From bc99092@sac.sfbay.sun.com Mon Mar 30 17:54:22 2009
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n2V0sMAw001273
	for <LSARC-ext@sac.sfbay.sun.com>; Mon, 30 Mar 2009 17:54:22 -0700 (PDT)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n2V0sHsC061396;
	Mon, 30 Mar 2009 18:54:22 -0600 (MDT)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHC00A1FIIK6T00@nwk-avmta-1.sfbay.Sun.COM>; Mon,
 30 Mar 2009 17:54:20 -0700 (PDT)
Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHC001JSIIKNS40@nwk-avmta-1.sfbay.Sun.COM>; Mon,
 30 Mar 2009 17:54:20 -0700 (PDT)
Received: from sac.sfbay.sun.com (sac.SFBay.Sun.COM [129.146.226.132])
	by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2)
 with ESMTP id n2V0sIIp054902; Mon, 30 Mar 2009 17:54:18 -0700 (PDT)
Received: from sac.sfbay.sun.com (localhost [127.0.0.1])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n2V0sHv7001266; Mon,
 30 Mar 2009 17:54:17 -0700 (PDT)
Received: (from bc99092@localhost)
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id n2V0sHZe001254; Mon,
 30 Mar 2009 17:54:17 -0700 (PDT)
Date: Mon, 30 Mar 2009 17:54:17 -0700 (PDT)
From: Brian Cameron <bc99092@sac.sfbay.sun.com>
Subject: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
To: LSARC-ext@sun.com
Cc: Brian.Cameron@sun.com, Lin.Ma@sun.com
Message-id: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
Status: RO
Content-Length: 7696


Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI
This information is Copyright 2009 Sun Microsystems
1. Introduction
    1.1. Project/Component Working Name:
	 Update to GNOME 2.26 media applications
    1.2. Name of Document Author/Supplier:
	 Author:  Brian Cameron
    1.3  Date of This Document:
	30 March, 2009
4. Technical Description
Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI
This information is Copyright 2009 Sun Microsystems
1. Introduction
    1.1. Project/Component Working Name:
         Update to GNOME 2.26 media applications
    1.2. Name of Document Author/Supplier:
         Author:  Brian Cameron
    1.3  Date of This Document:
         March 30, 2009

1. Introduction
   1.1. Project/Component Working Name:

        Update to GNOME 2.26 media applications

   1.2. Name of Document Author/Supplier:

        Brian Cameron

   1.3. Date of This Document:

        March 30, 2009

   1.4. Name of Major Document Customer(s)/Consumer(s):
        1.4.1. The PAC or CPT you expect to review your project:

                Solaris PAC

        1.4.2. The ARC(s) you expect to review your project:

                LSARC

        1.4.3. The Director/VP who is "Sponsoring" this project:

                robert.odea@sun.com

        1.4.4. The name of your business unit:

                OPG / OpenSource

   1.5. Email Aliases:
        1.5.1. Responsible Manager:     leo.binchy@Sun.COM
        1.5.2. Responsible Engineer:    brian.cameron@Sun.COM
        1.5.3. Marketing Manager:       glynn.foster@sun.com
        1.5.4. Interest List:           desktop-discuss@opensolaris.org

4. Technical Description:

    4.1. Details: 

    Programs which use libbrasero-media now require additional 
    authorization.  The need for the brasero application to have this
    authorization is described in the "LSARC 2009/201 Update to Brasero 2.25.x"
    case.

    In GNOME 2.26 the applications sound-juicer, rhythmbox, and totem
    also now use libbrasero-media and require similar authorization.
    The sound-juicer application is a CD burning and ripping application
    and uses the libbrasero-media library directly.  Both totem and
    rhythmbox support CD burning plugins, and those plugins make use
    of libbrasero-media.
    
    So, much like brasero, the following lines will be added to exec_attr(4)
    to support this:

    Desktop CD User:solaris:cmd:::/usr/bin/rhythmbox.bin:privs=sys_devices
    Desktop CD User:solaris:cmd:::/usr/bin/sound-juicer.bin:privs=sys_devices
    Desktop CD User:solaris:cmd:::/usr/bin/totem.bin:privs=sys_devices

    Note the "Desktop CD User" was defined in the LSARC 2009/201 case.

    As a part of this change, the rhythmbox, totem and sound-juicer binaries
    will be moved to rhythmbox.bin, totem.bin, and sound-juicer.bin.  The
    /usr/bin/rhythmbox, /usr/bin/totem, and /usr/bin/sound-juicer interfaces
    will be scripts that launch the actual binary with pfexec.

    The totem "audiocd" and "cd-recorder" plugins provide CD burning support.
    These were delivered previously, but used the nautilus-cd-burner library.
    Now they use libbrasero-media.  The rhythmbox application now delivers a
    new brasero-disc-recorder plugin which also uses libbrasero-media.

    Aside from the above changes, there are some other changes to support
    additional plugins in totem and rhythmbox.  For example, the rhythmbox
    module no longer provides the libtotem-basic-plugin, and this has been
    replaced with the separate cone, gmp, mully and narrowspace plugins.  There
    are also some new rhythmbox and totem plugins available that we plan to
    provide.

    CD burning

    4.5. Interfaces Changes:

      Exported Interfaces                     Stability    Comments
      --------------------------------------- -----------  -------------
      /usr/bin/rhythmbox.bin                  Volatile     Binary
      /usr/bin/rhythmbox                      Volatile     Script
      /usr/bin/sound-juicer.bin               Volatile     Binary
      /usr/bin/sound-juicer                   Volatile     Script
      /usr/bin/totem.bin                      Volatile     Binary
      /usr/bin/totem                          Volatile     Script
      /usr/lib/totem/plugins/brasero-disc-recorder/libbrasero-disc-recorder.so 
                                              Volatile     New plugin
                                                           using brasero
                                                           library.

      /usr/lib/rhythmbox/plugins/upnp_coherence/*.py
                                              Volatile     New plugin which
                                                           provides Rhythmbox
                                                           support for UPnP
                                                           media servers via
                                                           Coherence.

      /usr/lib/totem/plugins/coherence_upnp/coherence_upnp.py
      /usr/lib/totem/plugins/jamendo/jamendo.py
      /usr/lib/totem/plugins/opensubtitles/hash.py
      /usr/lib/totem/plugins/opensubtitles/opensubtitles.py
      /usr/lib/totem/plugins/screenshot/libscreenshot.so
                                              Volatile     New totem plugins
                                                           which support
                                                           accessing UPnP media
                                                           servers via
                                                           Coherence, accessing
                                                           media via Jamendo,
                                                           subtitles, and
                                                           taking a screenshot
                                                           of the video that is
                                                           playing.

      /usr/lib/firefox/plugins/libtotem-basic-plugin.so
                                              Obsolete     Replaced by other
                                              Volatile     plugins listed
                                                           below.

      /usr/lib/firefox/plugins/libtotem-cone-plugin.so
      /usr/lib/firefox/plugins/libtotem-gmp-plugin.so
      /usr/lib/firefox/plugins/libtotem-mully-plugin.so
      /usr/lib/firefox/plugins/libtotem-narrowspace-plugin.so
                                              Volatile     New plugins added to
                                                           support more media
                                                           formats.


      Imported Interfaces       Stability          Comments
      -----------------------   ---------------    -----------------------
      Brasero 2.25              Volatile           LSARC 2009/201
      /usr/bin/pfexec           Committed          PSARC 2002/188
      /etc/security/exec_attr   Committed

    4.7.  Admin/Config Impact:

          Same as described in the LSARC 2009/201 case.

    4.11. Security Impact:

          Same as described in the LSARC 2009/201 case.
          

5. Reference Documents:

   LSARC 2009/201 Update brasero to 2.25.x

6. Resources and Schedule
    6.4. Steering Committee requested information
         6.4.1. Consolidation C-team Name:
                JDS - Desktop
    6.5. ARC review type: FastTrack
    6.6. ARC Exposure: open


6. Resources and Schedule
    6.4. Steering Committee requested information
   	6.4.1. Consolidation C-team Name:
		Desktop
    6.5. ARC review type: FastTrack
    6.6. ARC Exposure: open


From danek.duvall@sun.com Mon Mar 30 19:08:12 2009
Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n2V28CcS008864
	for <LSARC-ext@sac.SFBay.Sun.COM>; Mon, 30 Mar 2009 19:08:12 -0700 (PDT)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n2V287bn017557
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 31 Mar 2009 10:08:11 +0800 (SGT)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHC00K0FLXLDI00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Mon, 30 Mar 2009 19:08:09 -0700 (PDT)
Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHC0012QLXLNJA0@nwk-avmta-1.sfbay.Sun.COM> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon,
 30 Mar 2009 19:08:09 -0700 (PDT)
Received: from mumak.SFBay.Sun.COM (mumak.SFBay.Sun.COM [129.146.229.4])
	by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2)
 with ESMTP id n2V288CB030980; Mon, 30 Mar 2009 19:08:08 -0700 (PDT)
Received: from mumak.SFBay.Sun.COM (loghost [127.0.0.1])
	by mumak.SFBay.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id n2V2ANdw024729; Mon,
 30 Mar 2009 19:10:23 -0700 (PDT)
Received: (from dduvall@localhost)
	by mumak.SFBay.Sun.COM (8.14.3+Sun/8.14.3/Submit) id n2V2ANfO024728; Mon,
 30 Mar 2009 19:10:23 -0700 (PDT)
Date: Mon, 30 Mar 2009 19:10:23 -0700
From: Danek Duvall <danek.duvall@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202	FastTrack
 timeout 04/03/2009]
In-reply-to: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
To: Brian Cameron <bc99092@sac.sfbay.sun.com>
Cc: LSARC-ext@sun.com, Brian.Cameron@sun.com, Lin.Ma@sun.com
Message-id: <20090331021023.GS8050@mumak.SFBay.Sun.COM>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Content-disposition: inline
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
User-Agent: Mutt/1.5.16 (2007-06-27)
Status: RO
Content-Length: 772

On Mon, Mar 30, 2009 at 05:54:17PM -0700, Brian Cameron wrote:

>     As a part of this change, the rhythmbox, totem and sound-juicer binaries
>     will be moved to rhythmbox.bin, totem.bin, and sound-juicer.bin.  The
>     /usr/bin/rhythmbox, /usr/bin/totem, and /usr/bin/sound-juicer interfaces
>     will be scripts that launch the actual binary with pfexec.

