Gunnar Wagenknecht | 2 Jan 10:12
Favicon
Gravatar

Security Incubator & Extension Registry

Hi!

Is there any security related work in the Equinox incubator? From the
website it looks like there is some but it looks more like some abstract
documents.

For example, I'm looking for a way to limit certain extensions to be
contributed only by a very small subset of plug-ins. I could do it
myself when evaluating the contributed extension but I wonder if there
is some framework API in place/planning for this.

Cu, Gunnar

--

-- 
Gunnar Wagenknecht
gunnar@...
http://wagenknecht.org/

Oleg Besedin | 2 Jan 16:50
Picon
Gravatar

Re: Restrict access to view depending on a user profile


Hi Anis,
You can also take a look at the Eclipse JAAS:

http://sourceforge.net/projects/eclipse-jaas

Sincerely,
Oleg Besedin



"zouaoui anis" <anis.zouaoui-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
Sent by: equinox-dev-bounces-j9T/66MeVpFAfugRpC6u6w@public.gmane.org

12/25/2006 05:27 PM

Please respond to
Equinox development mailing list <equinox-dev-j9T/66MeVpFAfugRpC6u6w@public.gmane.org>

To
equinox-dev-j9T/66MeVpFAfugRpC6u6w@public.gmane.org
cc
Subject
[equinox-dev] Restrict access to view depending on a user profile





Hi,

I'm trying to restrict access to some views on my RCP application
depending on user profile, users can have access to perspectives but
not to one view of the perspective.

I've tried with the ExtensionRegistry.removeExtension (...) method but
I found that with non master token I can just add/remove "non
persisted" extension from the ExtensionRegistry.

I sow that Eclipse 3.3 propose XSLT transformation on the OSGI Level
to filter the  plugin.xml file, but it still in the incubator stage,

Is there any other "Eclipse compatible" way to restrict access to my views ?

Regards,
Anis
_______________________________________________
equinox-dev mailing list
equinox-dev-j9T/66MeVpFAfugRpC6u6w@public.gmane.org
https://dev.eclipse.org/mailman/listinfo/equinox-dev

Oleg Besedin | 2 Jan 17:21
Picon
Gravatar

Re: Security Incubator & Extension Registry


Hi Gunnar,
So far Equinox efforts on security-related items were limited to investigation of Sword4J use (Java security permissions). It is all in the exploratory stage as we found that "brute force" approach would take too much effort in both initial implementation and maintenance.

The idea here is to have the basics figured out first, then move to higher-level items such as extension registry and OSGi services. As most items go, priority of this depends on how much interest it gets from the community.

At present there is no API to limit contributions of extensions. As always, patches are welcome; just keep in mind that this is the area likely to be explored more in future and we need to be careful about adding new APIs to it.

Sincerly,
Oleg Besedin



Gunnar Wagenknecht <gunnar-DDAdSCQIZD/oSeNpYEG0Jg@public.gmane.org>
Sent by: equinox-dev-bounces-j9T/66MeVpFAfugRpC6u6w@public.gmane.org

01/02/2007 04:12 AM

Please respond to
Equinox development mailing list <equinox-dev-j9T/66MeVpFAfugRpC6u6w@public.gmane.org>

To
equinox-dev-j9T/66MeVpFAfugRpC6u6w@public.gmane.org
cc
Subject
[equinox-dev] Security Incubator & Extension Registry





Hi!

Is there any security related work in the Equinox incubator? From the
website it looks like there is some but it looks more like some abstract
documents.

For example, I'm looking for a way to limit certain extensions to be
contributed only by a very small subset of plug-ins. I could do it
myself when evaluating the contributed extension but I wonder if there
is some framework API in place/planning for this.

Cu, Gunnar

--
Gunnar Wagenknecht
gunnar-DDAdSCQIZD/oSeNpYEG0Jg@public.gmane.org
http://wagenknecht.org/

_______________________________________________
equinox-dev mailing list
equinox-dev-j9T/66MeVpFAfugRpC6u6w@public.gmane.org
https://dev.eclipse.org/mailman/listinfo/equinox-dev

David Leangen | 3 Jan 05:55

Standard practice for deploying in daemon mode?


Hello!

I am just wondering if there is a standard practice or maybe some code
available for deploying Equinox in daemon mode on Linux...

I usually use djb's daemontools for this kind of thing, but I thought I'd
check here first.

Any suggestions would be most welcome.

Thank you!
David

Thomas Watson | 3 Jan 16:02
Picon
Favicon

Re: How do I dynamically install and attach a fragment?


Hi,

Simon is correct, you need to use either PackageAdmin.resolveBundles(...) or PackageAdmin.refreshPackages(...) to force a fragment to resolve.  When launching from PDE, the update configurator bundle uses PackageAdmin to force all possible bundles to resolve.  When you install a bundle yourself you must do something to force it to resolve.  For fragment bundles the only way to force them to resolve is to use PackageAdmin.

The two PackageAdmin methods (resolveBundles(...) and refreshPackages(...)) have different usecases.

-  If you have a fragment which you would like to resolve and attach to an existing host bundle which is already resolved then you must use PackageAdmin.resolveBundles(...).  This method will attempt to attach a fragment to any available host bundles.  If the host bundle is already in the RESOLVED state then a fragment can only be attached dynamically if it does not add any new constraints to the host.

-  If you have a fragment which adds new constraints (i.e. new Import-Package or Require-Bundle headers), then you must use PackageAdmin.refreshPackages to force the host bundle to re-resolve.  This is because we cannot dynamically add new constraints to an already RESOLVED host bundle from fragment bundles.

