Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhance security #146

Open
ski7777 opened this issue Dec 9, 2018 · 3 comments
Open

Enhance security #146

ski7777 opened this issue Dec 9, 2018 · 3 comments

Comments

@ski7777
Copy link
Member

ski7777 commented Dec 9, 2018

Currently all apps and the launcher run with the same rights. This can cause devastating security issues.
Proposal:
Create a new user account/group per app
Save the app files with ftc/ftc permissions and create app data folder with the app permissions
Run app with this permissions

If an app needs to access data of another app, either the developer of the accessed app has to allow this in the manifest (the user will be asked during installation) or the app can request it during run (here we should introduce a system where the user can revoke these permissions)

@ski7777 ski7777 added this to the v1.1 milestone Dec 9, 2018
@ski7777 ski7777 modified the milestones: v1.1, V1.0 Dec 9, 2018
@ski7777 ski7777 modified the milestones: V1.0, v1.1 Dec 30, 2022
@ski7777
Copy link
Member Author

ski7777 commented Dec 30, 2022

postponing to 1.1

@ski7777
Copy link
Member Author

ski7777 commented Jan 16, 2023

Just a weird proposal: Can we run apps in containers?

@ski7777 ski7777 self-assigned this Jan 16, 2023
@hypnotoad
Copy link
Collaborator

Just a weird proposal: Can we run apps in containers?
I think it will create lots of overhead in different places.

As security measurement, I think that we should make sure that the main appstore is well-maintained.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants