Enhanced Upstart User Sessions for the Raring desktop

[Evan Huus]

Hi James,

I've only scanned it briefly at this point, but I have one question
regarding security. At the moment the spec. states that system events will
by default be available to user sessions as well, but I think this is
overly permissive. While I can't actually think of a current system event
that really must be hidden, I feel that on principle system events should
not be visible to user sessions unless explicitly marked as such.

I would suggest a change to the new event syntax such that

- foo and ::foo are always equivalent, and emit an event only visible
within the current upstart namespace (system or user)
- :sys:foo and :user:foo are unchanged
- :all:foo (or :global:foo or :public:foo) emits an event visible to other
upstart namespaces as well

Thoughts?

Cheers,
Evan


On Tue, Nov 20, 2012 at 5:09 AM, James Hunt <james.hunt at ubuntu.com> wrote:

> Here is the draft plan for 'Enhanced Upstart User Sessions' ([1]), which
> will be
> used to supervise desktop sessions in Ubuntu:
>
> https://wiki.ubuntu.com/FoundationsTeam/Specs/RaringUpstartUserSessions
>
> = Summary =
>
> Allow Upstart to run as a non-privileged user to supervise a session in an
> event-based manner.
>
> This brings many advantages including:
>
> - more dynamic and efficient session startup (desktop services only get
> started
> *when required*).
> - reliable session shutdown.
> - automatic job output logging.
> - more efficient use of system resources (helping to maximise battery life
> for
> example).
>
> Comments Welcome. If you would like to get involved in this project,
> please let
> me know.
>
> Kind regards,
>
> James.
>
> [1] -
>
> https://blueprints.launchpad.net/ubuntu/+spec/foundations-r-upstart-user-session-enhancements
> --
> James Hunt
> ____________________________________
> http://upstart.ubuntu.com/cookbook
> http://upstart.ubuntu.com/cookbook/upstart_cookbook.pdf
>
> --
> upstart-devel mailing list
> upstart-devel at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/upstart-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/upstart-devel/attachments/20121120/2529e5cf/attachment.html>