From jg97986@sac.sfbay.sun.com Fri Jul 25 12:29:35 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m6PJTYTh029754 for ; Fri, 25 Jul 2008 12:29:35 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m6PJTUdX006765; Fri, 25 Jul 2008 20:29:34 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K4K00003U58R100@nwk-avmta-2.sfbay.sun.com>; Fri, 25 Jul 2008 12:29:32 -0700 (PDT) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K4K00E19U58BXB0@nwk-avmta-2.sfbay.sun.com>; Fri, 25 Jul 2008 12:29:32 -0700 (PDT) Received: from sac.sfbay.sun.com (new-sac.SFBay.Sun.COM [129.146.175.65]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m6PJTVsS018649; Fri, 25 Jul 2008 12:29:32 -0700 (PDT) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m6PJTUgC029749; Fri, 25 Jul 2008 12:29:30 -0700 (PDT) Received: (from jg97986@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id m6PJTU6T029745; Fri, 25 Jul 2008 12:29:30 -0700 (PDT) Date: Fri, 25 Jul 2008 12:29:30 -0700 (PDT) From: James Gates Subject: wxWidgets: Cross-Platform GUI Library [LSARC/2008/476 FastTrack timeout 08/01/2008] To: lsarc-ext@sun.com Message-id: <200807251929.m6PJTU6T029745@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 14672 Template Version: @(#)sac_nextcase 1.66 04/17/08 SMI This information is Copyright 2008 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: wxWidgets: Cross-Platform GUI Library 1.2. Name of Document Author/Supplier: Author: Mayuresh Nirhali 1.3 Date of This Document: 25 July, 2008 4. Technical Description 1.0 Project Information 1.1 Name of project/component wxWidgets: Cross-Platform GUI Library 1.2 Author of document Mayuresh Nirhali 2.0 Project Summary 2.1 Project Description wxWidgets provides a single, easy-to-use API for writing GUI applications on multiple platforms that still utilize the native platform's controls and utilities. On top of great GUI functionality, wxWidgets provides: online help, network programming, streams, clipboard and drag and drop, multithreading, image loading and saving in a variety of popular formats, database support, HTML viewing and printing, and much much more. Please note that WxWidgets version 2.8.8 already exists in OpenSolaris today, but it is statically linked with pgAdmin3 (LSARC/2006/644 - PostgreSQL database adiministration GUI tool). The scope of this ARC case is only to expose wxWidgets as a shared library to other Solaris components, such as FileZilla. 2.2 Release binding What is is the release binding? (see http://opensolaris.org/os/community/arc/policies/release-taxonomy/) [ ] Major [ ] Minor [X] Patch or Micro [ ] Unknown -- ARC review required 2.3 Type of project Is this case a Linux Familiarity project? [X] Yes [ ] No 2.4 Originating Community 2.4.1 Community Name http://www.wxwidgets.org/ 2.4.2 Community Involvement Indicate Sun's involvement in the community [ ] Maintainer [ ] Contributor [X] Monitoring Will the project team work with the upstream community to resolve architectural issues of interest to Sun? [X] Yes [ ] No - briefly explain Will we or are we forking from the community? [ ] Yes - ARC review required prior to forking [X] No 3.0 Technical Description 3.1 Installation & Sharable 3.1.1S Solaris Installation - section only required for Solaris Software (see http://opensolaris.org/os/community/arc/policies/install-locations/ for details) Does this project follow the Install Locations best practice? [X] Yes [ ] No - ARC review required Does this project install into /usr under [sbin|bin|lib|include|man|share]? [X] Yes [ ] No or N/A Does this project install into /opt? [ ] Yes - explain below [X] No or N/A Does this project install into a different directory structure? [ ] Yes - ARC review required [X] No or N/A Do any of the components of this project conflict with anything under /usr? (see http://opensolaris.org/os/community/arc/caselog/2007/047/ for details) [ ] Yes - explain below [X] No If conflicts exist then will this project install under /usr/gnu? [ ] Yes [ ] No - ARC review required [X] N/A Is this project installing into /usr/sfw? [ ] Yes - ARC review required [X] No 3.2 Exported Libraries Are libraries being delivered by this project? [X] Yes [] No - continue with next section (section 3.3) Are 64-bit versions of the libraries being delivered? [X] Yes [ ] No - ARC review required Are static versions of the libraries being delivered? [ ] Yes - ARC review required [X] No 3.3 Services and the /etc Directory (see http://opensolaris.org/os/community/arc/policies/SMF-policy/) Does the project integrate anything into /etc/init.d or /etc/rc?.d? [ ] Yes - ARC review required [X] No Does the project integrate any new entries into /etc/inittab or /etc/inetd.conf? [ ] Yes - ARC review required [X] No Does the project integrate any private non-public files into /etc/default or /etc/ configuration files? [ ] Yes - ARC review required [X] No Does the service manifests method context grant rights above that of the noaccess user and basic privilege set? [ ] Yes - ARC review required [X] No 3.4 Security 3.4.1 Secure By Default (see http://opensolaris.org/os/community/arc/policies/secure-by-default/ for details) (see http://www.opensolaris.org/os/community/arc/policies/NITS-policy/ for details) (see parts of http://opensolaris.org/os/community/arc/policies/SMF-policy/ for addtional details) Are there any network services provided by this project? [ ] Yes [X] No - continue with the next section (section 3.4.2) Are network services enabled by default? [ ] Yes - ARC review required [ ] No [X] N/A Are network services automatically enabled by the project during installation? [ ] Yes - ARC review required [ ] No [X] N/A Are inbound network communications denied by default? [ ] Yes [ ] No - ARC review required [X] N/A Is inbound data checked to prevent content-based attacks? [ ] Yes [ ] No - ARC review required [X] N/A Is the outbound receiver authenticated? [ ] Yes [ ] No - ARC review required [X] N/A Is the receiver authenticated prior to receiving any sensitive outbound communication? [ ] Yes [ ] No - ARC review required [X] N/A 3.4.2 Authorization (see http://opensolaris.org/os/community/arc/bestpractices/rbac-intro/ and http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ and http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ for details) Are there any setuid/setgid privileged binaries in the project? [ ] Yes - ARC review required [X] No - continue with next section (section 3.4.3) If yes then are the setuid/setgid privileges handled by the use of roles? [ ] Yes [ ] No - ARC review required 3.4.3 Auditing (see http://opensolaris.org/os/community/arc/policies/audit-policy/ for details) (see http://opensolaris.org/os/community/arc/caselog/2003/397 for details) Does this component contain administrative or security enforcing software? [ ] Yes - ARC review required [X] No - continue to next section (section 3.4.4) (see http://opensolaris.org/os/community/arc/caselog/2003/397 for details) Do the components create audit logs detailing what took place including what event took place, who was involved, when the event took place? [ ] Yes - ARC contract and Audit project team review required [ ] No - ARC review required 3.4.4 Authentication (see http://opensolaris.org/os/community/arc/policies/PAM/) Do the components contain any authentication code? [ ] Yes [X] No - continue to next section (section 3.4.5) If yes do the components use PAM (plugable authentication modules) for authentication? [ ] Yes [ ] No - ARC review required If yes is a single PAM session maintained during authentication? [ ] Yes [ ] No - ARC review required If yes are the components sufficiently privileged to allow the requested operations (authentication, password change, process credential manipulation, audit state initialization)? [ ] Yes - briefly describe below [ ] No - ARC review required 3.4.5 Passwords (see http://opensolaris.org/os/community/arc/bestpractices/passwords-cli/ and http://opensolaris.org/os/community/arc/bestpractices/passwords-files/ for details) Do any of the components for the project deal with passwords? [ ] Yes [X] No - continue to next section (section 3.4.6) If yes are these passwords entered via the CLI or environment? [ ] Yes - ARC review required [ ] No Are passwords stored within the file system for the component? [ ] Yes [ ] No - continue to next section (section 3.4.6) If yes are the permissions on the file such to protect exposing the password(s)? [ ] Yes [ ] No - ARC review required 3.4.6 General Security Questions (see http://opensolaris.org/os/community/arc/bestpractices/security-questions/ for details) Are there any network protocols used by this project? [ ] Yes [X] No - continue with the next section (section 3.5) Do the components use standard network protocols? [ ] Yes [ ] No - ARC review required Do network services for the project make decisions based upon user, host or service identities? [ ] Yes - explain below [ ] No [X] N/A Do the components make use of secret information during authentication and/or authorization? [ ] Yes - explain below [ ] No [X] N/A 3.5 Networking Do the components access the network? [ ] Yes [X] No - continue with the next section (section 3.6) If yes do the components support IPv6? [ ] Yes [ ] No - ARC review required 3.6 Core Solaris Components Do the components of this project compete with or duplicate core Solaris components? [ ] Yes - ARC review required [X] No Examples of Core Solaris Components include but are not limited to: Secure By Default Authorizations PAM -- Plugable Authentication Module Privilege PRM -- Process Rights Management -- Privilege Audit xVm -- Virtualization zones / Solaris Containers PRM -- Process Rights Management RBAC -- Role Based Access Control TX / Trusted Extensions ZFS SMF -- Service Management Facility FMA -- Fault Management Architecture SCF -- Smart Card Facility IPsec 4.0 Interfaces (see http://www.opensolaris.org/os/community/arc/policies/interface-taxonomy/ for details) 4.1 Exported Interfaces See file interfaces.txt in case materials directory Brief Interface Classifications - See Appendix C for