The 7 Principles of Open Source Communities

Total Page:16

File Type:pdf, Size:1020Kb

The 7 Principles of Open Source Communities KDE and the Secret Service Michael Leupold <[email protected]> 04.07.2010 | Tampere, Finland | Akademy 2010 Agenda ● Secret Storage ● ksecretservice Architecture ● Planned Features ● Current Progress ● Questions? KDE and the Secret Service www.kde.org 2 Secret Storage ● Stores a user's secrets (eg. passwords) ● Encrypted with master password ● Unlocked on demand ● KDE's KWallet, GNOME Keyring ● Problems: ● Users use software based on different desktops ● 3rd party applications: Which to support? KDE and the Secret Service www.kde.org 3 Secret Storage API ● Solution: Common API ● freedesktop.org specification project ● Started July 2009 ● Stef Walter (GNOME), Michael Leupold (KDE) ● Goals: ● Improved interoperability ● Make it appealing for 3rd party applications to use it KDE and the Secret Service www.kde.org 4 Secret Storage API ● D-Bus API ● Collection ~ Wallet ● Collection of secrets ● Lock, Unlock, Delete, ... ● Item ~ Entry in wallet ● Individual secret ● Identified by string attributes ● GetSecret, SetSecret, Lock, Unlock, ... ● Prompt objects ● Designed to be asynchronous KDE and the Secret Service www.kde.org 5 ksecretservice Backend ● Daemon Backend ● Implement access to “real secrets” ● Designed similar to the D-Bus API ● Asynchronous – Level varies – Determined by specific implementation ● Examples: – Temporary collection (memory only) – Stored in file (like .kwl) – Stored on thumb drive or smart card KDE and the Secret Service www.kde.org 6 ksecretservice Frontend ● Daemon Frontend ● Implements protocol to communicate with applications ● Uses Backends to perform actual operations ● Examples: – Secret Storage API – KWallet (backwards compatibility) – Others might make sense: ● kpasswdserver ● ssh agent KDE and the Secret Service www.kde.org 7 ksecretservice Client APIs ● Client-side API ● Straightforward, similar to D-Bus API ● KWallet::Wallet (deprecated, less features) ● Possibly Qt-only so non-KDE applications can use it KDE and the Secret Service www.kde.org 8 ksecretservice architecture Client Client Client (using new API) (using legacy API) D-Bus Session Bus Secret Storage KWallet Frontend Frontend Frontend X Backend Backend Backend KDE and the Secret Service www.kde.org 9 Planned features ● Multiple ways to open collections ● Password ● Smart card ● Temporary collections ● “More secure” on user request ● Robust ACLs ● Detect tampering with configuration KDE and the Secret Service www.kde.org 10 Current progress ● Basic framework done ● Working on new secret file format ● In the works: UI, ACLs, configuration, client-side libraries … ● Progressing slowly but steadily ● First release with KDE 4.6 (maybe!) ● Help is always welcome! KDE and the Secret Service www.kde.org 11 Thanks for your attention! Questions? (Thanks to Thomas Thym for this great presentation template) KDE and the Secret Service www.kde.org 12.
Recommended publications
  • The Kdesvn Handbook
    The kdesvn Handbook Rajko Albrecht The kdesvn Handbook 2 Contents 1 Introduction 7 1.1 Terms . .7 2 Using kdesvn 8 2.1 kdesvn features . .8 2.2 Beginning with subversion and kdesvn . .8 2.2.1 Creating a working copy . .9 2.2.2 Committing local changes . .9 2.2.3 Update working copy . .9 2.2.4 Adding and Deleting from working copy . .9 2.2.4.1 Add items . 10 2.2.4.2 Deleting items from working copy and unversion . 10 2.2.5 Displaying logs . 10 2.2.5.1 The log display dialog . 10 2.3 Working on repositories . 11 2.3.1 Restoring deleted items . 11 2.3.2 Importing folders . 11 2.3.2.1 With drag and drop . 11 2.3.2.2 Select folder to import with directory-browser . 11 2.4 Other Operations . 11 2.4.1 Merge . 11 2.4.1.1 Internal merge . 12 2.4.1.2 Using external program for merge . 12 2.4.2 Resolving conflicts . 12 2.5 Properties used by kdesvn for configuration . 13 2.5.1 Bugtracker integration . 13 2.6 The revision tree . 13 2.6.1 Requirements . 14 2.7 Internal log cache . 14 2.7.1 Offline mode . 14 2.7.2 Log cache and revision tree . 14 The kdesvn Handbook 2.8 Meaning of icon overlays . 14 2.9 kdesvn and passwords . 16 2.9.1 Not saving passwords . 16 2.9.2 Saving passwords in KWallet . 16 2.9.3 Saving to subversion’s own password storage .