Any chance you'd be willing to maintain a patch to make these guys re-exec
themselves under pfexec if they don't have sys_devices, rather than
cluttering up /usr/bin with these scripts?

Wasn't there a project afoot to essentially make pfexec an always-on,
in-kernel operation?  That's really the right answer, though obviously not
this case, nor something you can depend on.

"Get off my lawn", etc.

Danek

From Darren.Moffat@Sun.COM Tue Mar 31 03:18:03 2009
Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n2VAI2ss000953
	for <LSARC-ext@sac.sfbay.sun.com>; Tue, 31 Mar 2009 03:18:02 -0700 (PDT)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n2VAHpcG012942
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 31 Mar 2009 18:18:01 +0800 (SGT)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHD00G098M07H00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 31 Mar 2009 03:18:00 -0700 (PDT)
Received: from gmp-eb-inf-1.sun.com ([192.18.6.21])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHD00L8U8LZJQB0@nwk-avmta-1.sfbay.Sun.COM> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue,
 31 Mar 2009 03:18:00 -0700 (PDT)
Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe3.eu.sun.com [192.18.6.12])
	by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n2VAHxwR027663	for
 <LSARC-ext@sun.com>; Tue, 31 Mar 2009 10:17:59 +0000 (GMT)
Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KHD008007NW1100@fe-emea-09.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 31 Mar 2009 11:17:59 +0100 (BST)
Received: from [192.168.1.104]
 (cpc2-rdng20-2-0-cust917.15-3.cable.virginmedia.com [86.28.167.150])
 by fe-emea-09.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 with ESMTPSA id <0KHD00JJD8LQC600@fe-emea-09.sun.com>; Tue,
 31 Mar 2009 11:17:51 +0100 (BST)
Date: Tue, 31 Mar 2009 11:17:50 +0100
From: Darren J Moffat <Darren.Moffat@Sun.COM>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
Sender: Darren.Moffat@Sun.COM
To: Brian Cameron <bc99092@sac.sfbay.sun.com>
Cc: LSARC-ext@Sun.COM, Lin.Ma@Sun.COM
Message-id: <49D1EDCE.7040201@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
User-Agent: Thunderbird 2.0.0.18 (X11/20090211)
Status: RO
Content-Length: 1164

Brian Cameron wrote:
>     So, much like brasero, the following lines will be added to exec_attr(4)
>     to support this:
> 
>     Desktop CD User:solaris:cmd:::/usr/bin/rhythmbox.bin:privs=sys_devices
>     Desktop CD User:solaris:cmd:::/usr/bin/sound-juicer.bin:privs=sys_devices
>     Desktop CD User:solaris:cmd:::/usr/bin/totem.bin:privs=sys_devices

How does this work on Linux kernel based systems ?  How do these 
programs get access to the devices ?

Given what these programs do I suspect what what is really wanted is 
read and sometimes write access to the CD/DVD device nodes.

Running them with sys_devices to over come that feels really wrong. 
Particularly given that "Desktop CD User" is ultimately being added to 
"Console User".

Can't we instead use logindevperm so that the CD/DVD devices are made 
available with suitable unix permissions - just like we already do for 
USB removable-media devices, generic usb devices, video devices etc.

While there exists precedent for this hack I really don't like it and 
having it proliferated further isn't a good idea.

Sorry I didn't bring this up in the previous brasero case.

--
Darren J Moffat

From Darren.Moffat@sun.com Tue Mar 31 04:42:02 2009
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n2VBg0Zf001294
	for <LSARC-ext@sac.sfbay.sun.com>; Tue, 31 Mar 2009 04:42:01 -0700 (PDT)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n2VBflVh010002
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 31 Mar 2009 12:42:00 +0100 (BST)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHD00D0DCHX1U00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 31 Mar 2009 04:41:57 -0700 (PDT)
Received: from gmp-eb-inf-1.sun.com ([192.18.6.21])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHD00LIBCHWVOE0@nwk-avmta-2.sfbay.sun.com> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue,
 31 Mar 2009 04:41:56 -0700 (PDT)
Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10])
	by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n2VBftlh011453	for
 <LSARC-ext@sun.com>; Tue, 31 Mar 2009 11:41:55 +0000 (GMT)
Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KHD00100AYKZN00@fe-emea-10.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 31 Mar 2009 12:41:55 +0100 (BST)
Received: from [192.168.1.104]
 (cpc2-rdng20-2-0-cust917.15-3.cable.virginmedia.com [86.28.167.150])
 by fe-emea-10.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 with ESMTPSA id <0KHD0050JCHVV2D0@fe-emea-10.sun.com>; Tue,
 31 Mar 2009 12:41:55 +0100 (BST)
Date: Tue, 31 Mar 2009 12:41:55 +0100
From: Darren J Moffat <Darren.Moffat@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49D1EDCE.7040201@Sun.COM>
Sender: Darren.Moffat@sun.com
To: Brian Cameron <bc99092@sac.sfbay.sun.com>
Cc: LSARC-ext@sun.com, lin.ma@sun.com
Message-id: <49D20183.1020004@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49D1EDCE.7040201@Sun.COM>
User-Agent: Thunderbird 2.0.0.18 (X11/20090211)
Status: RO
Content-Length: 205

Why can't this case and the braseo one use the services provided by 
svc:/network/rpc/smserver ?  See rpc.smserverd(1M).

PSARC/2000/490 is the reference for the smserver architecture.

--
Darren J Moffat

From John.Fischer@sun.com Tue Mar 31 09:45:12 2009
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n2VGjBZi023399
	for <LSARC-ext@sac.sfbay.sun.com>; Tue, 31 Mar 2009 09:45:11 -0700 (PDT)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n2VGj5un004312
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 31 Mar 2009 17:45:10 +0100 (BST)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHD0050PQJ9ZZ00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 31 Mar 2009 09:45:09 -0700 (PDT)
Received: from brmea-mail-1.sun.com ([192.18.98.31])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHD00MBAQIO3CB0@nwk-avmta-2.sfbay.sun.com> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue,
 31 Mar 2009 09:44:48 -0700 (PDT)
Received: from fe-amer-09.sun.com ([192.18.109.79])
	by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n2VGims6029217	for
 <LSARC-ext@sun.com>; Tue, 31 Mar 2009 16:44:48 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KHD00100PATKG00@mail-amer.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 31 Mar 2009 10:44:48 -0600 (MDT)
Received: from [192.168.10.7] ([unknown] [76.20.56.47])
 by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7.0-5.01 64bit
 (built Feb 19 2009)) with ESMTPSA id <0KHD008U7QIB9R50@mail-amer.sun.com>; Tue,
 31 Mar 2009 10:44:36 -0600 (MDT)
Date: Tue, 31 Mar 2009 09:43:40 -0700
From: John Fischer <John.Fischer@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49D1EDCE.7040201@Sun.COM>
Sender: John.Fischer@sun.com
To: Darren J Moffat <Darren.Moffat@sun.com>
Cc: Brian Cameron <bc99092@sac.sfbay.sun.com>, LSARC-ext@sun.com,
        Lin.Ma@sun.com
Reply-to: John.Fischer@sun.com
Message-id: <49D2483C.7030300@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49D1EDCE.7040201@Sun.COM>
User-Agent: Thunderbird 2.0.0.18 (X11/20090211)
Status: RO
Content-Length: 1419

Darren,

The Brasero case (LSARC/2009/201) is still open.  So these
issues can be addressed by both Brian (LSARC/2009/202) and
Lin Ma (LSARC/2009/201).

Thanks,

John

Darren J Moffat wrote:
> Brian Cameron wrote:
>>     So, much like brasero, the following lines will be added to 
>> exec_attr(4)
>>     to support this:
>>
>>     Desktop CD 
>> User:solaris:cmd:::/usr/bin/rhythmbox.bin:privs=sys_devices
>>     Desktop CD 
>> User:solaris:cmd:::/usr/bin/sound-juicer.bin:privs=sys_devices
>>     Desktop CD User:solaris:cmd:::/usr/bin/totem.bin:privs=sys_devices
> 
> How does this work on Linux kernel based systems ?  How do these 
> programs get access to the devices ?
> 
> Given what these programs do I suspect what what is really wanted is 
> read and sometimes write access to the CD/DVD device nodes.
> 
> Running them with sys_devices to over come that feels really wrong. 
> Particularly given that "Desktop CD User" is ultimately being added to 
> "Console User".
> 
> Can't we instead use logindevperm so that the CD/DVD devices are made 
> available with suitable unix permissions - just like we already do for 
> USB removable-media devices, generic usb devices, video devices etc.
> 
> While there exists precedent for this hack I really don't like it and 
> having it proliferated further isn't a good idea.
> 
> Sorry I didn't bring this up in the previous brasero case.
> 
> -- 
> Darren J Moffat

From Brian.Cameron@sun.com Tue Mar 31 10:18:11 2009
Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n2VHIBlF026056
	for <LSARC-ext@sac.sfbay.sun.com>; Tue, 31 Mar 2009 10:18:11 -0700 (PDT)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n2VHHrEH020681
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 31 Mar 2009 10:18:11 -0700 (PDT)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHD00K1XS2A9F00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@Sun.COM); Tue, 31 Mar 2009 10:18:10 -0700 (PDT)
Received: from brmea-mail-2.sun.com ([192.18.98.43])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHD0010XS29AMF0@nwk-avmta-1.sfbay.Sun.COM> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue,
 31 Mar 2009 10:18:09 -0700 (PDT)
Received: from fe-amer-10.sun.com ([192.18.109.80])
	by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n2VHI9Xo025159	for
 <LSARC-ext@Sun.COM>; Tue, 31 Mar 2009 17:18:09 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KHD00500RNW0O00@mail-amer.sun.com> for LSARC-ext@Sun.COM
 (ORCPT LSARC-ext@Sun.COM); Tue, 31 Mar 2009 11:18:09 -0600 (MDT)
Received: from [129.153.250.178] ([unknown] [129.153.250.178])
 by mail-amer.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 with ESMTPSA id <0KHD00GS4S20HI90@mail-amer.sun.com>; Tue,
 31 Mar 2009 11:18:01 -0600 (MDT)
Date: Tue, 31 Mar 2009 12:17:25 -0500
From: Brian Cameron <Brian.Cameron@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49D2483C.7030300@sun.com>
Sender: Brian.Cameron@sun.com
To: John.Fischer@sun.com
Cc: Darren J Moffat <Darren.Moffat@sun.com>,
        Brian Cameron <bc99092@sac.sfbay.sun.com>, LSARC-ext@sun.com,
        Lin.Ma@sun.com
Message-id: <49D25025.5010204@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49D1EDCE.7040201@Sun.COM> <49D2483C.7030300@sun.com>
User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1b3pre)
 Gecko/20090323 Thunderbird/3.0b2
Status: RO
Content-Length: 2345


John/Darren/Danek:

I think it makes more sense to resolve these issues in the
LSARC 2009/201 Brasero case.  The need for totem, rhythmbox, and sound-
juicer to make any changes to exec_attr are caused by the need to link
in the libbrasero-burn library provided by LSARC 2009/201.  So, this
case depends on that case and will obviously be impacted by any
decisions made in the LSARC 2009/201 case.   I recommend that totem,
rhythmbox, and sound-juicer just follow whatever decisions are made for
the brasero case.

I went ahead and summarized all of your questions about this case
in an email in the LSARC 2009/201 thread.  I know Lin Ma did more
research on how the security-related changes, so I think he should
probably answer in that case.

I will be happy to update this case based on any decisions made in
the LSARC 2009/201 case, and I will highlight my changes by
sending emails to this list showing the differences.

Brian


> The Brasero case (LSARC/2009/201) is still open. So these
> issues can be addressed by both Brian (LSARC/2009/202) and
> Lin Ma (LSARC/2009/201).
>
> Thanks,
>
> John
>
> Darren J Moffat wrote:
>> Brian Cameron wrote:
>>> So, much like brasero, the following lines will be added to exec_attr(4)
>>> to support this:
>>>
>>> Desktop CD User:solaris:cmd:::/usr/bin/rhythmbox.bin:privs=sys_devices
>>> Desktop CD
>>> User:solaris:cmd:::/usr/bin/sound-juicer.bin:privs=sys_devices
>>> Desktop CD User:solaris:cmd:::/usr/bin/totem.bin:privs=sys_devices
>>
>> How does this work on Linux kernel based systems ? How do these
>> programs get access to the devices ?
>>
>> Given what these programs do I suspect what what is really wanted is
>> read and sometimes write access to the CD/DVD device nodes.
>>
>> Running them with sys_devices to over come that feels really wrong.
>> Particularly given that "Desktop CD User" is ultimately being added to
>> "Console User".
>>
>> Can't we instead use logindevperm so that the CD/DVD devices are made
>> available with suitable unix permissions - just like we already do for
>> USB removable-media devices, generic usb devices, video devices etc.
>>
>> While there exists precedent for this hack I really don't like it and
>> having it proliferated further isn't a good idea.
>>
>> Sorry I didn't bring this up in the previous brasero case.
>>
>> --
>> Darren J Moffat


From Artem.Kachitchkin@sun.com Tue Mar 31 10:30:08 2009
Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n2VHU6Bd026993
	for <LSARC-ext@sac.sfbay.sun.com>; Tue, 31 Mar 2009 10:30:06 -0700 (PDT)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n2VHU17W013655
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 1 Apr 2009 01:30:05 +0800 (SGT)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHD00L03SM5Q600@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 31 Mar 2009 10:30:05 -0700 (PDT)
Received: from sca-es-mail-1.sun.com ([192.18.43.132])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHD00KCGSM5UG00@nwk-avmta-1.sfbay.Sun.COM> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue,
 31 Mar 2009 10:30:05 -0700 (PDT)
Received: from fe-sfbay-10.sun.com ([192.18.43.129])
	by sca-es-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n2VHU4kw018272	for
 <LSARC-ext@sun.com>; Tue, 31 Mar 2009 10:30:04 -0700 (PDT)
Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KHD00G00PQ48F00@fe-sfbay-10.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 31 Mar 2009 10:30:04 -0700 (PDT)
Received: from [192.168.1.100] ([unknown] [75.6.230.171])
 by fe-sfbay-10.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 with ESMTPSA id <0KHD00MP1SLKA800@fe-sfbay-10.sun.com>; Tue,
 31 Mar 2009 10:29:44 -0700 (PDT)
Date: Tue, 31 Mar 2009 10:29:18 -0700
From: Artem Kachitchkine <Artem.Kachitchkin@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49D20183.1020004@Sun.COM>
Sender: Artem.Kachitchkin@sun.com
To: Darren J Moffat <Darren.Moffat@sun.com>
Cc: Brian Cameron <bc99092@sac.sfbay.sun.com>, LSARC-ext@sun.com,
        Lin.Ma@sun.com
Message-id: <49D252EE.6040909@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49D1EDCE.7040201@Sun.COM> <49D20183.1020004@Sun.COM>
User-Agent: Mozilla/5.0 Gecko/20040113
Status: RO
Content-Length: 438

Darren J Moffat wrote:
> Why can't this case and the braseo one use the services provided by 
> svc:/network/rpc/smserver ?  See rpc.smserverd(1M).

Please don't use smserver/libsmedia to gain USCSI privileges.

(Longer answer: 
http://www.mail-archive.com/opensolaris-discuss@opensolaris.org/msg06641.html)

sys_devices is needed to issue raw SCSI ioctls. I'm not sure about 
Linux, perhaps DAC permissions are sufficient there.

-Artem

From Darren.Moffat@Sun.COM Tue Mar 31 13:27:07 2009
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n2VKR7Or001378
	for <LSARC-ext@sac.sfbay.sun.com>; Tue, 31 Mar 2009 13:27:07 -0700 (PDT)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n2VKQueP005746
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 31 Mar 2009 21:27:06 +0100 (BST)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHE00H010T4WT00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 31 Mar 2009 13:27:04 -0700 (PDT)
Received: from gmp-eb-inf-1.sun.com ([192.18.6.21])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHE00EDL0T39940@nwk-avmta-2.sfbay.sun.com> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue,
 31 Mar 2009 13:27:04 -0700 (PDT)
Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10])
	by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n2VKR3HY011670	for
 <LSARC-ext@sun.com>; Tue, 31 Mar 2009 20:27:03 +0000 (GMT)
Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KHE005000RA0H00@fe-emea-09.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 31 Mar 2009 21:27:03 +0100 (BST)
Received: from [192.168.1.104]
 (cpc2-rdng20-2-0-cust917.15-3.cable.virginmedia.com [86.28.167.150])
 by fe-emea-09.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 with ESMTPSA id <0KHE00BII0T2EIA0@fe-emea-09.sun.com>; Tue,
 31 Mar 2009 21:27:03 +0100 (BST)
Date: Tue, 31 Mar 2009 21:27:01 +0100
From: Darren J Moffat <Darren.Moffat@Sun.COM>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49D252EE.6040909@sun.com>
Sender: Darren.Moffat@Sun.COM
To: Artem Kachitchkine <Artem.Kachitchkin@Sun.COM>
Cc: Brian Cameron <bc99092@sac.sfbay.sun.com>, LSARC-ext@Sun.COM,
        Lin.Ma@Sun.COM
Message-id: <49D27C95.1010705@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49D1EDCE.7040201@Sun.COM> <49D20183.1020004@Sun.COM>
 <49D252EE.6040909@sun.com>
User-Agent: Thunderbird 2.0.0.18 (X11/20090211)
Status: RO
Content-Length: 896

Artem Kachitchkine wrote:
> Darren J Moffat wrote:
>> Why can't this case and the braseo one use the services provided by 
>> svc:/network/rpc/smserver ?  See rpc.smserverd(1M).
> 
> Please don't use smserver/libsmedia to gain USCSI privileges.
> 
> (Longer answer: 
> http://www.mail-archive.com/opensolaris-discuss@opensolaris.org/msg06641.html) 
> 
> 
> sys_devices is needed to issue raw SCSI ioctls. I'm not sure about 
> Linux, perhaps DAC permissions are sufficient there.