definitions Volatile - interfaces are fluid and will follow a rapidly changing community Uncommitted - interfaces are still evolving in the community and might follow the community Committed - interfaces are stable in the community Project Private - no review required, just document in table Contracted (interface modifier) - further review required Appendix A - References 1. Solaris Installation Locations Policy http://opensolaris.org/os/community/arc/policies/install-locations/ 2. /usr/gnu Installation ARC case http://opensolaris.org/os/community/arc/caselog/2007/047/ 3. Secure By Default Policy http://opensolaris.org/os/community/arc/policies/secure-by-default/ 4. Network Install Time Securityuy Policy http://www.opensolaris.org/os/community/arc/policies/NITS-policy/ 5. Adding RBAC Authorizations Policy http://opensolaris.org/os/community/arc/bestpractices/rbac-auths/ 6. When to use setuid -vs- RBAC roles and profiles http://opensolaris.org/os/community/arc/bestpractices/rbac-intro/ and 7. Building RBAC Rights Profiles http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ 8. Solaris Audit Policy http://opensolaris.org/os/community/arc/policies/audit-policy/ 9. Security questionaire http://opensolaris.org/os/community/arc/bestpractices/security-questions/ 10. Interface Taxonomy http://www.opensolaris.org/os/community/arc/policies/interface-taxonomy/ 11. Plugable Authentication Modules -- PAM http://opensolaris.org/os/community/arc/policies/PAM/ 12. Reusable Passwords In Command Line Arguments and Environment Variables http://opensolaris.org/os/community/arc/bestpractices/passwords-cli/ 13. Storing Reusable Passwords on a Filesystem http://opensolaris.org/os/community/arc/bestpractices/passwords-files/ 14. Release Taxonomy http://opensolaris.org/os/community/arc/policies/release-taxonomy/ 15. Service Management Facility (SMF) usage http://opensolaris.org/os/community/arc/policies/SMF-policy/ Appendix B - Suggested case materials 1. man pages 2. SMF manifests 3. links to contracts Appendix C - Definitions Submitter an agent responsible for creation of an ARC project along with the materials describing that project. Owner the ARC agent responsible for shepherding the case through review and ensuring a formal opinion is written where required. Maintainer an agent responsible for releasing new versions of a program, typically the "main" contributor or person incharge of making Architectural decisions for the project Contributor an agent who make contributions to a project, typically has a voice in making Architectural decisions for the project Monitoring an agent who is only following the changes made in the community and has no Architectural input into the project Volatile* interfaces that are very fluid and typically follow the originating community. Typically these interfaces can not be imported by other projects. Uncommitted* interfaces that are still evolving but will most likely be present from release to release. Committed* interfaces that are stable and with Sun guaranteeing some level of compatibility from release to release. Project Private* interfaces that are exposed only to or intended to be used only by the project being reviewed. These interfaces can not be imported by other projects. Not-An-Interface* components that are not interfaces. Contracted* (interface modifier) - ARC review of Contract required interfaces that do not allow another project to import can be *Note: see http://opensolaris.org/os/community/arc/policies/interface-taxonomy/ for details 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: SFW 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From james.gates@sun.com Fri Jul 25 12:43:23 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m6PJhM1q029921 for ; Fri, 25 Jul 2008 12:43:22 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m6PJh2xL024167 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Sat, 26 Jul 2008 03:43:21 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K4K00107US6DR00@nwk-avmta-2.sfbay.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Fri, 25 Jul 2008 12:43:18 -0700 (PDT) Received: from dm-uk-02.uk.sun.com ([129.156.101.196]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K4K00EXRUS5BJD0@nwk-avmta-2.sfbay.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Fri, 25 Jul 2008 12:43:18 -0700 (PDT) Received: from serinus.UK.Sun.COM (serinus.UK.Sun.COM [129.156.173.208]) by dm-uk-02.uk.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m6PJhG0v009856; Fri, 25 Jul 2008 20:43:16 +0100 (BST) Received: from [192.168.1.101] (vpn-129-150-64-209.East.Sun.COM [129.150.64.209]) by serinus.UK.Sun.COM (8.13.7+Sun/8.13.7/CTE 3.0) with ESMTP id m6PJgtaf024446; Fri, 25 Jul 2008 20:43:02 +0100 (BST) Date: Fri, 25 Jul 2008 15:42:11 -0400 From: James Gates Subject: Re: wxWidgets: Cross-Platform GUI Library [LSARC/2008/476 FastTrack timeout 08/01/2008] In-reply-to: <200807251929.m6PJTU6T029745@sac.sfbay.sun.com> To: lsarc-ext@sun.com Cc: Mayuresh Nirhali , Alfred.Peng@sun.com Message-id: <488A2C93.4090509@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii; format=flowed Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en X-PMX-Version: 5.4.1.325704 References: <200807251929.m6PJTU6T029745@sac.sfbay.sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.7.13) Gecko/20060509 Status: RO Content-Length: 16219 I'm sponsoring this case for Mayuresh Nirhali and Alfred Peng. Timeout is set for Friday 1st Aug. The onepager & interfaces.txt files are available in the case materials directory. The (attached) proposal is the completed FOSS checklist. No questions resulted in "ARC review required", but because of Brian Cameron's recent statement re. accessibility, I think it should be reviewed. But I do recall during the ARC[1] case for pgAdmin (which uses wxWidgets/GTK+) we discussed accessibility and it was determined that wxWidgets was section 508 compliant. Do we need to check this again? [1] http://sac.sfbay/LSARC/2006/644/ James Gates wrote: > Template Version: @(#)sac_nextcase 1.66 04/17/08 SMI > This information is Copyright 2008 Sun Microsystems > 1. Introduction > 1.1. Project/Component Working Name: > wxWidgets: Cross-Platform GUI Library > 1.2. Name of Document Author/Supplier: > Author: Mayuresh Nirhali > 1.3 Date of This Document: > 25 July, 2008 > 4. Technical Description > 1.0 Project Information > 1.1 Name of project/component > wxWidgets: Cross-Platform GUI Library > > 1.2 Author of document > Mayuresh Nirhali > > 2.0 Project Summary > 2.1 Project Description > > wxWidgets provides a single, > easy-to-use API for writing GUI applications on multiple platforms > that still utilize the native platform's controls and utilities. > On top of great GUI functionality, wxWidgets provides: online help, > network programming, streams, clipboard and drag and drop, > multithreading, image loading and saving in a variety of popular > formats, database support, HTML viewing and printing, and much much > more. > > Please note that WxWidgets version 2.8.8 already exists in OpenSolaris > today, but it is statically linked with pgAdmin3 (LSARC/2006/644 - > PostgreSQL database adiministration GUI tool). The scope of this ARC > case is only to expose wxWidgets as a shared library to other Solaris > components, such as FileZilla. > > > 2.2 Release binding > What is is the release binding? > (see http://opensolaris.org/os/community/arc/policies/release-taxonomy/) > [ ] Major > [ ] Minor > [X] Patch or Micro > [ ] Unknown -- ARC review required > > 2.3 Type of project > Is this case a Linux Familiarity project? > [X] Yes > [ ] No > > 2.4 Originating Community > 2.4.1 Community Name > http://www.wxwidgets.org/ > > 2.4.2 Community Involvement > Indicate Sun's involvement in the community > [ ] Maintainer > [ ] Contributor > [X] Monitoring > > Will the project team work with the upstream community to resolve > architectural issues of interest to Sun? > [X] Yes > [ ] No - briefly explain > > Will we or are we forking from the community? > [ ] Yes - ARC review required prior to forking > [X] No > > 3.0 Technical Description > 3.1 Installation & Sharable > 3.1.1S Solaris Installation - section only required for Solaris Software > (see http://opensolaris.org/os/community/arc/policies/install-locations/ for details) > Does this project follow the Install Locations best practice? > [X] Yes > [ ] No - ARC review required > > Does this project install into /usr under [sbin|bin|lib|include|man|share]? > [X] Yes > [ ] No or N/A > > Does this project install into /opt? > [ ] Yes - explain below > [X] No or N/A > > Does this project install into a different directory structure? > [ ] Yes - ARC review required > [X] No or N/A > > Do any of the components of this project conflict with anything under /usr? > (see http://opensolaris.org/os/community/arc/caselog/2007/047/ for details) > [ ] Yes - explain below > [X] No > > If conflicts exist then will this project install under /usr/gnu? > [ ] Yes > [ ] No - ARC review required > [X] N/A > > Is this project installing into /usr/sfw? > [ ] Yes - ARC review required > [X] No > > > 3.2 Exported Libraries > Are libraries being delivered by this project? > [X] Yes > [] No - continue with next section (section 3.3) > > Are 64-bit versions of the libraries being delivered? > [X] Yes > [ ] No - ARC review required > > Are static versions of the libraries being delivered? > [ ] Yes - ARC review required > [X] No > > 3.3 Services and the /etc Directory > (see http://opensolaris.org/os/community/arc/policies/SMF-policy/) > Does the project integrate anything into /etc/init.d or /etc/rc?.d? > [ ] Yes - ARC review required > [X] No > > Does the project integrate any new entries into /etc/inittab or > /etc/inetd.conf? > [ ] Yes - ARC review required > [X] No > > Does the project integrate any private non-public files into /etc/default > or /etc/ configuration files? > [ ] Yes - ARC review required > [X] No > > Does the service manifests method context grant rights above that > of the noaccess user and basic privilege set? > [ ] Yes - ARC review required > [X] No > > 3.4 Security > 3.4.1 Secure By Default > (see http://opensolaris.org/os/community/arc/policies/secure-by-default/ for details) > (see http://www.opensolaris.org/os/community/arc/policies/NITS-policy/ for details) > (see parts of http://opensolaris.org/os/community/arc/policies/SMF-policy/ for > addtional details) > Are there any network services provided by this project? > [ ] Yes > [X] No - continue with the next section (section 3.4.2) > > Are network services enabled by default? > [ ] Yes - ARC review required > [ ] No > [X] N/A > > Are network services automatically enabled by the project during installation? > [ ] Yes - ARC review required > [ ] No > [X] N/A > > Are inbound network communications denied by default? > [ ] Yes > [ ] No - ARC review required > [X] N/A > > Is inbound data checked to prevent content-based attacks? > [ ] Yes > [ ] No - ARC review required > [X] N/A > > Is the outbound receiver authenticated? > [ ] Yes > [ ] No - ARC review required > [X] N/A > > Is the receiver authenticated prior to receiving any sensitive outbound communication? > [ ] Yes > [ ] No - ARC review required > [X] N/A > > 3.4.2 Authorization > (see http://opensolaris.org/os/community/arc/bestpractices/rbac-intro/ and > http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ and > http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ > for details) > Are there any setuid/setgid privileged binaries in the project? > [ ] Yes - ARC review required > [X] No - continue with next section (section 3.4.3) > > If yes then are the setuid/setgid privileges handled by the use of roles? > [ ] Yes > [ ] No - ARC review required > > 3.4.3 Auditing > (see http://opensolaris.org/os/community/arc/policies/audit-policy/ for details) > (see http://opensolaris.org/os/community/arc/caselog/2003/397 for details) > Does this component contain administrative or security enforcing software? > [ ] Yes - ARC review required > [X] No - continue to next section (section 3.4.4) > > (see http://opensolaris.org/os/community/arc/caselog/2003/397 for details) > Do the components create audit logs detailing what took place including what event > took place, who was involved, when the event took place? > [ ] Yes - ARC contract and Audit project team review required > [ ] No - ARC review required > > > 3.4.4 Authentication > (see http://opensolaris.org/os/community/arc/policies/PAM/) > Do the components contain any authentication code? > [ ] Yes > [X] No - continue to next section (section 3.4.5) > > If yes do the components use PAM (plugable authentication modules) for authentication? > [ ] Yes > [ ] No - ARC review required > > If yes is a single PAM session maintained during authentication? > [ ] Yes > [ ] No - ARC review required > > If yes are the components sufficiently privileged to allow the requested > operations (authentication, password change, process credential manipulation, > audit state initialization)? > [ ] Yes - briefly describe below > [ ] No - ARC review required > > 3.4.5 Passwords > (see http://opensolaris.org/os/community/arc/bestpractices/passwords-cli/ and > http://opensolaris.org/os/community/arc/bestpractices/passwords-files/ for details) > Do any of the components for the project deal with passwords? > [ ] Yes > [X] No - continue to next section (section 3.4.6) > > If yes are these passwords entered via the CLI or environment? > [ ] Yes - ARC review required > [ ] No > > Are passwords stored within the file system for the component? > [ ] Yes > [ ] No - continue to next section (section 3.4.6) > > If yes are the permissions on the file such to protect exposing the password(s)? > [ ] Yes > [ ] No - ARC review required > > 3.4.6 General Security Questions > (see http://opensolaris.org/os/community/arc/bestpractices/security-questions/ for details) > Are there any network protocols used by this project? > [ ] Yes > [X] No - continue with the next section (section 3.5) > > Do the components use standard network protocols? > [ ] Yes > [ ] No - ARC review required > > Do network services for the project make decisions based upon user, host or > service identities? > [ ] Yes - explain below > [ ] No > [X] N/A > > Do the components make use of secret information during authentication and/or > authorization? > [ ] Yes - explain below > [ ] No > [X] N/A > > 3.5 Networking > Do the components access the network? > [ ] Yes > [X] No - continue with the next section (section 3.6) > > If yes do the components support IPv6? > [ ] Yes > [ ] No - ARC review required > > 3.6 Core Solaris Components > Do the components of this project compete with or duplicate core > Solaris components? > [ ] Yes - ARC review required > [X] No > > Examples of Core Solaris Components include but are not limited to: > > Secure By Default > Authorizations > PAM -- Plugable Authentication Module > Privilege > PRM -- Process Rights Management -- Privilege > Audit > xVm -- Virtualization > zones / Solaris Containers > PRM -- Process Rights Management > RBAC -- Role Based Access Control > TX / Trusted Extensions > ZFS > SMF -- Service Management Facility > FMA -- Fault Management Architecture > SCF -- Smart Card Facility > IPsec > > 4.0 Interfaces > (see http://www.opensolaris.org/os/community/arc/policies/interface-taxonomy/ for details) > 4.1 Exported Interfaces > > See file interfaces.txt in case materials directory > > > Brief Interface Classifications - See Appendix C for definitions > Volatile - interfaces are fluid and will follow a rapidly changing community > Uncommitted - interfaces are still evolving in the community and might follow > the community > Committed - interfaces are stable in the community > Project Private - no review required, just document in table > Contracted (interface modifier) - further review required > > Appendix A - References > 1. Solaris Installation Locations Policy > http://opensolaris.org/os/community/arc/policies/install-locations/ > 2. /usr/gnu Installation ARC case > http://opensolaris.org/os/community/arc/caselog/2007/047/ > 3. Secure By Default Policy > http://opensolaris.org/os/community/arc/policies/secure-by-default/ > 4. Network Install Time Securityuy Policy > http://www.opensolaris.org/os/community/arc/policies/NITS-policy/ > 5. Adding RBAC Authorizations Policy > http://opensolaris.org/os/community/arc/bestpractices/rbac-auths/ > 6. When to use setuid -vs- RBAC roles and profiles > http://opensolaris.org/os/community/arc/bestpractices/rbac-intro/ and > 7. Building RBAC Rights Profiles > http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ > 8. Solaris Audit Policy > http://opensolaris.org/os/community/arc/policies/audit-policy/ > 9. Security questionaire > http://opensolaris.org/os/community/arc/bestpractices/security-questions/ > 10. Interface Taxonomy > http://www.opensolaris.org/os/community/arc/policies/interface-taxonomy/ > 11. Plugable Authentication Modules -- PAM > http://opensolaris.org/os/community/arc/policies/PAM/ > 12. Reusable Passwords In Command Line Arguments and Environment Variables > http://opensolaris.org/os/community/arc/bestpractices/passwords-cli/ > 13. Storing Reusable Passwords on a Filesystem > http://opensolaris.org/os/community/arc/bestpractices/passwords-files/ > 14. Release Taxonomy > http://opensolaris.org/os/community/arc/policies/release-taxonomy/ > 15. Service Management Facility (SMF) usage > http://opensolaris.org/os/community/arc/policies/SMF-policy/ > > > Appendix B - Suggested case materials > 1. man pages > 2. SMF manifests > 3. links to contracts > > Appendix C - Definitions > Submitter > an agent responsible for creation of an ARC project along with the > materials describing that project. > Owner > the ARC agent responsible for shepherding the case through review > and ensuring a formal opinion is written where required. > Maintainer > an agent responsible for releasing new versions of a program, typically > the "main" contributor or person incharge of making Architectural > decisions for the project > Contributor > an agent who make contributions to a project, typically has a voice in > making Architectural decisions for the project > Monitoring > an agent who is only following the changes made in the community and > has no Architectural input into the project > Volatile* > interfaces that are very fluid and typically follow the originating > community. Typically these interfaces can not be imported by other > projects. > Uncommitted* > interfaces that are still evolving but will most likely be present from > release to release. > Committed* > interfaces that are stable and with Sun guaranteeing some level of > compatibility from release to release. > Project Private* > interfaces that are exposed only to or intended to be used only by > the project being reviewed. These interfaces can not be imported by > other projects. > Not-An-Interface* > components that are not interfaces. > Contracted* (interface modifier) - ARC review of Contract required > interfaces that do not allow another project to import can be > > *Note: see http://opensolaris.org/os/community/arc/policies/interface-taxonomy/ for details > > 6. Resources and Schedule > 6.4. Steering Committee requested information > 6.4.1. Consolidation C-team Name: > SFW > 6.5. ARC review type: FastTrack > 6.6. ARC Exposure: open > -- Jim Gates Sun Microsystems Nashua, USA http://sun.com/postgresql From Brian.Cameron@sun.com Mon Jul 28 04:18:50 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m6SBInVg012558 for ; Mon, 28 Jul 2008 04:18:50 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m6SBIl5C026223 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Mon, 28 Jul 2008 19:18:48 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K4P00L09RFBMR00@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Mon, 28 Jul 2008 05:18:47 -0600 (MDT) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K4P00CKIRF9HY70@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Mon, 28 Jul 2008 05:18:46 -0600 (MDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m6SBIjal013759 for ; Mon, 28 Jul 2008 11:18:45 