[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[equinox-dev] Re: load time security

Awesome!  Can you tell me where the code is?  Thanks.

-eric



|------------>
| From:      |
|------------>
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
  |equinox-dev-request@xxxxxxxxxxx                                                                                                                   |
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| To:        |
|------------>
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
  |equinox-dev@xxxxxxxxxxx                                                                                                                           |
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| Date:      |
|------------>
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
  |05/23/2007 11:03 PM                                                                                                                               |
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| Subject:   |
|------------>
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
  |equinox-dev Digest, Vol 25, Issue 26                                                                                                              |
  >--------------------------------------------------------------------------------------------------------------------------------------------------|





Send equinox-dev mailing list submissions to
             equinox-dev@xxxxxxxxxxx

To subscribe or unsubscribe via the World Wide Web, visit
             https://dev.eclipse.org/mailman/listinfo/equinox-dev
or, via email, send a message with subject or body 'help' to
             equinox-dev-request@xxxxxxxxxxx

You can reach the person managing the list at
             equinox-dev-owner@xxxxxxxxxxx

When replying, please edit your Subject line so it is more specific
than "Re: Contents of equinox-dev digest..."


Today's Topics:

   1. load time security (Eric W Li)
   2. Equinox projects tagged for 3.3 I-Build (Thomas Watson)
   3. Re: load time security (Pascal Rapicault)
   4. Re: Multiple users and the Equinox console (Jeff McAffer)
   5. Re: Status of bundles (Jeff McAffer)


----------------------------------------------------------------------

Message: 1
Date: Wed, 23 May 2007 15:54:39 -0400
From: Eric W Li <eric_w_li@xxxxxxxxxx>
Subject: [equinox-dev] load time security
To: equinox-dev@xxxxxxxxxxx
Message-ID:

<OFA2118BAF.C954A98C-ON852572E4.006AFB6F-852572E4.006D5F18@xxxxxxxxxx>
Content-Type: text/plain; charset=US-ASCII


Hi,

We are starting to do some work around the load time security area.
Basically the requirement is to enable and disable bundles based on a
notion of a trusted bundle.  We have opened a bug and summary at
https://bugs.eclipse.org/bugs/show_bug.cgi?id=153847
http://wiki.eclipse.org/index.php/Equinox:_Trusted_Bundles

If you have any good suggestions, please let us know.  Thanks.

-eric



------------------------------

Message: 2
Date: Wed, 23 May 2007 17:08:30 -0500
From: Thomas Watson <tjwatson@xxxxxxxxxx>
Subject: [equinox-dev] Equinox projects tagged for 3.3 I-Build
To: equinox-dev@xxxxxxxxxxx
Message-ID:

<OF911D79DE.F92736D7-ON862572E4.0079193C-862572E4.00799BA4@xxxxxxxxxx>
Content-Type: text/plain; charset="us-ascii"

The map file has been updated for the following Bug changes:
+ Bug 187573. [launcher] Eclipse crashes when attempting to launch with
'-consolelog' under cygwin (FIXED)
+ Bug 187821. [Launcher] Main should consume -startup argument (FIXED)
+ Bug 188131. [server] Servletbridge and SecurityManager (FIXED)
+ Bug 188554. [Regression] Classpath computation is no longer resilient in
dev mode (FIX)
+ Bug 188678. Clean up launcher javadoc (FIXED)
+ Bug 188749. [server] Update Copyrights for all server components (FIXED)

The following projects have changed:
org.eclipse.osgi.tests
org.eclipse.equinox.launcher.win32.win32.x86
org.eclipse.equinox.servletbridge
org.eclipse.equinox.executable
org.eclipse.equinox.launcher
org.eclipse.equinox.jsp.jasper
org.eclipse.equinox.http.servletbridge
org.eclipse.equinox.http.jetty
org.eclipse.equinox.launcher.wpf.win32.x86
org.eclipse.equinox.jsp.jasper.registry
org.eclipse.equinox.http.registry
org.eclipse.osgi
org.eclipse.equinox.http.servlet

Tom

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://dev.eclipse.org/mailman/listinfo/equinox-dev/attachments/20070523/8bc8427d/attachment.html


