Page 1 of 7 1 23 Last »
Reply
Thread Tools
momcilo is offline momcilo
2011-09-12 , 22:58
Posts: 673 | Thanked: 856 times | Joined on Mar 2006
#1
It was mentioned several times, I've decided to create this thread to determine what is aegis, and how it will affect us.

In short aegis is actually part of:
Mobile Simplified Security Framework (MSSF)

EDIT: Renamed the topic title.
EDIT2: Renamed again
__________________
http://gpl-violations.org/faq/violation-faq.html
Last edited by momcilo; 2011-09-14 at 09:12.
 

The Following 5 Users Say Thank You to momcilo For This Useful Post:
AlMehdi is offline AlMehdi
2011-09-12 , 23:07
Posts: 1,751 | Thanked: 844 times | Joined on Feb 2010 @ Sweden
#2
Aegis is the new security framework of Harmattan. A pain in the *** if you ask me.
__________________
You like what i do? Donate!

Make your desktop look awesome - use the AwOken Theme with the AwOken Icon Theme.

Add me on twitter @almehdin
Visit the swedish maemo/meego community forums
 

The Following 2 Users Say Thank You to AlMehdi For This Useful Post:
Radicalz38 is offline Radicalz38
2011-09-12 , 23:09
Posts: 1,042 | Thanked: 430 times | Joined on May 2010
#3
If you ever used symbian it's more of the security thingy they made that you cannot install unsigned applications.
 

The Following 2 Users Say Thank You to Radicalz38 For This Useful Post:
Acidspunk is offline Acidspunk
2011-09-13 , 00:05
Posts: 371 | Thanked: 252 times | Joined on Nov 2010
#4
Do you need to have a certificate and sign all your apps like symbian? That was a major pain in the ***. Especially for homebrew apps.
 

The Following 2 Users Say Thank You to Acidspunk For This Useful Post:
marxian's Avatar
marxian is offline marxian
2011-09-13 , 01:40
Posts: 2,448 | Thanked: 9,523 times | Joined on Aug 2010 @ Wigan, UK
#5
You don't need to sign applications, but applications need to request permission to access the tracker, use dbus etc. This is done by including a .aegis file in your .deb package that uses an XML-like syntax.
__________________
'Men of high position are allowed, by a special act of grace, to accomodate their reasoning to the answer they need. Logic is only required in those of lesser rank.' - J K Galbraith

My website

GitHub
 

The Following 17 Users Say Thank You to marxian For This Useful Post:
Radicalz38 is offline Radicalz38
2011-09-13 , 05:30
Posts: 1,042 | Thanked: 430 times | Joined on May 2010
#6
Still same like symbian...

Symbian = Without .cer & .key to sign your sisx files = No Permission
Meego = Without .aegis to include in your deb files = No Permission
 

The Following 3 Users Say Thank You to Radicalz38 For This Useful Post:
tuxsavvy is offline tuxsavvy
2011-09-13 , 07:05
Posts: 502 | Thanked: 366 times | Joined on Jun 2010 @ /dev/null
#7
Aegis here in detail thanks to joerg_rw. Paraphrasing some quotes (from infobot on #maemo IRC channel):
Originally Posted by infobot
The purpose of this framework is: ... to make sure that the platform meets the requirements set by third party software that requires a safe execution environment.
More information is also available on wikipedia according to infobot
__________________
 

The Following 5 Users Say Thank You to tuxsavvy For This Useful Post:
ajack's Avatar
ajack is offline ajack
2011-09-13 , 07:36
Posts: 288 | Thanked: 175 times | Joined on Oct 2010 @ Petaling Jaya, Selangor, Malaysia
#8
Thanks for this discussion, am skipping the N9 then... I saw how such a mechanism killed UIQ3 on Symbian...
__________________
Visit my blog at http://lifewithmaemo.blogspot.com or my website at http://www.renegade-uiq.com
 

The Following 4 Users Say Thank You to ajack For This Useful Post:
momcilo is offline momcilo
2011-09-13 , 08:58
Posts: 673 | Thanked: 856 times | Joined on Mar 2006
#9
Originally Posted by marxian View Post
You don't need to sign applications, but applications need to request permission to access the tracker, use dbus etc. This is done by including a .aegis file in your .deb package that uses an XML-like syntax.
Thank you for pointing me to the right direction. The first time the aegis was mentioned I've failed to find online documentation (either due to the missing "dbus" keyword or it simply was not there)

For all interested Harmattan documentation on security is here.

The information on aegis syntax is here.


So far it sounds like TPM, which if it is true s*** big time.
__________________
http://gpl-violations.org/faq/violation-faq.html
 

The Following 2 Users Say Thank You to momcilo For This Useful Post:
javispedro's Avatar
javispedro is offline javispedro
2011-09-13 , 09:06
Posts: 2,355 | Thanked: 5,249 times | Joined on Jan 2009 @ Barcelona
#10
Sadly, the problem with Aegis comes with its policy; currently, you are still to see <sarcasm> "the best of it" </sarcasm> : its current policy is rather allowing to applications from the unknown source (aka unsigned applications).

How this policy will be in later firmwares is something I don't know. The hints that are in the current firmware's restok.conf file do not look good, but for the time being, I am giving them the benefit of the doubt.
 

The Following 9 Users Say Thank You to javispedro For This Useful Post:
Reply
Page 1 of 7 1 23 Last »

Tags
locked boot, neutered, trecherous

« Previous Thread | Next Thread »
Thread Tools

 
Forum Jump


All times are GMT. The time now is 05:26.

Contact Us - Home - Archive - Top