Giving out sys_devices isn't IMO the correct answer either - 
particularly given that sys_devices is such a big powerful privilege.

Instead I'd rather see a privilege specifically for these USCSI ioctls.
However that still leaves the issue of why aren't the DAC permissions 
enough ?  Why do we need more protection than that here ?  Maybe the new 
uscsi privilege should be in the basic set ?

--
Darren J Moffat

From Nicolas.Williams@sun.com Tue Mar 31 13:38:09 2009
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n2VKc8wZ003165
	for <LSARC-ext@sac.sfbay.sun.com>; Tue, 31 Mar 2009 13:38:08 -0700 (PDT)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n2VKc37c013853;
	Tue, 31 Mar 2009 21:38:04 +0100 (BST)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHE00K0B1BFGU00@brm-avmta-1.central.sun.com>; Tue,
 31 Mar 2009 14:38:03 -0600 (MDT)
Received: from binky.Central.Sun.COM ([129.153.128.104])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHE00K1C1BEEN00@brm-avmta-1.central.sun.com>; Tue,
 31 Mar 2009 14:38:02 -0600 (MDT)
Received: from binky.Central.Sun.COM (localhost [127.0.0.1])
	by binky.Central.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id n2VKaFY1014809;
 Tue, 31 Mar 2009 15:36:15 -0500 (CDT)
Received: (from nw141292@localhost)
	by binky.Central.Sun.COM (8.14.3+Sun/8.14.3/Submit) id n2VKaFXg014808; Tue,
 31 Mar 2009 15:36:15 -0500 (CDT)
Date: Tue, 31 Mar 2009 15:36:14 -0500
From: Nicolas Williams <Nicolas.Williams@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49D27C95.1010705@Sun.COM>
To: Darren J Moffat <Darren.Moffat@sun.com>
Cc: Artem Kachitchkine <Artem.Kachitchkin@sun.com>,
        Brian Cameron <bc99092@sac.sfbay.sun.com>, LSARC-ext@sun.com,
        Lin.Ma@sun.com
Message-id: <20090331203614.GP9992@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Content-disposition: inline
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49D1EDCE.7040201@Sun.COM> <49D20183.1020004@Sun.COM>
 <49D252EE.6040909@sun.com> <49D27C95.1010705@Sun.COM>
X-Authentication-warning: binky.Central.Sun.COM: nw141292 set sender to
 Nicolas.Williams@sun.com using -f
User-Agent: Mutt/1.5.7i
Status: RO
Content-Length: 1014

On Tue, Mar 31, 2009 at 09:27:01PM +0100, Darren J Moffat wrote:
> Artem Kachitchkine wrote:
> >Darren J Moffat wrote:
> >>Why can't this case and the braseo one use the services provided by 
> >>svc:/network/rpc/smserver ?  See rpc.smserverd(1M).
> >
> >Please don't use smserver/libsmedia to gain USCSI privileges.
> >
> >(Longer answer: 
> >http://www.mail-archive.com/opensolaris-discuss@opensolaris.org/msg06641.html) 
> >
> >
> >sys_devices is needed to issue raw SCSI ioctls. I'm not sure about 
> >Linux, perhaps DAC permissions are sufficient there.
> 
> Giving out sys_devices isn't IMO the correct answer either - 
> particularly given that sys_devices is such a big powerful privilege.
> 
> Instead I'd rather see a privilege specifically for these USCSI ioctls.
> However that still leaves the issue of why aren't the DAC permissions 
> enough ?  Why do we need more protection than that here ?  Maybe the new 
> uscsi privilege should be in the basic set ?

Isn't this a logindevperm sort of issue??

From Artem.Kachitchkin@Sun.COM Tue Mar 31 14:22:13 2009
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n2VLMCl3008100
	for <LSARC-ext@sac.sfbay.sun.com>; Tue, 31 Mar 2009 14:22:12 -0700 (PDT)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n2VLM9pS015476
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 31 Mar 2009 22:22:11 +0100 (BST)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHE0010H3CYP200@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 31 Mar 2009 15:22:10 -0600 (MDT)
Received: from sca-es-mail-1.sun.com ([192.18.43.132])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHE00K0S3CXEL30@brm-avmta-1.central.sun.com> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue,
 31 Mar 2009 15:22:09 -0600 (MDT)
Received: from fe-sfbay-10.sun.com ([192.18.43.129])
	by sca-es-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n2VLM96t028436	for
 <LSARC-ext@sun.com>; Tue, 31 Mar 2009 14:22:09 -0700 (PDT)
Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KHE00600332UR00@fe-sfbay-10.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 31 Mar 2009 14:22:09 -0700 (PDT)
Received: from [129.146.104.83] ([unknown] [129.146.104.83])
 by fe-sfbay-10.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 with ESMTPSA id <0KHE00C453CP5270@fe-sfbay-10.sun.com>; Tue,
 31 Mar 2009 14:22:02 -0700 (PDT)
Date: Tue, 31 Mar 2009 14:21:52 -0700
From: Artem Kachitchkine <Artem.Kachitchkin@Sun.COM>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49D27C95.1010705@Sun.COM>
Sender: Artem.Kachitchkin@Sun.COM
To: Darren J Moffat <Darren.Moffat@Sun.COM>
Cc: Brian Cameron <bc99092@sac.sfbay.sun.com>, LSARC-ext@Sun.COM,
        Lin.Ma@Sun.COM
Message-id: <49D28970.6040207@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49D1EDCE.7040201@Sun.COM> <49D20183.1020004@Sun.COM>
 <49D252EE.6040909@sun.com> <49D27C95.1010705@Sun.COM>
User-Agent: Thunderbird 2.0.0.18 (X11/20081215)
Status: RO
Content-Length: 1330


> Giving out sys_devices isn't IMO the correct answer either - 
> particularly given that sys_devices is such a big powerful privilege.
> 
> Instead I'd rather see a privilege specifically for these USCSI ioctls.
> However that still leaves the issue of why aren't the DAC permissions 
> enough ?  Why do we need more protection than that here ?  Maybe the new 
> uscsi privilege should be in the basic set ?

Quoting Tamarack (2005/399) inception materials:

> We propose:
> 
> - eliminate smserverd, make libsmedia open device directly;
> - create two new privileges:
>   - uscsi_full for full uscsi access;
>   - uscsi_user for limited uscsi access (no resets or aborts);
> - add uscsi_user to the "Basic User Profile";

However, we ended up removing this part of the proposal - I can't recall 
why exactly. Perhaps we moved it outside of the project scope while 
trying to finish the project before mgmt reprioritized again :)

One thing to keep in mind is that uscsi can be used to do some nasty 
stuff. Like make a device behave in unpredictable ways, triggering 
dormant driver bugs; or reprogram its firmware to become a completely 
different class (make a USB disk behave like a USB microphone); or, on 
parallel SCSI, create bus conditions that would affect devices you may 
not have DAC permissions for; etc.

-Artem


From Brian.Cameron@sun.com Tue Mar 31 15:53:00 2009
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n2VMqxQL021580
	for <LSARC-ext@sac.sfbay.sun.com>; Tue, 31 Mar 2009 15:52:59 -0700 (PDT)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n2VMqtLN011586
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 31 Mar 2009 23:52:58 +0100 (BST)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHE00A037KAOR00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@Sun.COM); Tue, 31 Mar 2009 16:52:58 -0600 (MDT)
Received: from brmea-mail-1.sun.com ([192.18.98.31])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHE00KAQ7K9ET80@brm-avmta-1.central.sun.com> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue,
 31 Mar 2009 16:52:57 -0600 (MDT)
Received: from fe-amer-09.sun.com ([192.18.109.79])
	by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n2VMqvDg000980	for
 <LSARC-ext@Sun.COM>; Tue, 31 Mar 2009 22:52:57 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KHE00H007HJ8U00@mail-amer.sun.com> for LSARC-ext@Sun.COM
 (ORCPT LSARC-ext@Sun.COM); Tue, 31 Mar 2009 16:52:57 -0600 (MDT)
Received: from [129.153.250.132] ([unknown] [129.153.250.132])
 by mail-amer.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 with ESMTPSA id <0KHE0071S7K74XC0@mail-amer.sun.com>; Tue,
 31 Mar 2009 16:52:55 -0600 (MDT)
Date: Tue, 31 Mar 2009 17:52:20 -0500
From: Brian Cameron <Brian.Cameron@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49D28970.6040207@sun.com>
Sender: Brian.Cameron@sun.com
To: Artem Kachitchkine <Artem.Kachitchkin@sun.com>
Cc: Darren J Moffat <Darren.Moffat@sun.com>,
        Brian Cameron <bc99092@sac.sfbay.sun.com>, LSARC-ext@sun.com,
        Lin.Ma@sun.com
Message-id: <49D29EA4.40107@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49D1EDCE.7040201@Sun.COM> <49D20183.1020004@Sun.COM>
 <49D252EE.6040909@sun.com> <49D27C95.1010705@Sun.COM>
 <49D28970.6040207@sun.com>
User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1b3pre)
 Gecko/20090323 Thunderbird/3.0b2
Status: RO
Content-Length: 1689


I have been copying all discussion to the 2009/201 case, which I
think is more appropriate for this discussion.  Can we please
continue discussion there?