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K4P00G01R7TZN00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Mon, 28 Jul 2008 05:18:45 -0600 (MDT) Received: from [129.156.226.192] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K4P00CV8RF8ILC0@mail-amer.sun.com>; Mon, 28 Jul 2008 05:18:45 -0600 (MDT) Date: Mon, 28 Jul 2008 06:18:54 -0500 From: Brian Cameron Subject: Re: wxWidgets: Cross-Platform GUI Library [LSARC/2008/476 FastTrack timeout 08/01/2008] In-reply-to: <488A2C93.4090509@sun.com> Sender: Brian.Cameron@sun.com To: James Gates Cc: lsarc-ext@sun.com, Mayuresh Nirhali , Alfred.Peng@sun.com Message-id: <488DAB1E.9020405@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200807251929.m6PJTU6T029745@sac.sfbay.sun.com> <488A2C93.4090509@sun.com> User-Agent: Thunderbird 2.0.0.14 (X11/20080701) Status: RO Content-Length: 17534 James: > The (attached) proposal is the completed FOSS checklist. No questions > resulted in "ARC review required", but because of Brian Cameron's recent > statement re. accessibility, I think it should be reviewed. > > But I do recall during the ARC[1] case for pgAdmin (which uses > wxWidgets/GTK+) we discussed accessibility and it was determined that > wxWidgets was section 508 compliant. Do we need to check this again? > > [1] http://sac.sfbay/LSARC/2006/644/ Aside from answering "Yes" to question 12.13 in the 20 questions, I don't see much information about how it was decided this module is 508 compliant. Since wxWidgets uses GTK+ widgets, there might be some accessibility features that "just works". However, many applications do not "just work" without doing additional things. GTK+ exposes accessibility interfaces so that applications can manually set accessible labels, descriptions and relations that can not be figured out automatically. Unfortunately the wxWidgets library does not expose any interfaces for application writers to do such things. Therefore, I'd think that any program which had the need to set an accessible label, description, or relationship wouldn't fully work from a Section 508 perspective. I know that the JDS a11y QA team did some preliminary work to test the a11y of FileZilla, which also uses wxWidgets. They created this bug report against wxWidgets three days ago to track the issue, and it contains some detail about the issue: http://trac.wxwidgets.org/ticket/9785 So, I'd think that there probably should be some plan to address these issues as we integrate wxWidgets into Solaris. Brian > James Gates wrote: >> Template Version: @(#)sac_nextcase 1.66 04/17/08 SMI >> This information is Copyright 2008 Sun Microsystems >> 1. Introduction >> 1.1. Project/Component Working Name: >> wxWidgets: Cross-Platform GUI Library >> 1.2. Name of Document Author/Supplier: >> Author: Mayuresh Nirhali >> 1.3 Date of This Document: >> 25 July, 2008 >> 4. Technical Description >> 1.0 Project Information >> 1.1 Name of project/component >> wxWidgets: Cross-Platform GUI Library >> >> 1.2 Author of document >> Mayuresh Nirhali >> >> 2.0 Project Summary >> 2.1 Project Description >> >> wxWidgets provides a single, >> easy-to-use API for writing GUI applications on multiple platforms >> that still utilize the native platform's controls and utilities. >> On top of great GUI functionality, wxWidgets provides: online help, >> network programming, streams, clipboard and drag and drop, >> multithreading, image loading and saving in a variety of popular >> formats, database support, HTML viewing and printing, and much much >> more. >> >> Please note that WxWidgets version 2.8.8 already exists in OpenSolaris >> today, but it is statically linked with pgAdmin3 (LSARC/2006/644 - >> PostgreSQL database adiministration GUI tool). The scope of this ARC >> case is only to expose wxWidgets as a shared library to other Solaris >> components, such as FileZilla. >> >> >> 2.2 Release binding >> What is is the release binding? >> (see http://opensolaris.org/os/community/arc/policies/release-taxonomy/) >> [ ] Major >> [ ] Minor >> [X] Patch or Micro >> [ ] Unknown -- ARC review required >> >> 2.3 Type of project >> Is this case a Linux Familiarity project? >> [X] Yes >> [ ] No >> >> 2.4 Originating Community >> 2.4.1 Community Name >> http://www.wxwidgets.org/ >> >> 2.4.2 Community Involvement >> Indicate Sun's involvement in the community >> [ ] Maintainer >> [ ] Contributor >> [X] Monitoring >> >> Will the project team work with the upstream community to resolve >> architectural issues of interest to Sun? >> [X] Yes >> [ ] No - briefly explain >> >> Will we or are we forking from the community? >> [ ] Yes - ARC review required prior to forking >> [X] No >> >> 3.0 Technical Description >> 3.1 Installation & Sharable >> 3.1.1S Solaris Installation - section only required for Solaris Software >> (see http://opensolaris.org/os/community/arc/policies/install-locations/ for details) >> Does this project follow the Install Locations best practice? >> [X] Yes >> [ ] No - ARC review required >> >> Does this project install into /usr under [sbin|bin|lib|include|man|share]? >> [X] Yes >> [ ] No or N/A >> >> Does this project install into /opt? >> [ ] Yes - explain below >> [X] No or N/A >> >> Does this project install into a different directory structure? >> [ ] Yes - ARC review required >> [X] No or N/A >> >> Do any of the components of this project conflict with anything under /usr? >> (see http://opensolaris.org/os/community/arc/caselog/2007/047/ for details) >> [ ] Yes - explain below >> [X] No >> >> If conflicts exist then will this project install under /usr/gnu? >> [ ] Yes >> [ ] No - ARC review required >> [X] N/A >> >> Is this project installing into /usr/sfw? >> [ ] Yes - ARC review required >> [X] No >> >> >> 3.2 Exported Libraries >> Are libraries being delivered by this project? >> [X] Yes >> [] No - continue with next section (section 3.3) >> >> Are 64-bit versions of the libraries being delivered? >> [X] Yes >> [ ] No - ARC review required >> >> Are static versions of the libraries being delivered? >> [ ] Yes - ARC review required >> [X] No >> >> 3.3 Services and the /etc Directory >> (see http://opensolaris.org/os/community/arc/policies/SMF-policy/) >> Does the project integrate anything into /etc/init.d or /etc/rc?.d? >> [ ] Yes - ARC review required >> [X] No >> >> Does the project integrate any new entries into /etc/inittab or >> /etc/inetd.conf? >> [ ] Yes - ARC review required >> [X] No >> >> Does the project integrate any private non-public files into /etc/default >> or /etc/ configuration files? >> [ ] Yes - ARC review required >> [X] No >> >> Does the service manifests method context grant rights above that >> of the noaccess user and basic privilege set? >> [ ] Yes - ARC review required >> [X] No >> >> 3.4 Security >> 3.4.1 Secure By Default >> (see http://opensolaris.org/os/community/arc/policies/secure-by-default/ for details) >> (see http://www.opensolaris.org/os/community/arc/policies/NITS-policy/ for details) >> (see parts of http://opensolaris.org/os/community/arc/policies/SMF-policy/ for >> addtional details) >> Are there any network services provided by this project? >> [ ] Yes >> [X] No - continue with the next section (section 3.4.2) >> >> Are network services enabled by default? >> [ ] Yes - ARC review required >> [ ] No >> [X] N/A >> >> Are network services automatically enabled by the project during installation? >> [ ] Yes - ARC review required >> [ ] No >> [X] N/A >> >> Are inbound network communications denied by default? >> [ ] Yes >> [ ] No - ARC review required >> [X] N/A >> >> Is inbound data checked to prevent content-based attacks? >> [ ] Yes >> [ ] No - ARC review required >> [X] N/A >> >> Is the outbound receiver authenticated? >> [ ] Yes >> [ ] No - ARC review required >> [X] N/A >> >> Is the receiver authenticated prior to receiving any sensitive outbound communication? >> [ ] Yes >> [ ] No - ARC review required >> [X] N/A >> >> 3.4.2 Authorization >> (see http://opensolaris.org/os/community/arc/bestpractices/rbac-intro/ and >> http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ and >> http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ >> for details) >> Are there any setuid/setgid privileged binaries in the project? >> [ ] Yes - ARC review required >> [X] No - continue with next section (section 3.4.3) >> >> If yes then are the setuid/setgid privileges handled by the use of roles? >> [ ] Yes >> [ ] No - ARC review required >> >> 3.4.3 Auditing >> (see http://opensolaris.org/os/community/arc/policies/audit-policy/ for details) >> (see http://opensolaris.org/os/community/arc/caselog/2003/397 for details) >> Does this component contain administrative or security enforcing software? >> [ ] Yes - ARC review required >> [X] No - continue to next section (section 3.4.4) >> >> (see http://opensolaris.org/os/community/arc/caselog/2003/397 for details) >> Do the components create audit logs detailing what took place including what event >> took place, who was involved, when the event took place? >> [ ] Yes - ARC contract and Audit project team review required >> [ ] No - ARC review required >> >> >> 3.4.4 Authentication >> (see http://opensolaris.org/os/community/arc/policies/PAM/) >> Do the components contain any authentication code? >> [ ] Yes >> [X] No - continue to next section (section 3.4.5) >> >> If yes do the components use PAM (plugable authentication modules) for authentication? >> [ ] Yes >> [ ] No - ARC review required >> >> If yes is a single PAM session maintained during authentication? >> [ ] Yes >> [ ] No - ARC review required >> >> If yes are the components sufficiently privileged to allow the requested >> operations (authentication, password change, process credential manipulation, >> audit state initialization)? >> [ ] Yes - briefly describe below >> [ ] No - ARC review required >> >> 3.4.5 Passwords >> (see http://opensolaris.org/os/community/arc/bestpractices/passwords-cli/ and >> http://opensolaris.org/os/community/arc/bestpractices/passwords-files/ for details) >> Do any of the components for the project deal with passwords? >> [ ] Yes >> [X] No - continue to next section (section 