------------------------------

Message: 3
Date: Wed, 23 May 2007 22:06:12 -0400
From: Pascal Rapicault <Pascal_Rapicault@xxxxxxxxxx>
Subject: Re: [equinox-dev] load time security
To: Equinox development mailing list <equinox-dev@xxxxxxxxxxx>
Cc: equinox-dev@xxxxxxxxxxx, equinox-dev-bounces@xxxxxxxxxxx
Message-ID:

<OFC44AD921.6ADA37BB-ON852572E5.000B31E3-852572E5.000B7877@xxxxxxxxxx>
Content-Type: text/plain; charset=US-ASCII

In the referenced wiki document you mention two approaches "Installed ->
Resolved approach", "Resolved -> Active approach" and you decided to go
with the first one because problems you enumerate.
However you seem to forget another approach that is "resolved --> class /
resource loaded" which would not require extensive change to the resolver
(as the first one would), 'solve' the problems from solution 2, woudl also
give you much more flexibility in terms of user experience.
HTH,

PaScaL



             Eric W Li
             <eric_w_li@xxxxxx
             .com>                                                      To
             Sent by:                  equinox-dev@xxxxxxxxxxx
             equinox-dev-bounc                                          cc
             es@xxxxxxxxxxx
                                                                   Subject
                                       [equinox-dev] load time security
             05/23/2007 03:54
             PM


             Please respond to
                  Equinox
                development
               mailing list
             <equinox-dev@ecli
                 pse.org>







Hi,

We are starting to do some work around the load time security area.
Basically the requirement is to enable and disable bundles based on a
notion of a trusted bundle.  We have opened a bug and summary at
https://bugs.eclipse.org/bugs/show_bug.cgi?id=153847
http://wiki.eclipse.org/index.php/Equinox:_Trusted_Bundles

If you have any good suggestions, please let us know.  Thanks.

-eric

_______________________________________________
equinox-dev mailing list
equinox-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/equinox-dev




------------------------------

Message: 4
Date: Wed, 23 May 2007 22:53:01 -0400
From: Jeff McAffer <Jeff_McAffer@xxxxxxxxxx>
Subject: Re: [equinox-dev] Multiple users and the Equinox console
To: Equinox development mailing list <equinox-dev@xxxxxxxxxxx>
Message-ID:

<OF050FBEE4.DE63A0D0-ON852572E5.000FDA07-852572E5.000FF7B3@xxxxxxxxxx>
Content-Type: text/plain; charset="us-ascii"

Or you can implement a web ui using one of the HTTP services available in
Equinox.

The simple answer is that this just was not a requirement.  Contributions
are welcome :-)

Jeff




Pascal Rapicault/Ottawa/IBM@IBMCA
Sent by: equinox-dev-bounces@xxxxxxxxxxx
05/23/2007 11:37 AM
Please respond to
Equinox development mailing list <equinox-dev@xxxxxxxxxxx>


To
Equinox development mailing list <equinox-dev@xxxxxxxxxxx>
cc
"Equinox development mailing list" <equinox-dev@xxxxxxxxxxx>,
equinox-dev-bounces@xxxxxxxxxxx
Subject
Re: [equinox-dev] Multiple users and the Equinox console






The intent of the console is not to be a full blown remote management
facility, but simply a lightweight way to connect to the framework. This
is
why there is no support for multiple users, secure connections and other
fancy things like these.
Also note that in the future we are hoping to replace our own console in
favor of the felix or kp one because we don't really like our flat
namespace.

It JMX is ok with you, you may want to give a shot at the JMX support we
have in the equinox incubator
(http://www.eclipse.org/equinox/incubator/monitoring/index.php)

HTH,

PaScaL





             "Jeremy Volkman"
             <jvolkman@xxxxxxx
             om>                                                        To

             Sent by:                  "Equinox development mailing list"
             equinox-dev-bounc         <equinox-dev@xxxxxxxxxxx>
             es@xxxxxxxxxxx                                             cc


                                                                   Subject

             05/23/2007 11:18          [equinox-dev] Multiple users and
             AM                        the Equinox console


             Please respond to
                  Equinox
                development
               mailing list
             <equinox-dev@ecli
                 pse.org>






Hi all,

Is there any fundamental reason that the (remote) Equinox console only
supports one simultaneous user, or was multi-user support just out of
scope at implementation time?  My first thought was that it had to do
with synchronization issues (e.g., only one person should be
removing/installing bundles at a time). However, two bundles should be
able to perform the same framework operations simultaneously.