Tom




"Simon Kaegi" <simon.kaegi-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
Sent by: equinox-dev-bounces <at> eclipse.org

12/29/2006 11:58 AM

Please respond to
Equinox development mailing list <equinox-dev-j9T/66MeVpFAfugRpC6u6w@public.gmane.org>

To
"Equinox development mailing list" <equinox-dev-j9T/66MeVpFAfugRpC6u6w@public.gmane.org>
cc
Subject
Re: [equinox-dev] How do I dynamically install and attach a fragment?





Hi Matthew,
 
What you're doing sounds right to me.
Is the fragment showing up as UNRESOLVED in the console?
If you installed the fragment first, you might need to use PackageAdmin.resolveBundles(...) and possibly refreshPackages(...) to get everything set correctly.
 
-Simon
----- Original Message -----
From: Matthew Webster
To: Equinox development mailing list
Sent: Friday, December 29, 2006 6:32 AM
Subject: [equinox-dev] How do I dynamically install and attach a fragment?


I am trying to use BundleContext.installBundle() to install a fragment and its host. However when I use Bundle.loadClass() (for the host) I cannot resolve any classes in the fragment. If use PDE (JUnit Plug-in Test) it works. I notice that in the failing case querying the fragments gives no host and vice versa for the host. Is there an additional API I must call to attach the fragment? Is the order in which I install the bundles important?

Thanks in advance.

Matthew Webster
AOSD Project
Java Technology Centre, MP146
IBM Hursley Park, Winchester,  SO21 2JN, England
Telephone: +44 196 2816139 (external) 246139 (internal)
Email: Matthew Webster/UK/IBM <at> IBMGB, matthew_webster-ygUJEDcBm8rQT0dZR+AlfA@public.gmane.org
http://w3.hursley.ibm.com/~websterm/
Jeff McAffer | 4 Jan 04:52
Picon

Re: Standard practice for deploying in daemon mode?


Great question.  I recall someone looking into this in the past but do not recall the result.  It would be great if you could outline the requirements, issues and approaches in a bug report.  This is an interesting usecase that should be covered by the code and/or doc as required.

Does this tie into how Eclipse is launched?  We are redoing the launcher now so perhaps there is something we can/should do there?

Jeff



"David Leangen" <osgi-9kIQqJcmqRTR7s880joybQ@public.gmane.org>
Sent by: equinox-dev-bounces-j9T/66MeVpFAfugRpC6u6w@public.gmane.org

01/02/2007 11:55 PM

Please respond to
Equinox development mailing list <equinox-dev-j9T/66MeVpFAfugRpC6u6w@public.gmane.org>

To
<equinox-dev-j9T/66MeVpFAfugRpC6u6w@public.gmane.org>
cc
Subject
[equinox-dev] Standard practice for deploying in daemon mode?






Hello!

I am just wondering if there is a standard practice or maybe some code
available for deploying Equinox in daemon mode on Linux...

I usually use djb's daemontools for this kind of thing, but I thought I'd
check here first.


Any suggestions would be most welcome.


Thank you!
David


_______________________________________________
equinox-dev mailing list
equinox-dev-j9T/66MeVpFAfugRpC6u6w@public.gmane.org
https://dev.eclipse.org/mailman/listinfo/equinox-dev

Matthew Webster | 4 Jan 18:49
Picon
Favicon

Re: How do I dynamically install and attach a fragment?


Tom and Simon,

I had been using resolveBundles() without success. However your reference to adding constraints made me look more closely at my code and I found that the fragment had dependencies that I was not loading. It is working now.

Thanks

Matthew Webster
AOSD Project
Java Technology Centre, MP146
IBM Hursley Park, Winchester,  SO21 2JN, England
Telephone: +44 196 2816139 (external) 246139 (internal)
Email: Matthew Webster/UK/IBM <at> IBMGB, matthew_webster-ygUJEDcBm8rQT0dZR+AlfA@public.gmane.org
http://w3.hursley.ibm.com/~websterm/
Jeff McAffer | 6 Jan 01:44
Picon

3.2.2 fixes


Just a reminder that 3.2.2 is coming up real fast now.  Please review all open 3.2.2 issues and either request approval to fix or close or move the milestone.

Jeff
Alex Blewitt | 6 Jan 02:22
Picon
Gravatar

Re: 3.2.2 fixes

Not that it's an Equinox issue, but I think the documentation for bug
164785 should be backported ...

http://www.eclipsezone.com/eclipse/forums/t88099.html
https://bugs.eclipse.org/bugs/show_bug.cgi?id=164875

Alex

On 06/01/07, Jeff McAffer <Jeff_McAffer@...> wrote:
>
> Just a reminder that 3.2.2 is coming up real fast now.  Please review all
> open 3.2.2 issues and either request approval to fix or close or move the
> milestone.
>
> Jeff
>
> _______________________________________________
> equinox-dev mailing list
> equinox-dev@...
> https://dev.eclipse.org/mailman/listinfo/equinox-dev
>
>
>
Thomas Watson | 8 Jan 23:39
Picon
Favicon

Equinox projects tagged for 3.3 I-Build


The map file has been updated for the following Bug changes:
+ Bug 168425. [server] Http registry is missing schema files in source distribution (FIXED)
+ Bug 168820. AIOOBE on activating equinox plugin (FIXED)
+ Bug 169469. Single certificate chains are not verified with their own public key (FIXED)
+ Bug 169717. FrameworkEvent of type ERROR fired when starting an INSTALLED bundle (FIXED)
+ Bug 169806. org.eclipse.core.runtime.ListenerList - null-handling in API (FIXED)

The following projects have changed:
org.eclipse.osgi.tests
org.eclipse.equinox.http.registry
org.eclipse.equinox.app
org.eclipse.osgi
org.eclipse.equinox.common

Tom

Gmane