3.4.6) >> >> If yes are these passwords entered via the CLI or environment? >> [ ] Yes - ARC review required >> [ ] No >> >> Are passwords stored within the file system for the component? >> [ ] Yes >> [ ] No - continue to next section (section 3.4.6) >> >> If yes are the permissions on the file such to protect exposing the password(s)? >> [ ] Yes >> [ ] No - ARC review required >> >> 3.4.6 General Security Questions >> (see http://opensolaris.org/os/community/arc/bestpractices/security-questions/ for details) >> Are there any network protocols used by this project? >> [ ] Yes >> [X] No - continue with the next section (section 3.5) >> >> Do the components use standard network protocols? >> [ ] Yes >> [ ] No - ARC review required >> >> Do network services for the project make decisions based upon user, host or >> service identities? >> [ ] Yes - explain below >> [ ] No >> [X] N/A >> >> Do the components make use of secret information during authentication and/or >> authorization? >> [ ] Yes - explain below >> [ ] No >> [X] N/A >> >> 3.5 Networking >> Do the components access the network? >> [ ] Yes >> [X] No - continue with the next section (section 3.6) >> >> If yes do the components support IPv6? >> [ ] Yes >> [ ] No - ARC review required >> >> 3.6 Core Solaris Components >> Do the components of this project compete with or duplicate core >> Solaris components? >> [ ] Yes - ARC review required >> [X] No >> >> Examples of Core Solaris Components include but are not limited to: >> >> Secure By Default >> Authorizations >> PAM -- Plugable Authentication Module >> Privilege >> PRM -- Process Rights Management -- Privilege >> Audit >> xVm -- Virtualization >> zones / Solaris Containers >> PRM -- Process Rights Management >> RBAC -- Role Based Access Control >> TX / Trusted Extensions >> ZFS >> SMF -- Service Management Facility >> FMA -- Fault Management Architecture >> SCF -- Smart Card Facility >> IPsec >> >> 4.0 Interfaces >> (see http://www.opensolaris.org/os/community/arc/policies/interface-taxonomy/ for details) >> 4.1 Exported Interfaces >> >> See file interfaces.txt in case materials directory >> >> >> Brief Interface Classifications - See Appendix C for definitions >> Volatile - interfaces are fluid and will follow a rapidly changing community >> Uncommitted - interfaces are still evolving in the community and might follow >> the community >> Committed - interfaces are stable in the community >> Project Private - no review required, just document in table >> Contracted (interface modifier) - further review required >> >> Appendix A - References >> 1. Solaris Installation Locations Policy >> http://opensolaris.org/os/community/arc/policies/install-locations/ >> 2. /usr/gnu Installation ARC case >> http://opensolaris.org/os/community/arc/caselog/2007/047/ >> 3. Secure By Default Policy >> http://opensolaris.org/os/community/arc/policies/secure-by-default/ >> 4. Network Install Time Securityuy Policy >> http://www.opensolaris.org/os/community/arc/policies/NITS-policy/ >> 5. Adding RBAC Authorizations Policy >> http://opensolaris.org/os/community/arc/bestpractices/rbac-auths/ >> 6. When to use setuid -vs- RBAC roles and profiles >> http://opensolaris.org/os/community/arc/bestpractices/rbac-intro/ and >> 7. Building RBAC Rights Profiles >> http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ >> 8. Solaris Audit Policy >> http://opensolaris.org/os/community/arc/policies/audit-policy/ >> 9. Security questionaire >> http://opensolaris.org/os/community/arc/bestpractices/security-questions/ >> 10. Interface Taxonomy >> http://www.opensolaris.org/os/community/arc/policies/interface-taxonomy/ >> 11. Plugable Authentication Modules -- PAM >> http://opensolaris.org/os/community/arc/policies/PAM/ >> 12. Reusable Passwords In Command Line Arguments and Environment Variables >> http://opensolaris.org/os/community/arc/bestpractices/passwords-cli/ >> 13. Storing Reusable Passwords on a Filesystem >> http://opensolaris.org/os/community/arc/bestpractices/passwords-files/ >> 14. Release Taxonomy >> http://opensolaris.org/os/community/arc/policies/release-taxonomy/ >> 15. Service Management Facility (SMF) usage >> http://opensolaris.org/os/community/arc/policies/SMF-policy/ >> >> >> Appendix B - Suggested case materials >> 1. man pages >> 2. SMF manifests >> 3. links to contracts >> >> Appendix C - Definitions >> Submitter >> an agent responsible for creation of an ARC project along with the >> materials describing that project. >> Owner >> the ARC agent responsible for shepherding the case through review >> and ensuring a formal opinion is written where required. >> Maintainer >> an agent responsible for releasing new versions of a program, typically >> the "main" contributor or person incharge of making Architectural >> decisions for the project >> Contributor >> an agent who make contributions to a project, typically has a voice in >> making Architectural decisions for the project >> Monitoring >> an agent who is only following the changes made in the community and >> has no Architectural input into the project >> Volatile* >> interfaces that are very fluid and typically follow the originating >> community. Typically these interfaces can not be imported by other >> projects. >> Uncommitted* >> interfaces that are still evolving but will most likely be present from >> release to release. >> Committed* >> interfaces that are stable and with Sun guaranteeing some level of >> compatibility from release to release. >> Project Private* >> interfaces that are exposed only to or intended to be used only by >> the project being reviewed. These interfaces can not be imported by >> other projects. >> Not-An-Interface* >> components that are not interfaces. >> Contracted* (interface modifier) - ARC review of Contract required >> interfaces that do not allow another project to import can be >> >> *Note: see http://opensolaris.org/os/community/arc/policies/interface-taxonomy/ for details >> >> 6. Resources and Schedule >> 6.4. Steering Committee requested information >> 6.4.1. Consolidation C-team Name: >> SFW >> 6.5. ARC review type: FastTrack >> 6.6. ARC Exposure: open >> > From james.gates@sun.com Tue Sep 2 10:00:28 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m82H0Rlw013499 for ; Tue, 2 Sep 2008 10:00:27 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m82H0JrD013543 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Tue, 2 Sep 2008 18:00:26 +0100 (BST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K6K0000HV8PZ400@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Tue, 02 Sep 2008 11:00:25 -0600 (MDT) Received: from dm-uk-02.uk.sun.com ([129.156.101.196]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K6K000F9V8O2280@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Tue, 02 Sep 2008 11:00:25 -0600 (MDT) Received: from serinus.UK.Sun.COM (serinus.UK.Sun.COM [129.156.173.208]) by dm-uk-02.uk.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m82H0Mw9026812; Tue, 02 Sep 2008 18:00:22 +0100 (BST) Received: from [192.168.1.102] (vpn-129-150-64-255.East.Sun.COM [129.150.64.255]) by serinus.UK.Sun.COM (8.13.7+Sun/8.13.7/CTE 3.0) with ESMTP id m82GxuQs023380; Tue, 02 Sep 2008 18:00:05 +0100 (BST) Date: Tue, 02 Sep 2008 12:59:15 -0400 From: James Gates Subject: Re: wxWidgets: Cross-Platform GUI Library [LSARC/2008/476 FastTrack timeout 08/01/2008] In-reply-to: <488A2C93.4090509@sun.com> To: lsarc-ext@sun.com Cc: Mayuresh Nirhali , Alfred.Peng@sun.com Message-id: <48BD70E3.5060301@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii; format=flowed Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en X-PMX-Version: 5.4.1.325704 References: <200807251929.m6PJTU6T029745@sac.sfbay.sun.com> <488A2C93.4090509@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.7.13) Gecko/20060509 Status: RO Content-Length: 17144 This case was today closed approved. There were some concerns (from Brian Cameron) regarding accessibility and full section 508 compliance. These are now resolved - A waiver to integrate was granted by Michele Budris based on a commitment from the project team to work with wxWidgets community to provide the support for missing a11y features. The project team now intend to integrate in snv_100. James Gates wrote: > I'm sponsoring this case for Mayuresh Nirhali and Alfred Peng. Timeout > is set for Friday 1st Aug. The onepager & interfaces.txt files are > available in the case materials directory. > > The (attached) proposal is the completed FOSS checklist. No questions > resulted in "ARC review required", but because of Brian Cameron's recent > statement re. accessibility, I think it should be reviewed. > > But I do recall during the ARC[1] case for pgAdmin (which uses > wxWidgets/GTK+) we discussed accessibility and it was determined that > wxWidgets was section 508 compliant. Do we need to check this again? > > [1] http://sac.sfbay/LSARC/2006/644/ > > > James Gates wrote: > >> Template Version: @(#)sac_nextcase 1.66 04/17/08 SMI >> This information is Copyright 2008 Sun Microsystems >> 1. Introduction >> 1.1. Project/Component Working Name: >> wxWidgets: Cross-Platform GUI Library >> 1.2. Name of Document Author/Supplier: >> Author: Mayuresh Nirhali >> 1.3 Date of This Document: >> 25 July, 2008 >> 4. Technical Description >> 1.0 Project Information >> 1.1 Name of project/component >> wxWidgets: Cross-Platform GUI Library >> >> 1.2 Author of document >> Mayuresh Nirhali >> >> 2.0 Project Summary >> 2.1 Project Description >> >> wxWidgets provides a single, >> easy-to-use API for writing GUI applications on multiple >> platforms >> that still utilize the native platform's controls and utilities. >> On top of great GUI functionality, wxWidgets provides: online >> help, >> network programming, streams, clipboard and drag and drop, >> multithreading, image loading and saving in a variety of popular >> formats, database support, HTML viewing and printing, and much >> much >> more. >> >> Please note that WxWidgets version 2.8.8 already exists in >> OpenSolaris >> today, but it is statically linked with pgAdmin3 (LSARC/2006/644 - >> PostgreSQL database adiministration GUI tool). The scope of this ARC >> case is only to expose wxWidgets as a shared library to other Solaris >> components, such as FileZilla. >> >> 2.2 Release binding >> What is is the release binding? >> (see >> http://opensolaris.org/os/community/arc/policies/release-taxonomy/) >> [ ] Major >> [ ] Minor >> [X] Patch or Micro >> [ ] Unknown -- ARC review required >> >> 2.3 Type of project >> Is this case a Linux Familiarity project? >> [X] Yes >> [ ] No >> >> 2.4 Originating Community >> 2.4.1 Community Name >> http://www.wxwidgets.org/ >> 2.4.2 Community Involvement >> Indicate Sun's involvement in the community >> [ ] Maintainer >> [ ] Contributor >> [X] Monitoring >> Will the project team work with the upstream community to >> resolve >> architectural issues of interest to Sun? >> [X] Yes [ ] No - briefly explain >> Will we or are we forking from the community? >> [ ] Yes - ARC review required prior to forking >> [X] No >> 3.0 Technical Description >> 3.1 Installation & Sharable >> 3.1.1S Solaris Installation - section only required for Solaris >> Software >> (see >> http://opensolaris.org/os/community/arc/policies/install-locations/ >> for details) >> Does this project follow the Install Locations best practice? >> [X] Yes [ ] No - ARC review required >> Does this project install into /usr under >> [sbin|bin|lib|include|man|share]? >> [X] Yes >> [ ] No or N/A >> Does this project install into /opt? >> [ ] Yes - explain below >> [X] No or N/A >> Does this project install into a different directory >> structure? >> [ ] Yes - ARC review required >> [X] No or N/A >> Do any of the components of this project conflict with >> anything under /usr? >> (see http://opensolaris.org/os/community/arc/caselog/2007/047/ >> for details) >> [ ] Yes - explain below >> [X] No >> If conflicts exist then will this project install under >> /usr/gnu? >> [ ] Yes >> [ ] No - ARC review required >> [X] N/A >> Is this project installing into /usr/sfw? >> [ ] Yes - ARC review required >> [X] No >> >> 3.2 Exported Libraries >> Are libraries being delivered by this project? >> [X] Yes >> [] No - continue with next section (section 3.3) >> Are 64-bit versions of the libraries being delivered? >> [X] Yes >> [ ] No - ARC review required >> Are static versions of the libraries being delivered? >> [ ] Yes - ARC review required >> [X] No 3.3 Services and the /etc Directory >> (see http://opensolaris.org/os/community/arc/policies/SMF-policy/) >> Does the project integrate anything into /etc/init.d or /etc/rc?.d? >> [ ] Yes - ARC review required >> [X] No >> Does the project integrate any new entries into >> /etc/inittab or >> /etc/inetd.conf? >> [ ] Yes - ARC review required >> [X] No >> Does the project integrate any private non-public files >> into /etc/default >> or /etc/ configuration files? >> [ ] Yes - ARC review required >> [X] No >> Does the service manifests method context grant rights >> above that >> of the noaccess user and basic privilege set? >> [ ] Yes - ARC review required >> [X] No >> 3.4 Security >> 3.4.1 Secure By Default (see >> http://opensolaris.org/os/community/arc/policies/secure-by-default/ >> for details) >> (see >> http://www.opensolaris.org/os/community/arc/policies/NITS-policy/ for >> details) >> (see parts of >> http://opensolaris.org/os/community/arc/policies/SMF-policy/ for >> addtional details) >> Are there any network services provided by this project? >> [ ] Yes >> [X] No - continue with the next section (section 3.4.2) >> Are network services enabled by default? >> [ ] Yes - ARC review required >> [ ] No >> [X] N/A >> Are network services automatically enabled by the project >> during installation? >> [ ] Yes - ARC review required >> [ ] No >> [X] N/A >> Are inbound network communications denied by default? >> [ ] Yes >> [ ] No - ARC review required >> [X] N/A >> Is inbound data checked to prevent content-based attacks? >> [ ] Yes >> [ ] No - ARC review required >> [X] N/A >> Is the outbound receiver authenticated? >> [ ] Yes >> [ ] No - ARC review required >> [X] N/A >> Is the receiver authenticated prior to receiving any >> sensitive outbound communication? >> [ ] Yes >> [ ] No - ARC review required >> [X] N/A >> 3.4.2 Authorization >> (see >> http://opensolaris.org/os/community/arc/bestpractices/rbac-intro/ and >> >> http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ and >> >> http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ >> for details) >> Are there any setuid/setgid privileged binaries in the project? >> [ ] Yes - ARC review required >> [X] No - continue with next section (section 3.4.3) >> If yes then are the setuid/setgid privileges handled by >> the use of roles? >> [ ] Yes >> [ ] No - ARC review required >> >> 3.4.3 Auditing >> (see >> http://opensolaris.org/os/community/arc/policies/audit-policy/ for >> details) >> (see http://opensolaris.org/os/community/arc/caselog/2003/397 >> for details) >> Does this component contain administrative or security enforcing >> software? >> [ ] Yes - ARC review required >> [X] No - continue to next section (section 3.4.4) >> (see >> http://opensolaris.org/os/community/arc/caselog/2003/397 for details) >> Do the components create audit logs detailing what took place >> including what event >> took place, who was involved, when the event took place? >> [ ] Yes - ARC contract and Audit project team review required >> [ ] No - ARC review required >> 3.4.4 Authentication >> (see http://opensolaris.org/os/community/arc/policies/PAM/) >> Do the components contain any authentication code? >> [ ] Yes >> [X] No - continue to next section (section 3.4.5) >> If yes do the components use PAM (plugable authentication >> modules) for authentication? >> [ ] Yes >> [ ] No - ARC review required >> If yes is a single PAM session maintained during >> authentication? >> [ ] Yes >> [ ] No - ARC review required >> If yes are the components sufficiently privileged to allow >> the requested operations (authentication, password change, >> process credential manipulation, audit state initialization)? >> [ ] Yes - briefly describe below >> [ ] No - ARC review required >> 3.4.5 Passwords >> (see >> http://opensolaris.org/os/community/arc/bestpractices/passwords-cli/ and >> >> http://opensolaris.org/os/community/arc/bestpractices/passwords-files/ >> for details) >> Do any of the components for the project deal with passwords? >> [ ] Yes >> [X] No - continue to next section (section 3.4.6) >> If yes are these passwords entered via the CLI or >> environment? >> [ ] Yes - ARC review required >> [ ] No >> Are passwords stored within the file system for the >> component? >> [ ] Yes >> [ ] No - continue to next section (section 3.4.6) >> If yes are the permissions on the file such to protect >> exposing the password(s)? >> [ ] Yes >> [ ] No - ARC review required >> 3.4.6 General Security Questions >> (see >> http://opensolaris.org/os/community/arc/bestpractices/security-questions/ >> for details) >> Are there any network protocols used by this project? >> [ ] Yes >> [X] No - continue with the next section (section 3.5) >> Do the components use standard network protocols? >> [ ] Yes >> [ ] No - ARC review required >> Do network services for the project make decisions based >> upon user, host or service identities? >> [ ] Yes - explain below >> [ ] No >> [X] N/A >> Do the components make use of secret information during >> authentication and/or >> authorization? >> [ ] Yes - explain below >> [ ] No >> [X] N/A >> 3.5 Networking >> Do the components access the network? >> [ ] Yes >> [X] No - continue with the next section (section 3.6) >> If yes do the components support IPv6? >> [ ] Yes [ ] No - ARC review required >> 3.6 Core Solaris Components >> Do the components of this project compete with or duplicate core >> Solaris components? >> [ ] Yes - ARC review required >> [X] No Examples of Core Solaris Components include >> but are not limited to: >> Secure By Default >> Authorizations >> PAM -- Plugable Authentication Module >> Privilege >> PRM -- Process Rights Management -- Privilege >> Audit >> xVm -- Virtualization >> zones / Solaris Containers >> PRM -- Process Rights Management >> RBAC -- Role Based Access Control >> TX / Trusted Extensions >> ZFS >> SMF -- Service Management Facility >> FMA -- Fault Management Architecture >> SCF -- Smart Card Facility >> IPsec >> 4.0 Interfaces >> (see >> http://www.opensolaris.org/os/community/arc/policies/interface-taxonomy/ >> for details) >> 4.1 Exported Interfaces >> >> See file interfaces.txt in case materials directory >> >> Brief Interface Classifications - See Appendix C for >> definitions >> Volatile - interfaces are fluid and will follow a rapidly changing >> community >> Uncommitted - interfaces are still evolving in the community and >> might follow >> the community >> Committed - interfaces are stable in the community >> Project Private - no review required, just document in table >> Contracted (interface modifier) - further review required >> >> Appendix A - References >> 1. Solaris Installation Locations Policy >> http://opensolaris.org/os/community/arc/policies/install-locations/ >> 2. /usr/gnu Installation ARC case >> http://opensolaris.org/os/community/arc/caselog/2007/047/ >> 3. Secure By Default Policy >> http://opensolaris.org/os/community/arc/policies/secure-by-default/ >> 4. Network Install Time Securityuy Policy >> http://www.opensolaris.org/os/community/arc/policies/NITS-policy/ >> 5. Adding RBAC Authorizations Policy >> http://opensolaris.org/os/community/arc/bestpractices/rbac-auths/ >> 6. When to use setuid -vs- RBAC roles and profiles >> >> http://opensolaris.org/os/community/arc/bestpractices/rbac-intro/ and >> 7. Building RBAC Rights Profiles >> >> http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ >> 8. Solaris Audit Policy >> http://opensolaris.org/os/community/arc/policies/audit-policy/ >> 9. Security questionaire >> >> http://opensolaris.org/os/community/arc/bestpractices/security-questions/ >> 10. Interface Taxonomy >> >> http://www.opensolaris.org/os/community/arc/policies/interface-taxonomy/ >> 11. Plugable Authentication Modules -- PAM >> http://opensolaris.org/os/community/arc/policies/PAM/ >> 12. Reusable Passwords In Command Line Arguments and Environment >> Variables >> >> http://opensolaris.org/os/community/arc/bestpractices/passwords-cli/ >> 13. Storing Reusable Passwords on a Filesystem >> >> http://opensolaris.org/os/community/arc/bestpractices/passwords-files/ >> 14. Release Taxonomy >> http://opensolaris.org/os/community/arc/policies/release-taxonomy/ >> 15. Service Management Facility (SMF) usage >> http://opensolaris.org/os/community/arc/policies/SMF-policy/ >> >> Appendix B - Suggested case materials >> 1. man pages >> 2. SMF manifests >> 3. links to contracts >> Appendix C - Definitions >> Submitter >> an agent responsible for creation of an ARC project along with the >> materials describing that project. >> Owner >> the ARC agent responsible for shepherding the case through review >> and ensuring a formal opinion is written where required. >> Maintainer >> an agent responsible for releasing new versions of a program, >> typically >> the "main" contributor or person incharge of making Architectural >> decisions for the project >> Contributor >> an agent who make contributions to a project, typically has a >> voice in >> making Architectural decisions for the project >> Monitoring >> an agent who is only following the changes made in the community and >> has no Architectural input into the project >> Volatile* >> interfaces that are very fluid and typically follow the >> originating community. Typically these interfaces can not be >> imported by other >> projects. >> Uncommitted* >> interfaces that are still evolving but will most likely be present >> from >> release to release. >> Committed* >> interfaces that are stable and with Sun guaranteeing some level of >> compatibility from release to release. >> Project Private* >> interfaces that are exposed only to or intended to be used only by >> the project being reviewed. These interfaces can not be imported by >> other projects. >> Not-An-Interface* >> components that are not interfaces. >> Contracted* (interface modifier) - ARC review of Contract required >> interfaces that do not allow another project to import can be >> *Note: see >> http://opensolaris.org/os/community/arc/policies/interface-taxonomy/ >> for details >> >> 6. Resources and Schedule >> 6.4. Steering Committee requested information >> 6.4.1. Consolidation C-team Name: >> SFW >> 6.5. ARC review type: FastTrack >> 6.6. ARC Exposure: open >> > -- Jim Gates Sun Microsystems Nashua, NH, USA http://sun.com/postgresql From Brian.Cameron@sun.com Tue Sep 2 10:58:58 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m82HwwdN014965 for ; Tue, 2 Sep 2008 10:58:58 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m82HwtCE015165 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Tue, 2 Sep 2008 10:58:57 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K6K00411XY8XL00@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Tue, 02 Sep 2008 11:58:56 -0600 (MDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K6K00138XY7S430@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Tue, 02 Sep 2008 11:58:55 -0600 (MDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m82HwtpC012838 for ; Tue, 02 Sep 2008 17:58:55 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K6K00801W5LKL00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Tue, 02 Sep 2008 11:58:55 -0600 (MDT) Received: from [129.153.250.51] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K6K005ZYXXOOU40@mail-amer.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Tue, 02 Sep 2008 11:58:37 -0600 (MDT) Date: Tue, 02 Sep 2008 12:58:43 -0500 From: Brian Cameron Subject: Re: wxWidgets: Cross-Platform GUI Library [LSARC/2008/476 FastTrack timeout 08/01/2008] In-reply-to: <48BD70E3.5060301@sun.com> Sender: Brian.Cameron@sun.com To: James Gates Cc: lsarc-ext@sun.com, Mayuresh Nirhali , Alfred.Peng@sun.com Message-id: <48BD7ED3.1040300@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200807251929.m6PJTU6T029745@sac.sfbay.sun.com> <488A2C93.4090509@sun.com> <48BD70E3.5060301@sun.com> User-Agent: Thunderbird 2.0.0.16 (X11/20080811) Status: RO Content-Length: 18118 James: > This case was today closed approved. > > There were some concerns (from Brian Cameron) regarding accessibility and full > section 508 compliance. These are now resolved - A waiver to integrate was > granted by Michele Budris based on a commitment from the project team to work > with wxWidgets community to provide the support for missing a11y features. The > project team now intend to integrate in snv_100. This isn't exactly accurate. The pgAdmin application is currently the only program in Solaris which uses wxWidgets. The a11y team provided the waiver for pgAdmin's usage of wxWidgets since the functionality can be accessed for users with disabilities without needing to use the wxWidgets-based pgAdmin. Instead such users can use CLI commands from a terminal program to do the same things that pgAdmin provides. However, if any future programs integrate into Solaris that depend on wxWidgets, they will need to go through a similar waiver process, or the underlying wxWidgets accessibility issues will need to be addressed. Brian > James Gates wrote: >> I'm sponsoring this case for Mayuresh Nirhali and Alfred Peng. Timeout >> is set for Friday 1st Aug. The onepager & interfaces.txt files are >> available in the case materials directory. >> >> The (attached) proposal is the completed FOSS checklist. No questions >> resulted in "ARC review required", but because of Brian Cameron's recent >> statement re. accessibility, I think it should be reviewed. >> >> But I do recall during the ARC[1] case for pgAdmin (which uses >> wxWidgets/GTK+) we discussed accessibility and it was determined that >> wxWidgets was section 508 compliant. Do we need to check this again? >> >> [1] http://sac.sfbay/LSARC/2006/644/ >> >> >> James Gates wrote: >> >>> Template Version: @(#)sac_nextcase 1.66 04/17/08 SMI >>> This information is Copyright 2008 Sun Microsystems >>> 1. Introduction >>> 1.1. Project/Component Working Name: >>> wxWidgets: Cross-Platform GUI Library >>> 1.2. Name of Document Author/Supplier: >>> Author: Mayuresh Nirhali >>> 1.3 Date of This Document: >>> 25 July, 2008 >>> 4. Technical Description >>> 1.0 Project Information >>> 1.1 Name of project/component >>> wxWidgets: Cross-Platform GUI Library >>> >>> 1.2 Author of document >>> Mayuresh Nirhali >>> >>> 2.0 Project Summary >>> 2.1 Project Description >>> >>> wxWidgets provides a single, >>> easy-to-use API for writing GUI applications on multiple >>> platforms >>> that still utilize the native platform's controls and utilities. >>> On top of great GUI functionality, wxWidgets provides: online >>> help, >>> network programming, streams, clipboard and drag and drop, >>> multithreading, image loading and saving in a variety of popular >>> formats, database support, HTML viewing and printing, and much >>> much >>> more. >>> >>> Please note that WxWidgets version 2.8.8 already exists in >>> OpenSolaris >>> today, but it is statically linked with pgAdmin3 (LSARC/2006/644 - >>> PostgreSQL database adiministration GUI tool). The scope of this ARC >>> case is only to expose wxWidgets as a shared library to other Solaris >>> components, such as FileZilla. >>> >>> 2.2 Release binding >>> What is is the release binding? >>> (see >>> http://opensolaris.org/os/community/arc/policies/release-taxonomy/) >>> [ ] Major >>> [ ] Minor >>> [X] Patch or Micro >>> [ ] Unknown -- ARC review required >>> >>> 2.3 Type of project >>> Is this case a Linux Familiarity project? >>> [X] Yes >>> [ ] No >>> >>> 2.4 Originating Community >>> 2.4.1 Community Name >>> http://www.wxwidgets.org/ >>> 2.4.2 Community Involvement >>> Indicate Sun's involvement in the community >>> [ ] Maintainer >>> [ ] Contributor >>> [X] Monitoring >>> Will the project team work with the upstream community to >>> resolve >>> architectural issues of interest to Sun? >>> [X] Yes [ ] No - briefly explain >>> Will we or are we forking from the community? >>> [ ] Yes - ARC review required prior to forking >>> [X] No >>> 3.0 Technical Description >>> 3.1 Installation & Sharable >>> 3.1.1S Solaris Installation - section only required for Solaris >>> Software >>> (see >>> http://opensolaris.org/os/community/arc/policies/install-locations/ >>> for details) >>> Does this project follow the Install Locations best practice? >>> [X] Yes [ ] No - ARC review required >>> Does this project install into /usr under >>> [sbin|bin|lib|include|man|share]? >>> [X] Yes >>> [ ] No or N/A >>> Does this project install into /opt? >>> [ ] Yes - explain below >>> [X] No or N/A >>> Does this project install into a different directory >>> structure? >>> [ ] Yes - ARC review required >>> [X] No or N/A >>> Do any of the components of this project conflict with >>> anything under /usr? >>> (see http://opensolaris.org/os/community/arc/caselog/2007/047/ >>> for details) >>> [ ] Yes - explain below >>> [X] No >>> If conflicts exist then will this project install under >>> /usr/gnu? >>> [ ] Yes >>> [ ] No - ARC review required >>> [X] N/A >>> Is this project installing into /usr/sfw? >>> [ ] Yes - ARC review required >>> [X] No >>> >>> 3.2 Exported Libraries >>> Are libraries being delivered by this project? >>> [X] Yes >>> [] No - continue with next section (section 3.3) >>> Are 64-bit versions of the libraries being delivered? >>> [X] Yes >>> [ ] No - ARC review required >>> Are static versions of the libraries being delivered? >>> [ ] Yes - ARC review required >>> [X] No 3.3 Services and the /etc Directory >>> (see http://opensolaris.org/os/community/arc/policies/SMF-policy/) >>> Does the project integrate anything into /etc/init.d or /etc/rc?.d? >>> [ ] Yes - ARC review required >>> [X] No >>> Does the project integrate any new entries into >>> /etc/inittab or >>> /etc/inetd.conf? >>> [ ] Yes - ARC review required >>> [X] No >>> Does the project integrate any private non-public files >>> into /etc/default >>> or /etc/ configuration files? >>> [ ] Yes - ARC review required >>> [X] No >>> Does the service manifests method context grant rights >>> above that >>> of the noaccess user and basic privilege set? >>> [ ] Yes - ARC review required >>> [X] No >>> 3.4 Security >>> 3.4.1 Secure By Default (see >>> http://opensolaris.org/os/community/arc/policies/secure-by-default/ >>> for details) >>> (see >>> http://www.opensolaris.org/os/community/arc/policies/NITS-policy/ for >>> details) >>> (see parts of >>> http://opensolaris.org/os/community/arc/policies/SMF-policy/ for >>> addtional details) >>> Are there any network services provided by this project? >>> [ ] Yes >>> [X] No - continue with the next section (section 3.4.2) >>> Are network services enabled by default? >>> [ ] Yes - ARC review required >>> [ ] No >>> [X] N/A >>> Are network services automatically enabled by the project >>> during installation? >>> [ ] Yes - ARC review required >>> [ ] No >>> [X] N/A >>> Are inbound network communications denied by default? >>> [ ] Yes >>> [ ] No - ARC review required >>> [X] N/A >>> Is inbound data checked to prevent content-based attacks? >>> [ ] Yes >>> [ ] No - ARC review required >>> [X] N/A >>> Is the outbound receiver authenticated? >>> [ ] Yes >>> [ ] No - ARC review required >>> [X] N/A >>> Is the receiver authenticated prior to receiving any >>> sensitive outbound communication? >>> [ ] Yes >>> [ ] No - ARC review required >>> [X] N/A >>> 3.4.2 Authorization >>> (see >>> http://opensolaris.org/os/community/arc/bestpractices/rbac-intro/ and >>> >>> http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ and >>> >>> http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ >>> for details) >>> Are there any setuid/setgid privileged binaries in the project? >>> [ ] Yes - ARC review required >>> [X] No - continue with next section (section 3.4.3) >>> If yes then are the setuid/setgid privileges handled by >>> the use of roles? >>> [ ] Yes >>> [ ] No - ARC review required >>> >>> 3.4.3 Auditing >>> (see >>> http://opensolaris.org/os/community/arc/policies/audit-policy/ for >>> details) >>> (see http://opensolaris.org/os/community/arc/caselog/2003/397 >>> for details) >>> Does this component contain administrative or security enforcing >>> software? >>> [ ] Yes - ARC review required >>> [X] No - continue to next section (section 3.4.4) >>> (see >>> http://opensolaris.org/os/community/arc/caselog/2003/397 for details) >>> Do the components create audit logs detailing what took place >>> including what event >>> took place, who was involved, when the event took place? >>> [ ] Yes - ARC contract and Audit project team review required >>> [ ] No - ARC review required >>> 3.4.4 Authentication >>> (see http://opensolaris.org/os/community/arc/policies/PAM/) >>> Do the components contain any authentication code? >>> [ ] Yes >>> [X] No - continue to next section (section 3.4.5) >>> If yes do the components use PAM (plugable authentication >>> modules) for authentication? >>> [ ] Yes >>> [ ] No - ARC review required >>> If yes is a single PAM session maintained during >>> authentication? >>> [ ] Yes >>> [ ] No - ARC review required >>> If yes are the components sufficiently privileged to allow >>> the requested operations (authentication, password change, >>> process credential manipulation, audit state initialization)? >>> [ ] Yes - briefly describe below >>> [ ] No - ARC review required >>> 3.4.5 Passwords >>> (see >>> http://opensolaris.org/os/community/arc/bestpractices/passwords-cli/ and >>> >>> http://opensolaris.org/os/community/arc/bestpractices/passwords-files/ >>> for details) >>> Do any of the components for the project deal with passwords? >>> [ ] Yes >>> [X] No - continue to next section (section 3.4.6) >>> If yes are these passwords entered via the CLI or >>> environment? >>> [ ] Yes - ARC review required >>> [ ] No >>> Are passwords stored within the file system for the >>> component? >>> [ ] Yes >>> [ ] No - continue to next section (section 3.4.6) >>> If yes are the permissions on the file such to protect >>> exposing the password(s)? >>> [ ] Yes >>> [ ] No - ARC review required >>> 3.4.6 General Security Questions >>> (see >>> http://opensolaris.org/os/community/arc/bestpractices/security-questions/ >>> for details) >>> Are there any network protocols used by this project? >>> [ ] Yes >>> [X] No - continue with the next section (section 3.5) >>> Do the components use standard network protocols? >>> [ ] Yes >>> [ ] No - ARC review required >>> Do network services for the project make decisions based >>> upon user, host or service identities? >>> [ ] Yes - explain below >>> [ ] No >>> [X] N/A >>> Do the components make use of secret information during >>> authentication and/or >>> authorization? >>> [ ] Yes - explain below >>> [ ] No >>> [X] N/A >>> 3.5 Networking >>> Do the components access the network? >>> [ ] Yes >>> [X] No - continue with the next section (section 3.6) >>> If yes do the components support IPv6? >>> [ ] Yes [ ] No - ARC review required >>> 3.6 Core Solaris Components >>> Do the components of this project compete with or duplicate core >>> Solaris components? >>> [ ] Yes - ARC review required >>> [X] No Examples of Core Solaris Components include >>> but are not limited to: >>> Secure By Default >>> Authorizations >>> PAM -- Plugable Authentication Module >>> Privilege >>> PRM -- Process Rights Management -- Privilege >>> Audit >>> xVm -- Virtualization >>> zones / Solaris Containers >>> PRM -- Process Rights Management >>> RBAC -- Role Based Access Control >>> TX / Trusted Extensions >>> ZFS >>> SMF -- Service Management Facility >>> FMA -- Fault Management Architecture >>> SCF -- Smart Card Facility >>> IPsec >>> 4.0 Interfaces >>> (see >>> http://www.opensolaris.org/os/community/arc/policies/interface-taxonomy/ >>> for details) >>> 4.1 Exported Interfaces >>> >>> See file interfaces.txt in case materials directory >>> >>> Brief Interface Classifications - See Appendix C for >>> definitions >>> Volatile - interfaces are fluid and will follow a rapidly changing >>> community >>> Uncommitted - interfaces are still evolving in the community and >>> might follow >>> the community >>> Committed - interfaces are stable in the community >>> Project Private - no review required, just document in table >>> Contracted (interface modifier) - further review required >>> >>> Appendix A - References >>> 1. Solaris Installation Locations Policy >>> http://opensolaris.org/os/community/arc/policies/install-locations/ >>> 2. /usr/gnu Installation ARC case >>> http://opensolaris.org/os/community/arc/caselog/2007/047/ >>> 3. Secure By Default Policy >>> http://opensolaris.org/os/community/arc/policies/secure-by-default/ >>> 4. Network Install Time Securityuy Policy >>> http://www.opensolaris.org/os/community/arc/policies/NITS-policy/ >>> 5. Adding RBAC Authorizations Policy >>> http://opensolaris.org/os/community/arc/bestpractices/rbac-auths/ >>> 6. When to use setuid -vs- RBAC roles and profiles >>> >>> http://opensolaris.org/os/community/arc/bestpractices/rbac-intro/ and >>> 7. Building RBAC Rights Profiles >>> >>> http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ >>> 8. Solaris Audit Policy >>> http://opensolaris.org/os/community/arc/policies/audit-policy/ >>> 9. Security questionaire >>> >>> http://opensolaris.org/os/community/arc/bestpractices/security-questions/ >>> 10. Interface Taxonomy >>> >>> http://www.opensolaris.org/os/community/arc/policies/interface-taxonomy/ >>> 11. Plugable Authentication Modules -- PAM >>> http://opensolaris.org/os/community/arc/policies/PAM/ >>> 12. Reusable Passwords In Command Line Arguments and Environment >>> Variables >>> >>> http://opensolaris.org/os/community/arc/bestpractices/passwords-cli/ >>> 13. Storing Reusable Passwords on a Filesystem >>> >>> http://opensolaris.org/os/community/arc/bestpractices/passwords-files/ >>> 14. Release Taxonomy >>> http://opensolaris.org/os/community/arc/policies/release-taxonomy/ >>> 15. Service Management Facility (SMF) usage >>> http://opensolaris.org/os/community/arc/policies/SMF-policy/ >>> >>> Appendix B - Suggested case materials >>> 1. man pages >>> 2. SMF manifests >>> 3. links to contracts >>> Appendix C - Definitions >>> Submitter >>> an agent responsible for creation of an ARC project along with the >>> materials describing that project. >>> Owner >>> the ARC agent responsible for shepherding the case through review >>> and ensuring a formal opinion is written where required. >>> Maintainer >>> an agent responsible for releasing new versions of a program, >>> typically >>> the "main" contributor or person incharge of making Architectural >>> decisions for the project >>> Contributor >>> an agent who make contributions to a project, typically has a >>> voice in >>> making Architectural decisions for the project >>> Monitoring >>> an agent who is only following the changes made in the community and >>> has no Architectural input into the project >>> Volatile* >>> interfaces that are very fluid and typically follow the >>> originating community. Typically these interfaces can not be >>> imported by other >>> projects. >>> Uncommitted* >>> interfaces that are still evolving but will most likely be present >>> from >>> release to release. >>> Committed* >>> interfaces that are stable and with Sun guaranteeing some level of >>> compatibility from release to release. >>> Project Private* >>> interfaces that are exposed only to or intended to be used only by >>> the project being reviewed. These interfaces can not be imported by >>> other projects. >>> Not-An-Interface* >>> components that are not interfaces. >>> Contracted* (interface modifier) - ARC review of Contract required >>> interfaces that do not allow another project to import can be >>> *Note: see >>> http://opensolaris.org/os/community/arc/policies/interface-taxonomy/ >>> for details >>> >>> 6. Resources and Schedule >>> 6.4. Steering Committee requested information >>> 6.4.1. Consolidation C-team Name: >>> SFW >>> 6.5. ARC review type: FastTrack >>> 6.6. ARC Exposure: open >>> >