Thanks,

Brian


On 03/31/09 16:21, Artem Kachitchkine wrote:
>
>> Giving out sys_devices isn't IMO the correct answer either -
>> particularly given that sys_devices is such a big powerful privilege.
>>
>> Instead I'd rather see a privilege specifically for these USCSI ioctls.
>> However that still leaves the issue of why aren't the DAC permissions
>> enough ? Why do we need more protection than that here ? Maybe the new
>> uscsi privilege should be in the basic set ?
>
> Quoting Tamarack (2005/399) inception materials:
>
>> We propose:
>>
>> - eliminate smserverd, make libsmedia open device directly;
>> - create two new privileges:
>> - uscsi_full for full uscsi access;
>> - uscsi_user for limited uscsi access (no resets or aborts);
>> - add uscsi_user to the "Basic User Profile";
>
> However, we ended up removing this part of the proposal - I can't recall
> why exactly. Perhaps we moved it outside of the project scope while
> trying to finish the project before mgmt reprioritized again :)
>
> One thing to keep in mind is that uscsi can be used to do some nasty
> stuff. Like make a device behave in unpredictable ways, triggering
> dormant driver bugs; or reprogram its firmware to become a completely
> different class (make a USB disk behave like a USB microphone); or, on
> parallel SCSI, create bus conditions that would affect devices you may
> not have DAC permissions for; etc.
>
> -Artem
>
> _______________________________________________
> opensolaris-arc mailing list
> opensolaris-arc@opensolaris.org


From Darren.Moffat@sun.com Wed Apr  1 01:52:10 2009
Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n318qA61025528
	for <LSARC-ext@sac.sfbay.sun.com>; Wed, 1 Apr 2009 01:52:10 -0700 (PDT)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n318q3kU020364
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 1 Apr 2009 01:52:10 -0700 (PDT)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHE00419ZAX4P00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@Sun.COM); Wed, 01 Apr 2009 02:52:09 -0600 (MDT)
Received: from gmp-eb-inf-1.sun.com ([192.18.6.21])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHE0040AZAU8JD0@brm-avmta-1.central.sun.com> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Wed,
 01 Apr 2009 02:52:07 -0600 (MDT)
Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10])
	by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n318q6pV024735	for
 <LSARC-ext@Sun.COM>; Wed, 01 Apr 2009 08:52:06 +0000 (GMT)
Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KHE00200XNPLA00@fe-emea-09.sun.com> for LSARC-ext@Sun.COM
 (ORCPT LSARC-ext@Sun.COM); Wed, 01 Apr 2009 09:52:06 +0100 (BST)
Received: from [192.168.1.103]
 (cpc2-rdng20-2-0-cust917.15-3.cable.virginmedia.com [86.28.167.150])
 by fe-emea-09.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 with ESMTPSA id <0KHE00M7TZAMPA70@fe-emea-09.sun.com>; Wed,
 01 Apr 2009 09:51:59 +0100 (BST)
Date: Wed, 01 Apr 2009 09:51:56 +0100
From: Darren J Moffat <Darren.Moffat@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49D29EA4.40107@sun.com>
Sender: Darren.Moffat@sun.com
To: Brian Cameron <Brian.Cameron@sun.com>
Cc: Artem Kachitchkine <Artem.Kachitchkin@sun.com>,
        Brian Cameron <bc99092@sac.sfbay.sun.com>, LSARC-ext@sun.com,
        Lin.Ma@sun.com
Message-id: <49D32B2C.50508@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49D1EDCE.7040201@Sun.COM> <49D20183.1020004@Sun.COM>
 <49D252EE.6040909@sun.com> <49D27C95.1010705@Sun.COM>
 <49D28970.6040207@sun.com> <49D29EA4.40107@sun.com>
User-Agent: Thunderbird 2.0.0.18 (X11/20090211)
Status: RO
Content-Length: 328

Brian Cameron wrote:
> 
> I have been copying all discussion to the 2009/201 case, which I
> think is more appropriate for this discussion.  Can we please
> continue discussion there?

Done.  In the mean time please mark this case as "waiting need spec" and 
note that it depends on the outcome of 2009/201.

--
Darren J Moffat

From Brian.Cameron@sun.com Wed Apr  1 10:49:06 2009
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n31Hn6Gb022675
	for <LSARC-ext@sac.sfbay.sun.com>; Wed, 1 Apr 2009 10:49:06 -0700 (PDT)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n31Hn2L1008717
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 1 Apr 2009 18:49:05 +0100 (BST)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KHF00J0PO5QK200@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@Sun.COM); Wed, 01 Apr 2009 10:49:02 -0700 (PDT)
Received: from brmea-mail-2.sun.com ([192.18.98.43])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KHF008PGO5QKDC0@nwk-avmta-1.sfbay.Sun.COM> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Wed,
 01 Apr 2009 10:49:02 -0700 (PDT)
Received: from fe-amer-09.sun.com ([192.18.109.79])
	by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n31Hn2BK001460	for
 <LSARC-ext@Sun.COM>; Wed, 01 Apr 2009 17:49:02 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KHF00100NL8G900@mail-amer.sun.com> for LSARC-ext@Sun.COM
 (ORCPT LSARC-ext@Sun.COM); Wed, 01 Apr 2009 11:49:02 -0600 (MDT)
Received: from [10.0.0.8] ([unknown] [99.141.96.126])
 by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7.0-5.01 64bit
 (built Feb 19 2009)) with ESMTPSA id <0KHF0056NO5H56C0@mail-amer.sun.com>; Wed,
 01 Apr 2009 11:48:54 -0600 (MDT)
Date: Wed, 01 Apr 2009 12:48:18 -0500
From: Brian Cameron <Brian.Cameron@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49D32B2C.50508@Sun.COM>
Sender: Brian.Cameron@sun.com
To: Darren J Moffat <Darren.Moffat@sun.com>
Cc: Artem Kachitchkine <Artem.Kachitchkin@sun.com>,
        Brian Cameron <bc99092@sac.sfbay.sun.com>, LSARC-ext@sun.com,
        Lin.Ma@sun.com
Message-id: <49D3A8E2.6060301@sun.com>
MIME-version: 1.0
Content-type: multipart/mixed; boundary="Boundary_(ID_u98InsKDh3CIpt3iv0UY5A)"
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49D1EDCE.7040201@Sun.COM> <49D20183.1020004@Sun.COM>
 <49D252EE.6040909@sun.com> <49D27C95.1010705@Sun.COM>
 <49D28970.6040207@sun.com> <49D29EA4.40107@sun.com> <49D32B2C.50508@Sun.COM>
User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1b3pre)
 Gecko/20090323 Thunderbird/3.0b2
Status: RO
Content-Length: 8374

This is a multi-part message in MIME format.

--Boundary_(ID_u98InsKDh3CIpt3iv0UY5A)
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT


After doing some research we realized that totem does not link against
libbrasero-burn directly, but instead just calls the "brasero"
application to support CD burning.  Therefore, there is no need to
modify the exec_attr(4) file for totem.  However, both sound-juicer
and rhythmbox do link directly against libbrasero-burn, so these
libraries still need the change to exec_attr(4).

I have updated the one-pager for LSARC 2009/202 to reflect this and
you can find it attached as well.

>> I have been copying all discussion to the 2009/201 case, which I
>> think is more appropriate for this discussion. Can we please
>> continue discussion there?
>
> Done. In the mean time please mark this case as "waiting need spec" and
> note that it depends on the outcome of 2009/201.

Thanks, I have done this as well.

Brian

--Boundary_(ID_u98InsKDh3CIpt3iv0UY5A)
Content-type: text/plain; name=gnome-226-media-onepager.txt
Content-transfer-encoding: 7BIT
Content-disposition: attachment; filename=gnome-226-media-onepager.txt

Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI
This information is Copyright 2009 Sun Microsystems
1. Introduction
    1.1. Project/Component Working Name:
         Update to GNOME 2.26 media applications
    1.2. Name of Document Author/Supplier:
         Author:  Brian Cameron
    1.3  Date of This Document:
         March 30, 2009

1. Introduction
   1.1. Project/Component Working Name:

        Update to GNOME 2.26 media applications

   1.2. Name of Document Author/Supplier:

        Brian Cameron

   1.3. Date of This Document:

        March 30, 2009

   1.4. Name of Major Document Customer(s)/Consumer(s):
        1.4.1. The PAC or CPT you expect to review your project:

                Solaris PAC

        1.4.2. The ARC(s) you expect to review your project:

                LSARC

        1.4.3. The Director/VP who is "Sponsoring" this project:

                robert.odea@sun.com

        1.4.4. The name of your business unit:

                OPG / OpenSource

   1.5. Email Aliases:
        1.5.1. Responsible Manager:     leo.binchy@Sun.COM
        1.5.2. Responsible Engineer:    brian.cameron@Sun.COM
        1.5.3. Marketing Manager:       glynn.foster@sun.com
        1.5.4. Interest List:           desktop-discuss@opensolaris.org

4. Technical Description:

    4.1. Details: 

    Programs which use libbrasero-media now require additional 
    authorization.  The need for the brasero application to have this
    authorization is described in the "LSARC 2009/201 Update to Brasero 2.25.x"
    case.

    In GNOME 2.26 the applications sound-juicer and rhythmbox also now use
    libbrasero-media and require similar authorization.  The sound-juicer
    application is a CD burning and ripping application and uses the
    libbrasero-media library directly.  Both totem and rhythmbox support CD
    burning plugins.  The rhythmbox program links against libbrasero-media
    while the totem program calls brasero via command line.  To support
    the use of libbraser-media in sound-juicer and rhythmbox, the following
    lines will be added to exec_attr(4):

    Desktop CD User:solaris:cmd:::/usr/bin/rhythmbox.bin:privs=sys_devices
    Desktop CD User:solaris:cmd:::/usr/bin/sound-juicer.bin:privs=sys_devices

    Note the "Desktop CD User" was defined in the LSARC 2009/201 case.

    As a part of this change, the rhythmbox and sound-juicer binaries will be
    moved to rhythmbox.bin and sound-juicer.bin.  The /usr/bin/rhythmbox and
    /usr/bin/sound-juicer interfaces will be scripts that launch the actual
    binary with pfexec.

    The rhythmbox "audiocd" and "cd-recorder" plugins provide CD burning
    support.  These were delivered previously, but used the nautilus-cd-burner
    library.  Now they use libbraser-media.  The totem application now delivers
    a new brasero-disc-recorder plugin which also uses libbrasero-media.

    Aside from the above changes, there are some other changes to support
    additional plugins in totem and rhythmbox.  For example, the totem
    module no longer provides the libtotem-basic-plugin, and this has been
    replaced with the separate cone, gmp, mully and narrowspace plugins.  There
    are also some new rhythmbox and totem plugins available that we plan to
    provide.

    CD burning

    4.5. Interfaces Changes:

      Exported Interfaces                     Stability    Comments
      --------------------------------------- -----------  -------------
      /usr/bin/rhythmbox.bin                  Volatile     Binary
      /usr/bin/rhythmbox                      Volatile     Script
      /usr/bin/sound-juicer.bin               Volatile     Binary
      /usr/bin/sound-juicer                   Volatile     Script
      /usr/bin/totem.bin                      Volatile     Binary
      /usr/bin/totem                          Volatile     Script
      /usr/lib/totem/plugins/brasero-disc-recorder/libbrasero-disc-recorder.so 
                                              Volatile     New plugin
                                                           using brasero
                                                           library.

      /usr/lib/rhythmbox/plugins/upnp_coherence/*.py
                                              Volatile     New plugin which
                                                           provides Rhythmbox
                                                           support for UPnP
                                                           media servers via
                                                           Coherence.

      /usr/lib/totem/plugins/coherence_upnp/coherence_upnp.py
      /usr/lib/totem/plugins/jamendo/jamendo.py
      /usr/lib/totem/plugins/opensubtitles/hash.py
      /usr/lib/totem/plugins/opensubtitles/opensubtitles.py
      /usr/lib/totem/plugins/screenshot/libscreenshot.so
                                              Volatile     New totem plugins
                                                           which support
                                                           accessing UPnP media
                                                           servers via
                                                           Coherence, accessing
                                                           media via Jamendo,
                                                           subtitles, and
                                                           taking a screenshot
                                                           of the video that is
                                                           playing.

      /usr/lib/firefox/plugins/libtotem-basic-plugin.so
                                              Obsolete     Replaced by other
                                              Volatile     plugins listed
                                                           below.

      /usr/lib/firefox/plugins/libtotem-cone-plugin.so
      /usr/lib/firefox/plugins/libtotem-gmp-plugin.so
      /usr/lib/firefox/plugins/libtotem-mully-plugin.so
      /usr/lib/firefox/plugins/libtotem-narrowspace-plugin.so
                                              Volatile     New plugins added to
                                                           support more media
                                                           formats.


      Imported Interfaces       Stability          Comments
      -----------------------   ---------------    -----------------------
      Brasero 2.25              Volatile           LSARC 2009/201
      /usr/bin/pfexec           Committed          PSARC 2002/188
      /etc/security/exec_attr   Committed

    4.7.  Admin/Config Impact:

          Same as described in the LSARC 2009/201 case.

    4.11. Security Impact:

          Same as described in the LSARC 2009/201 case.
          

5. Reference Documents:

   LSARC 2009/201 Update brasero to 2.25.x

6. Resources and Schedule
    6.4. Steering Committee requested information
         6.4.1. Consolidation C-team Name:
                JDS - Desktop
    6.5. ARC review type: FastTrack
    6.6. ARC Exposure: open


--Boundary_(ID_u98InsKDh3CIpt3iv0UY5A)--

From Harry.Lu@sun.com Thu Apr 23 19:14:54 2009
Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n3O2ErA9027348
	for <LSARC-ext@sac.sfbay.sun.com>; Thu, 23 Apr 2009 19:14:53 -0700 (PDT)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n3O2EqLT028957
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 23 Apr 2009 19:14:53 -0700 (PDT)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KIL00C0328T1900@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@Sun.COM); Thu, 23 Apr 2009 20:14:53 -0600 (MDT)
Received: from sineb-mail-1.sun.com ([192.18.19.6])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KIL00D9X28R6Y90@brm-avmta-1.central.sun.com> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Thu,
 23 Apr 2009 20:14:52 -0600 (MDT)
Received: from fe-apac-05.sun.com
 (fe-apac-05.sun.com [192.18.19.176] (may be forged))
	by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n3O2EpaW020973	for
 <LSARC-ext@Sun.COM>; Fri, 24 Apr 2009 02:14:51 +0000 (GMT)
Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KIL00D001SQN400@mail-apac.sun.com> for LSARC-ext@Sun.COM
 (ORCPT LSARC-ext@Sun.COM); Fri, 24 Apr 2009 10:14:51 +0800 (SGT)
Received: from [129.158.217.161] ([unknown] [129.158.217.161])
 by mail-apac.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 with ESMTPSA id <0KIL00H6V28PFI00@mail-apac.sun.com>; Fri,
 24 Apr 2009 10:14:50 +0800 (SGT)
Date: Fri, 24 Apr 2009 10:14:45 +0800
From: Harry Lu <Harry.Lu@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49D3A8E2.6060301@sun.com>
Sender: Harry.Lu@sun.com
To: Brian Cameron <Brian.Cameron@sun.com>
Cc: Darren J Moffat <Darren.Moffat@sun.com>,
        Artem Kachitchkine <Artem.Kachitchkin@sun.com>,
        Brian Cameron <bc99092@sac.sfbay.sun.com>, LSARC-ext@sun.com,
        Lin.Ma@sun.com
Message-id: <1240539285.16596.176.camel@fulltime>
MIME-version: 1.0
X-Mailer: Evolution 2.24.2
Content-type: text/plain; charset=UTF-8
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49D1EDCE.7040201@Sun.COM> <49D20183.1020004@Sun.COM>
 <49D252EE.6040909@sun.com> <49D27C95.1010705@Sun.COM>
 <49D28970.6040207@sun.com> <49D29EA4.40107@sun.com> <49D32B2C.50508@Sun.COM>
 <49D3A8E2.6060301@sun.com>
Status: RO
Content-Length: 1197

Brian,

	Since 2009/201 Update to Brasero 2.25.x has been approved, will you
please update this case's one-pager and reset the timer?

Thanks,
Harry

On Wed, 2009-04-01 at 12:48 -0500, Brian Cameron wrote:
> After doing some research we realized that totem does not link against
> libbrasero-burn directly, but instead just calls the "brasero"
> application to support CD burning.  Therefore, there is no need to
> modify the exec_attr(4) file for totem.  However, both sound-juicer
> and rhythmbox do link directly against libbrasero-burn, so these
> libraries still need the change to exec_attr(4).
> 
> I have updated the one-pager for LSARC 2009/202 to reflect this and
> you can find it attached as well.
> 
> >> I have been copying all discussion to the 2009/201 case, which I
> >> think is more appropriate for this discussion. Can we please
> >> continue discussion there?
> >
> > Done. In the mean time please mark this case as "waiting need spec" and
> > note that it depends on the outcome of 2009/201.
> 
> Thanks, I have done this as well.
> 
> Brian
-- 

Harry.Lu@Sun.COM
Solaris Desktop Group, Sun Microsystems
Tel: +86-10-82618200 ext. 82870/ +86-10-62673870
Fax: +86-10-62780969


From Brian.Cameron@sun.com Thu Apr 23 23:51:18 2009
Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n3O6pI6H026758
	for <LSARC-ext@sac.sfbay.sun.com>; Thu, 23 Apr 2009 23:51:18 -0700 (PDT)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n3O6pI3Q014409
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 23 Apr 2009 23:51:18 -0700 (PDT)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KIL0010BF1HYF00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Thu, 23 Apr 2009 23:51:17 -0700 (PDT)
Received: from brmea-mail-1.sun.com ([192.18.98.31])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KIL002NPF1H9D90@nwk-avmta-1.sfbay.Sun.COM> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu,
 23 Apr 2009 23:51:17 -0700 (PDT)
Received: from fe-amer-09.sun.com ([192.18.109.79])
	by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n3O6pHZO018332	for
 <LSARC-ext@sun.com>; Fri, 24 Apr 2009 06:51:17 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KIL00J00EUHT700@mail-amer.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Fri, 24 Apr 2009 00:51:17 -0600 (MDT)
Received: from [192.168.1.70] ([unknown] [189.136.186.195])
 by mail-amer.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 with ESMTPSA id <0KIL00IYDF1FQRA0@mail-amer.sun.com>; Fri,
 24 Apr 2009 00:51:17 -0600 (MDT)
Date: Fri, 24 Apr 2009 01:51:14 -0500
From: Brian Cameron <Brian.Cameron@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
Sender: Brian.Cameron@sun.com
To: Brian Cameron <bc99092@sac.sfbay.sun.com>
Cc: LSARC-ext@sun.com, Lin.Ma@sun.com
Message-id: <49F16162.7030601@sun.com>
MIME-version: 1.0
Content-type: multipart/mixed; boundary="Boundary_(ID_Vg7lFf5VXkF98jm/hNVFNQ)"
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1b3pre)
 Gecko/20090420 Thunderbird/3.0b2
Status: RO
Content-Length: 7861

This is a multi-part message in MIME format.

--Boundary_(ID_Vg7lFf5VXkF98jm/hNVFNQ)
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT


Now that "LSARC 2009/201 Update to Brasero 2.25" has been approved, I
have updated the LSARC 2002/202 materials to reflect the changes
made to the brasero case.  An updated one-pager is attached.

I have reset the timer to 04/28/2009.  Note that the desktop team
would like to integrate these changes with GNOME 2.26 which is going
into build 115.  To meet this deadline, could this case be approved
by the 28th?

I am expecting that this case will be non-controversial since it only
adds the same changes which were approved for brasero, so that they
are also applied to the sound-juicer application.  This case also
highlights some minor changes to the totem and rhythmbox plugins.

Thanks,

Brian


--Boundary_(ID_Vg7lFf5VXkF98jm/hNVFNQ)
Content-type: text/plain; name=gnome-226-media-onepager.txt
Content-transfer-encoding: 7BIT
Content-disposition: attachment; filename=gnome-226-media-onepager.txt

Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI
This information is Copyright 2009 Sun Microsystems
1. Introduction
    1.1. Project/Component Working Name:
         Update to GNOME 2.26 media applications
    1.2. Name of Document Author/Supplier:
         Author:  Brian Cameron
    1.3  Date of This Document:
         April 24, 2009

1. Introduction
   1.1. Project/Component Working Name:

        Update to GNOME 2.26 media applications

   1.2. Name of Document Author/Supplier:

        Brian Cameron

   1.3. Date of This Document:

        March 30, 2009

   1.4. Name of Major Document Customer(s)/Consumer(s):
        1.4.1. The PAC or CPT you expect to review your project:

                Solaris PAC

        1.4.2. The ARC(s) you expect to review your project:

                LSARC

        1.4.3. The Director/VP who is "Sponsoring" this project:

                robert.odea@sun.com

        1.4.4. The name of your business unit:

                OPG / OpenSource

   1.5. Email Aliases:
        1.5.1. Responsible Manager:     leo.binchy@Sun.COM
        1.5.2. Responsible Engineer:    brian.cameron@Sun.COM
        1.5.3. Marketing Manager:       glynn.foster@sun.com
        1.5.4. Interest List:           desktop-discuss@opensolaris.org

4. Technical Description:

    4.1. Details: 

    Programs which use libbrasero-media now require additional authorization.
    The need for the brasero application to have this authorization is
    described in the "LSARC 2009/201 Update to Brasero 2.25.x" case.

    In GNOME 2.26 the application sound-juicer now uses libbrasero-media and
    requires similar authorization in order to allow users to play and rip
    audio CD's.  

    The rhythmbox application has the "audiocd" and "cd-recorder" plugin
    which uses libbrasero-media.  However, the Desktop team will not, by
    default, provide the authorization to use this plugin.  Those who wish to
    use this plugin can add the authorization themselves.  These plugins
    were provided previously, but used nautilus-cd-burner instead which did
    not use USCSI, and therefore did not require additional authorization.

    The totem application also has a CD burning plugin called
    brasero-disc-recorder.  This plugin calls brasero via the command line, so
    there is no need to provide any extra authorization for totem.

    To support the use of libbrasero-media in sound-juicer, the following line
    will be added to exec_attr(4):

    Desktop CD User:solaris:cmd:::/usr/bin/sound-juicer:privs=sys_devices

    Note the "Desktop CD User" was defined in the LSARC 2009/201 case.

    Aside from the above changes, there are some additional changes in totem
    and rhythmbox to support additional plugins in totem and rhythmbox which
    are highlighted in the interface table.  For example, the totem module no
    longer provides the libtotem-basic-plugin, and this has been replaced with
    the separate cone, gmp, mully and narrowspace plugins.

    Another change is that totem and rhythmbox python plugins will now use
    Python 2.6.  Some plugins (such as the rhythmbox "Song Lyrics" plugin use
    Python features which do not work with Python 2.4, so this change makes the
    full set of totem and rhythmbox plugins function properly.

    4.5. Interfaces Changes:

      Exported Interfaces                     Stability    Comments
      --------------------------------------- -----------  -------------
      /usr/lib/totem/plugins/brasero-disc-recorder/libbrasero-disc-recorder.so 
                                              Volatile     New plugin
                                                           using brasero
                                                           library.

      /usr/lib/totem/plugins/coherence_upnp/coherence_upnp.py
      /usr/lib/totem/plugins/jamendo/jamendo.py
      /usr/lib/totem/plugins/opensubtitles/hash.py
      /usr/lib/totem/plugins/opensubtitles/opensubtitles.py
      /usr/lib/totem/plugins/screenshot/libscreenshot.so
                                              Volatile     New totem plugins
                                                           which support
                                                           accessing UPnP media
                                                           servers via
                                                           Coherence, accessing
                                                           media via Jamendo,
                                                           subtitles, and
                                                           taking a screenshot
                                                           of the video that is
                                                           playing.

      /usr/lib/firefox/plugins/libtotem-basic-plugin.so
                                              Obsolete     Replaced by other
                                              Volatile     plugins listed
                                                           below.

      /usr/lib/firefox/plugins/libtotem-cone-plugin.so
      /usr/lib/firefox/plugins/libtotem-gmp-plugin.so
      /usr/lib/firefox/plugins/libtotem-mully-plugin.so
      /usr/lib/firefox/plugins/libtotem-narrowspace-plugin.so
                                              Volatile     New plugins added to
                                                           support more media
                                                           formats.

      /usr/lib/rhythmbox/plugins/upnp_coherence/*.py
                                              Volatile     New plugin which
                                                           provides Rhythmbox
                                                           support for UPnP
                                                           media servers via
                                                           Coherence.


      Imported Interfaces       Stability          Comments
      -----------------------   ---------------    -----------------------
      Brasero 2.25              Volatile           LSARC 2009/201
      /usr/bin/pfexec           Committed          PSARC 2002/188
      /etc/security/exec_attr   Committed

    4.7.  Admin/Config Impact:

          Same as described in the LSARC 2009/201 case.

    4.11. Security Impact:

          Same as described in the LSARC 2009/201 case.
          

5. Reference Documents:

   LSARC 2009/201 Update brasero to 2.25.x

6. Resources and Schedule
    6.4. Steering Committee requested information
         6.4.1. Consolidation C-team Name:
                JDS - Desktop
    6.5. ARC review type: FastTrack
    6.6. ARC Exposure: open


--Boundary_(ID_Vg7lFf5VXkF98jm/hNVFNQ)--

From Brian.Cameron@sun.com Fri Apr 24 00:07:18 2009
Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n3O77HLr018648
	for <LSARC-ext@sac.sfbay.sun.com>; Fri, 24 Apr 2009 00:07:18 -0700 (PDT)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n3O776IM018238
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Fri, 24 Apr 2009 15:07:16 +0800 (SGT)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KIL00D0FFS13P00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@Sun.COM); Fri, 24 Apr 2009 00:07:13 -0700 (PDT)
Received: from brmea-mail-1.sun.com ([192.18.98.31])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KIL000GQFS0XY90@nwk-avmta-2.sfbay.sun.com> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Fri,
 24 Apr 2009 00:07:12 -0700 (PDT)
Received: from fe-amer-10.sun.com ([192.18.109.80])
	by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n3O77CRG023300	for
 <LSARC-ext@Sun.COM>; Fri, 24 Apr 2009 07:07:12 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KIL00400FMIJ900@mail-amer.sun.com> for LSARC-ext@Sun.COM
 (ORCPT LSARC-ext@Sun.COM); Fri, 24 Apr 2009 01:07:12 -0600 (MDT)
Received: from [192.168.1.70] ([unknown] [189.136.186.195])
 by mail-amer.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 with ESMTPSA id <0KIL00F8WFRY9250@mail-amer.sun.com>; Fri,
 24 Apr 2009 01:07:12 -0600 (MDT)
Date: Fri, 24 Apr 2009 02:07:09 -0500
From: Brian Cameron <Brian.Cameron@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <1240539285.16596.176.camel@fulltime>
Sender: Brian.Cameron@sun.com
To: Harry Lu <Harry.Lu@sun.com>
Cc: Darren J Moffat <Darren.Moffat@sun.com>,
        Artem Kachitchkine <Artem.Kachitchkin@sun.com>,
        Brian Cameron <bc99092@sac.sfbay.sun.com>, LSARC-ext@sun.com,
        Lin.Ma@sun.com
Message-id: <49F1651D.3020403@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=UTF-8
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49D1EDCE.7040201@Sun.COM> <49D20183.1020004@Sun.COM>
 <49D252EE.6040909@sun.com> <49D27C95.1010705@Sun.COM>
 <49D28970.6040207@sun.com> <49D29EA4.40107@sun.com> <49D32B2C.50508@Sun.COM>
 <49D3A8E2.6060301@sun.com> <1240539285.16596.176.camel@fulltime>
User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1b3pre)
 Gecko/20090420 Thunderbird/3.0b2
Status: RO
Content-Length: 1109


Harry:

> 	Since 2009/201 Update to Brasero 2.25.x has been approved, will you
> please update this case's one-pager and reset the timer?

Done.  I reset the timer to 04/28/2009.

Brian


> On Wed, 2009-04-01 at 12:48 -0500, Brian Cameron wrote:
>> After doing some research we realized that totem does not link against
>> libbrasero-burn directly, but instead just calls the "brasero"
>> application to support CD burning.  Therefore, there is no need to
>> modify the exec_attr(4) file for totem.  However, both sound-juicer
>> and rhythmbox do link directly against libbrasero-burn, so these
>> libraries still need the change to exec_attr(4).
>>
>> I have updated the one-pager for LSARC 2009/202 to reflect this and
>> you can find it attached as well.
>>
>>>> I have been copying all discussion to the 2009/201 case, which I
>>>> think is more appropriate for this discussion. Can we please
>>>> continue discussion there?
>>> Done. In the mean time please mark this case as "waiting need spec" and
>>> note that it depends on the outcome of 2009/201.
>> Thanks, I have done this as well.
>>
>> Brian


From Brian.Cameron@sun.com Mon Apr 27 18:52:41 2009
Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n3S1qevi000120
	for <LSARC-ext@sac.sfbay.sun.com>; Mon, 27 Apr 2009 18:52:40 -0700 (PDT)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n3S1qevh010125
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Mon, 27 Apr 2009 18:52:40 -0700 (PDT)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KIS00D03FVSSB00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Mon, 27 Apr 2009 19:52:40 -0600 (MDT)
Received: from brmea-mail-2.sun.com ([192.18.98.43])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KIS008QQFVRJM20@brm-avmta-1.central.sun.com> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon,
 27 Apr 2009 19:52:39 -0600 (MDT)
Received: from fe-amer-09.sun.com ([192.18.109.79])
	by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n3S1qbQx016824	for
 <LSARC-ext@sun.com>; Tue, 28 Apr 2009 01:52:39 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KIS00200FN5NT00@mail-amer.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Mon, 27 Apr 2009 19:52:37 -0600 (MDT)
Received: from [192.168.1.70] ([unknown] [189.137.184.97])
 by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7.0-5.01 64bit
 (built Feb 19 2009)) with ESMTPSA id <0KIS00FYVFVI7QD0@mail-amer.sun.com>; Mon,
 27 Apr 2009 19:52:31 -0600 (MDT)
Date: Mon, 27 Apr 2009 20:52:33 -0500
From: Brian Cameron <Brian.Cameron@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49F16162.7030601@sun.com>
Sender: Brian.Cameron@sun.com
To: Brian Cameron <Brian.Cameron@sun.com>
Cc: Brian Cameron <bc99092@sac.sfbay.sun.com>, LSARC-ext@sun.com
Message-id: <49F66161.80001@sun.com>
MIME-version: 1.0
Content-type: multipart/mixed; boundary="Boundary_(ID_EP2384oFzGAwt0e+iIpEIA)"
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49F16162.7030601@sun.com>
User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1b3pre)
 Gecko/20090420 Thunderbird/3.0b2
Status: RO
Content-Length: 1949

This is a multi-part message in MIME format.

--Boundary_(ID_EP2384oFzGAwt0e+iIpEIA)
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT


A minor change to reflect a similar change made to the LSARC 2009/201
brasero case.  This renames "Desktop CD User" to "Desktop Removeable
Media User" after Lin Ma and Darren Moffat agreed this would be a better
name.

Thanks,

Brian


On 04/24/09 01:51, Brian Cameron wrote:
>
> Now that "LSARC 2009/201 Update to Brasero 2.25" has been approved, I
> have updated the LSARC 2002/202 materials to reflect the changes
> made to the brasero case. An updated one-pager is attached.
>
> I have reset the timer to 04/28/2009. Note that the desktop team
> would like to integrate these changes with GNOME 2.26 which is going
> into build 115. To meet this deadline, could this case be approved
> by the 28th?
>
> I am expecting that this case will be non-controversial since it only
> adds the same changes which were approved for brasero, so that they
> are also applied to the sound-juicer application. This case also
> highlights some minor changes to the totem and rhythmbox plugins.
>
> Thanks,
>
> Brian
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> opensolaris-arc mailing list
> opensolaris-arc@opensolaris.org


--Boundary_(ID_EP2384oFzGAwt0e+iIpEIA)
Content-type: text/plain; name=media226.diff
Content-transfer-encoding: 7BIT
Content-disposition: attachment; filename=media226.diff

73c73
<     Desktop CD User:solaris:cmd:::/usr/bin/sound-juicer:privs=sys_devices
---
>     Desktop Removable Media User:solaris:cmd:::/usr/bin/sound-juicer:privs=sys_devices
75c75,76
<     Note the "Desktop CD User" was defined in the LSARC 2009/201 case.
---
>     Note the "Desktop Removable Media User" was defined in the LSARC 2009/201
>     case.

--Boundary_(ID_EP2384oFzGAwt0e+iIpEIA)--

From John.Fischer@sun.com Tue Apr 28 10:04:19 2009
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n3SH4JY8010120
	for <LSARC-ext@sac.sfbay.sun.com>; Tue, 28 Apr 2009 10:04:19 -0700 (PDT)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n3SH409Z057697
	for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 28 Apr 2009 11:04:19 -0600 (MDT)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0KIT0091XM35LX00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 28 Apr 2009 10:04:17 -0700 (PDT)
Received: from brmea-mail-4.sun.com ([192.18.98.36])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0KIT00413M32WWB0@nwk-avmta-2.sfbay.sun.com> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue,
 28 Apr 2009 10:04:15 -0700 (PDT)
Received: from fe-amer-10.sun.com ([192.18.109.80])
	by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n3SH4Ewd021714	for
 <LSARC-ext@sun.com>; Tue, 28 Apr 2009 17:04:14 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009))
 id <0KIT00D00JEPIZ00@mail-amer.sun.com> for LSARC-ext@sun.com
 (ORCPT LSARC-ext@sun.com); Tue, 28 Apr 2009 11:04:14 -0600 (MDT)
Received: from [192.168.10.7] ([unknown] [76.20.56.47])
 by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7.0-5.01 64bit
 (built Feb 19 2009)) with ESMTPSA id <0KIT007E7M2HR690@mail-amer.sun.com> for
 LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue,
 28 Apr 2009 11:03:53 -0600 (MDT)
Date: Tue, 28 Apr 2009 10:02:46 -0700
From: John Fischer <John.Fischer@sun.com>
Subject: Re: Update to GNOME 2.26 media applications [LSARC/2009/202 FastTrack
 timeout 04/03/2009]
In-reply-to: <49F66161.80001@sun.com>
Sender: John.Fischer@sun.com
To: Brian Cameron <Brian.Cameron@sun.com>
Cc: LSARC-ext@sun.com
Reply-to: John.Fischer@sun.com
Message-id: <49F736B6.7010309@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <200903310054.n2V0sHZe001254@sac.sfbay.sun.com>
 <49F16162.7030601@sun.com> <49F66161.80001@sun.com>
User-Agent: Thunderbird 2.0.0.21 (X11/20090323)
Status: RO
Content-Length: 1346

Brian,

This case was approved at todays LSARC meeting.

Thanks,

John

Brian Cameron wrote:
> 
> A minor change to reflect a similar change made to the LSARC 2009/201
> brasero case.  This renames "Desktop CD User" to "Desktop Removeable
> Media User" after Lin Ma and Darren Moffat agreed this would be a better
> name.
> 
> Thanks,
> 
> Brian
> 
> 
> On 04/24/09 01:51, Brian Cameron wrote:
>>
>> Now that "LSARC 2009/201 Update to Brasero 2.25" has been approved, I
>> have updated the LSARC 2002/202 materials to reflect the changes
>> made to the brasero case. An updated one-pager is attached.
>>
>> I have reset the timer to 04/28/2009. Note that the desktop team
>> would like to integrate these changes with GNOME 2.26 which is going
>> into build 115. To meet this deadline, could this case be approved
>> by the 28th?
>>
>> I am expecting that this case will be non-controversial since it only
>> adds the same changes which were approved for brasero, so that they
>> are also applied to the sound-juicer application. This case also
>> highlights some minor changes to the totem and rhythmbox plugins.
>>
>> Thanks,
>>
>> Brian
>>
>>
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> opensolaris-arc mailing list
>> opensolaris-arc@opensolaris.org
> 

