phuig
|
2014-02-01
, 21:39
|
Posts: 16 |
Thanked: 2 times |
Joined on Dec 2013
|
#431
|
|
2014-02-02
, 01:17
|
|
Posts: 1,391 |
Thanked: 4,272 times |
Joined on Sep 2007
@ Vienna, Austria
|
#432
|
Messing with text files in this kind of configurations is stupid in my opinion.
I would love if there would be proper security and limitations for apps. I also want to be in charge of what permissions each app can get in my phone. It is nice if system could ask once if I want to grant Mitäkuuluu an access to contacts but it is not ok when system denies the access without asking anything and it is not ok if no harbour application can get such permissions.
The Following 5 Users Say Thank You to thp For This Useful Post: | ||
|
2014-02-02
, 07:37
|
|
Posts: 6,436 |
Thanked: 12,701 times |
Joined on Nov 2011
@ Ängelholm, Sweden
|
#433
|
The Following 7 Users Say Thank You to coderus For This Useful Post: | ||
|
2014-02-02
, 11:34
|
Posts: 9 |
Thanked: 2 times |
Joined on Jan 2014
|
#434
|
I agree. That file is not supposed to be edited by the user or by applications, that's why nobody has even tried to make it easily editable by applications (otherwise it'd have been a "privileges.d"-style folder where each application can install a list of required privileges as separate file).
There will be a proper permissions system in place, we're just not there yet. And yes, for Harbour, the current way is restricting access by default and then only explicitly granting permissions.
If you don't go the Harbour way, and really wanted to solve this somehow *right now*, you could e.g. have a postinst/prerm scriptlet that adds/removes your application binary file to the permissions file. That's still hack-ish and might require reinstalling of your application after a system upgrade.
Yes, that's coming. On the other hand, I'd argue that it's also not okay if every Harbour application would get all permissions (accessing contacts, etc..) by default without asking you. So for now, you kind-of can grant access to any such application manually already (by editing the privileges file as root), but not yet through some nice UI means.
Once a proper permissions system is in place, of course Harbour apps will be able to make use of it (and through that, get access to contacts if the user wants the app to get access to contacts).
By the way, with developer mode enabled, you can use "devel-su --privileged" to get a setgid privileged shell. For non-Harbour apps, you could have a setuid root helper that does setuid(nemo) + setgid(privileged) and then runs your application, which would also make it work. The implementation is left as an exercise to the reader.
|
2014-02-02
, 12:01
|
Posts: 10 |
Thanked: 2 times |
Joined on Feb 2014
@ Germany
|
#435
|
So you can still use current mitakuuluu version, but you need to modify /usr/share/mapplauncherd/privileges and add lines:
and do it after each system updateCode:/usr/bin/harbour-mitakuuluu,p /usr/bin/harbour-mitakuuluu-server,p
hm. you mean setuid and setgid are not restricted? good then, i'll just put binary itself to privileged group and it will work again.
devel-su chgrp privileged /usr/bin/harbour-mitakuuluu chgrp privileged /usr/bin/harbour-mitakuuluu-server
devel-su chgrp privileged /home/nemo/.whatsapp/whatsapp.db
The Following User Says Thank You to Eische For This Useful Post: | ||
|
2014-02-02
, 14:15
|
Posts: 16 |
Thanked: 2 times |
Joined on Dec 2013
|
#436
|
|
2014-02-02
, 15:24
|
|
Posts: 6,436 |
Thanked: 12,701 times |
Joined on Nov 2011
@ Ängelholm, Sweden
|
#437
|
|
2014-02-03
, 00:06
|
Posts: 144 |
Thanked: 242 times |
Joined on Nov 2007
@ Finland
|
#438
|
|
2014-02-03
, 06:45
|
Posts: 27 |
Thanked: 3 times |
Joined on Jan 2014
|
#439
|
|
2014-02-03
, 07:10
|
Posts: 10 |
Thanked: 2 times |
Joined on Feb 2014
@ Germany
|
#440
|
Hi, I just updated the phone to 1.0.3.8
I found that there's no lock screen notification of mitakuuluu...
is there any fix for it??
Tags |
coderus, it's a trapp, jolla, sailfish, whatsapp, whatscrapp |
|