×

Discussion Board

Results 1 to 3 of 3
  1. #1
    Registered User
    Join Date
    Nov 2006
    Posts
    45

    Aegis security with Python libraries/scripts

    I've been reading up on the Aegis FAQ at http://harmattan-dev.nokia.com/docs/...urity_FAQ.html and after reading this it is still not entirely clear how Aegis will/should behave with things like Python.

    Specifically I'm porting OpenCV which has Python bindings. Ideally I would grant the libraries that deal with video the GRP::video privilege but it seems that you also need to build the package to be aware of the binary that may need the privileges. This would be straightforward if I knew that the Aegis system will make the determination based on /usr/bin/python being the binary, but I don't know if it will be /usr/bin/python or the path of the script which calls python.

    In this second case it would still be possible for the script (assuming it is packaged) to request the additional privileges but in the first case it might not be possible - especially if the upstream maintainer of Python for Harmattan has not put an Aegis request section in the manifest for that package (or if it lacks a manifest altogether).

    Could someone shed some light on this slightly confusing area?

  2. #2
    Super Contributor
    Join Date
    Mar 2009
    Posts
    1,024

    Re: Aegis security with Python libraries/scripts

    Hi,
    Libraries cannot have credentials. Only real executable applications can.

    Interpreted scripts are treated as executables (if they start the interpreter with #!),
    and can have manifest and request credentials. However, if you do this, you have
    to keep in mind that a manifest adding credentials to an executable (or script),
    makes that equivalent of "setuid executable": it has the credentials regardless of
    who starts it. Any user or web widget may be able to run it.

  3. #3
    Registered User
    Join Date
    Nov 2006
    Posts
    45

    Re: Aegis security with Python libraries/scripts

    OK, that makes sense. Thanks for your prompt answer!

Similar Threads

  1. Mapping a URI to Python scripts
    By ganapathy in forum Mobile Web Server
    Replies: 0
    Last Post: 2009-07-29, 11:37
  2. Python scripts updating themselves?
    By blackpaw in forum Symbian
    Replies: 3
    Last Post: 2008-07-18, 08:05
  3. Run more than one Python scripts on Device
    By croozeus in forum Symbian
    Replies: 0
    Last Post: 2007-10-13, 13:20
  4. Replies: 3
    Last Post: 2007-03-13, 06:50
  5. Replies: 3
    Last Post: 2007-01-14, 12:09

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •