Mir Gains Support For "Trusted Prompt Sessions"

[phoronix]

Phoronix: Mir Gains Support For "Trusted Prompt Sessions"

The latest addition to Mir is spport for trusted prompt sessions, a new Ubuntu security feature...

http://www.phoronix.com/vr.php?view=MTcyMTg

[uid313]

Ctrl+Alt+Del

How about secure login with ctrl+alt+del?

[Britoid]

Can anyone explain what this actually means for the end-user?

[uid313]

Can anyone explain what this actually means for the end-user?

If I understand it correctly then it means applications that require superuser privileges can request them and up comes an unspoofable/trusted always-on-top dialog/window that asks you for your password.

[Attent?ter]

If I understand it correctly then it means applications that require superuser privileges can request them and up comes an unspoofable/trusted always-on-top dialog/window that asks you for your password.

So they are making Ubuntu even more like Windows

[uid313]

So they are making Ubuntu even more like Windows

No, Unix had sudo since 80s long before Windows has UAC.
And this is basically a graphical implementation of sudo, just like the existing gksudo in Linux.

So this is more like an improved version of gksudo with better security.

[AlanGriffiths]

Can anyone explain what this actually means for the end-user?

It is a small part of a larger scenario so the direct effect on the end user is limited.

Suppose you're using a weather application which needs (or at least requests) your location service.

Trusted Prompt Sessions are the way that "can this program access your location?", "activate location services?" prompt(s) are identified to the shell as associated with the originating application. (They can then be incorporated into a meaningful display - made app modal, overlaid, etc.)

[Britoid]

It is a small part of a larger scenario so the direct effect on the end user is limited.

Suppose you're using a weather application which needs (or at least requests) your location service.

Trusted Prompt Sessions are the way that "can this program access your location?", "activate location services?" prompt(s) are identified to the shell as associated with the originating application. (They can then be incorporated into a meaningful display - made app modal, overlaid, etc.)

Now that makes sense.

Basically Canonical want a permission system similar to OS X. The current gksudo,gksu interfaces are very easy to fake.

[Pajn]

Now that makes sense.

Basically Canonical want a permission system similar to OS X. The current gksudo,gksu interfaces are very easy to fake.

See this for more information http://developer.ubuntu.com/publish/...lick-packages/

[TheOne]

Now that makes sense.

Basically Canonical want a permission system similar to OS X. The current gksudo,gksu interfaces are very easy to fake.

How is sudo easy to fake??? can you elaborate on that?

Anyway they are implementing something similar to android permissions system since they are now going to support 1 click applications.