We're using Equinox at the core of a long-running server app, and we
frequently use the console for some development and administrative
commands. We often run into the single user constraint when someone
forgets to log out, and it'd be nice if the console supported
simultaneous users.

- Jeremy
_______________________________________________
equinox-dev mailing list
equinox-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/equinox-dev


_______________________________________________
equinox-dev mailing list
equinox-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/equinox-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://dev.eclipse.org/mailman/listinfo/equinox-dev/attachments/20070523/c6fd4ae6/attachment.html


------------------------------

Message: 5
Date: Wed, 23 May 2007 23:03:14 -0400
From: Jeff McAffer <Jeff_McAffer@xxxxxxxxxx>
Subject: Re: [equinox-dev] Status of bundles
To: Equinox development mailing list <equinox-dev@xxxxxxxxxxx>
Message-ID:

<OF80E32371.F1CF80A8-ON852572E5.00103CC0-852572E5.0010E6F4@xxxxxxxxxx>
Content-Type: text/plain; charset="us-ascii"

When that chart came out, I recall some interaction with Piero where I
indicated that DS was not complete and had real issues.  I can't find the
message now and cannot say if the chart was updated to reflect these
comments.

Jeff




Thomas Watson <tjwatson@xxxxxxxxxx>
Sent by: equinox-dev-bounces@xxxxxxxxxxx
05/18/2007 11:58 AM
Please respond to
Equinox development mailing list <equinox-dev@xxxxxxxxxxx>


To
Equinox development mailing list <equinox-dev@xxxxxxxxxxx>
cc

Subject
Re: [equinox-dev] Status of bundles







For 3.3 Config Admin, Declarative Services and Wire admin will remain red.


After 3.3 the Equinox team will focus on graduating the following
contributions from Prosyst:

Declarative Services -
https://bugs.eclipse.org/bugs/show_bug.cgi?id=181733
Initial Provisioning -
https://bugs.eclipse.org/bugs/show_bug.cgi?id=181734
Wire Admin - https://bugs.eclipse.org/bugs/show_bug.cgi?id=181736
IO Connector - https://bugs.eclipse.org/bugs/show_bug.cgi?id=181737

We also will focus on graduating the Config Admin service from the
incubator:
Config Admin - https://bugs.eclipse.org/bugs/show_bug.cgi?id=162773

The chart at
http://www.pierocampanelli.info/articles/2007/01/22/status-of-opensource-osgi-containers

shows both Config Admin and Declarative Services with an OK- status from
Equinox.  Notice the '-' sign.  Does this indicate incubation is still
required?  If not then a new status needs to be added to indicate the
support is not production ready.

Tom



"Matthias Luebken" <matthias.luebken@xxxxxxxxx>
Sent by: equinox-dev-bounces@xxxxxxxxxxx
05/18/2007 04:29 AM

Please respond to
Equinox development mailing list <equinox-dev@xxxxxxxxxxx>


To
equinox-dev@xxxxxxxxxxx
cc

Subject
[equinox-dev] Status of bundles








Hi Equinox-Team

I was looking at Bundles-Status at http://www.eclipse.org/equinox/bundles/
.
And I am wandering if these status refelects the current development.
For example the Declerative Services are marked: status:red But in CVS
there is the org.eclipse.equinox.ds-Project.

I am especially asking in regards to this comparison:
http://www.pierocampanelli.info/articles/2007/01/22/status-of-opensource-osgi-containers


The author noted that the following optional services are missing:
Wire Admin (Partial), IOConnector, Initial Provisioning and UPnP

Now I am wandering what the status of the bundles/services will be in
final 3.3?

Thanks for your help.

Matthias
_______________________________________________
equinox-dev mailing list
equinox-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/equinox-dev
_______________________________________________
equinox-dev mailing list
equinox-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/equinox-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://dev.eclipse.org/mailman/listinfo/equinox-dev/attachments/20070523/ff79e67a/attachment.html


------------------------------

_______________________________________________
equinox-dev mailing list
equinox-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/equinox-dev


End of equinox-dev Digest, Vol 25, Issue 26
*******************************************