounds like it'll be fine.

Allison

On 03/13/2012 11:14 PM, Jarek Foksa wrote:
> Thanks for fast response.
> 
> Node.js backend would be listening for requests from frontend (HTML5
> code run inside Chromium). The possible requests are:
> - read ~/config/my-app/config.json file
> - write ~/config/my-app/config.json file
> - read specified .json file from  /opt/my-app/data/ dir
> 
> Any other requests send to backend would be rejected. The backend does
> not need root permissions to be started.
> 
> On Tue, Mar 13, 2012 at 8:17 PM, Allison Randal <allison at lohutok.net> wrote:
>> On 03/13/2012 05:40 AM, Jarek Foksa wrote:
>>> Hi,
>>>
>>> Can commercial app have packages from universe repository as dependencies?
>>> To be more specific, I would like to use Node.js for filesystem access
>>> and Chromium for rendering the UI (started in app mode). Is such
>>> configuration allowed?
>>
>> Packages in commercial and extras (the free software equivalent of
>> commercial) are allowed to depend on packages in universe. See the full
>> details at:
>>
>> https://wiki.ubuntu.com/ExtensionRepositoryPolicy
>>
>> Chromium in app mode would certainly be fine. My only question about
>> Node.js for filesystem access would be related to the security policy.
>> Basically, what are you using it for? As long as you're only reading
>> data/config for the app, and only writing data/config to the user's home
>> directory, you're fine. We would want to make sure there's no chance of
>> writing outside the user's home directory, and no chance of reading
>> privileged files.
>>
>> Allison
>