    [Show full text]
  • Schon Mal Dran Gedacht,Linux Auszuprobieren? Von G. Schmidt
    Schon mal dran gedacht, Linux auszuprobieren? Eine Einführung in das Betriebssystem Linux und seine Distributionen von Günther Schmidt-Falck Das Magazin AUSWEGE wird nun schon seit 2010 mit Hilfe des Computer-Betriebs- system Linux erstellt: Texte layouten, Grafiken und Fotos bearbeiten, Webseiten ge- stalten, Audio schneiden - alles mit freier, unabhängiger Software einer weltweiten Entwicklergemeinde. Aufgrund der guten eigenen Erfahrungen möchte der folgende Aufsatz ins Betriebssystem Linux einführen - mit einem Schwerpunkt auf der Distri- bution LinuxMint. Was ist Linux? „... ein hochstabiles, besonders schnelles und vor allem funktionsfähiges Betriebssystem, das dem Unix-System ähnelt, … . Eine Gemeinschaft Tausender programmierte es und verteilt es nun unter der GNU General Public Li- cense. Somit ist es frei zugänglich für jeden und kos- tenlos! Mehrere Millionen Leute, viele Organisatio- nen und besonders Firmen nutzen es weltweit. Die meisten nutzen es aus folgenden Gründen: • besonders schnell, stabil und leistungs- stark • gratis Support aus vielen Internet- Newsgruppen Tux, der Pinguin, ist das Linux-Maskottchen • übersichtliche Mailing-Listen • massenweise www-Seiten • direkter Mailkontakt mit dem Programmierer sind möglich • Bildung von Gruppen • kommerzieller Support“1 Linux ist heute weit verbreitet im Serverbereich: „Im Oktober 2012 wurden mindes- tens 32% aller Webseiten auf einem Linux-Server gehostet. Da nicht alle Linux-Ser- ver sich auch als solche zu erkennen geben, könnte der tatsächliche Anteil um bis zu 24% höher liegen. Damit wäre ein tatsächlicher Marktanteil von bis zu 55% nicht 1 http://www.linuxnetworx.com/linux-richtig-nutzen magazin-auswege.de – 2.11.2015 Schon mal dran gedacht, Linux auszuprobieren? 1 auszuschliessen. (…) Linux gilt innerhalb von Netzwerken als ausgesprochen sicher und an die jeweiligen Gegebenheiten anpassbar.
    [Show full text]
  • Red Hat Enterprise Linux 7 7.9 Release Notes
    Red Hat Enterprise Linux 7 7.9 Release Notes Release Notes for Red Hat Enterprise Linux 7.9 Last Updated: 2021-08-17 Red Hat Enterprise Linux 7 7.9 Release Notes Release Notes for Red Hat Enterprise Linux 7.9 Legal Notice Copyright © 2021 Red Hat, Inc. The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at http://creativecommons.org/licenses/by-sa/3.0/ . In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version. Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, the Red Hat logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries. Linux ® is the registered trademark of Linus Torvalds in the United States and other countries. Java ® is a registered trademark of Oracle and/or its affiliates. XFS ® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries. MySQL ® is a registered trademark of MySQL AB in the United States, the European Union and other countries. Node.js ® is an official trademark of Joyent. Red Hat is not formally related to or endorsed by the official Joyent Node.js open source or commercial project.
    [Show full text]
  • The Krusader Handbook the Krusader Handbook
    The Krusader Handbook The Krusader Handbook 2 Contents 1 Introduction 14 1.1 Package description . 14 1.2 Welcome to Krusader! . 14 2 Features 17 3 User Interface 21 3.1 OFM User Interface . 21 3.2 Krusader Main Window . 21 3.3 Toolbars . 21 3.3.1 Main Toolbar . 21 3.3.2 Job Toolbar . 23 3.3.3 Actions Toolbar . 23 3.3.4 Location Toolbar . 23 3.3.5 Panel Toolbar . 23 3.4 Panels . 24 3.4.1 List Panel . 24 3.4.2 Sidebar . 25 3.4.3 Folder History . 26 3.5 Command Line / Terminal Emulator . 26 3.5.1 Command Line . 26 3.5.2 Terminal Emulator . 27 3.6 Function (FN) Keys Bar . 27 3.7 Folder Tabs . 28 3.8 Buttons . 28 4 Basic Functions 29 4.1 Controls . 29 4.1.1 General . 29 4.1.2 Moving Around . 29 4.1.3 Selecting . 30 4.1.4 Executing Commands . 30 4.1.5 Quick search . 31 4.1.6 Quick filter . 31 The Krusader Handbook 4.1.7 Quick select . 31 4.1.8 Context Menu . 31 4.2 Basic File Management . 32 4.2.1 Executing Files . 32 4.2.2 Copying and Moving . 32 4.2.3 Queue manager . 32 4.2.4 Deleting - move to Plasma Trash . 33 4.2.5 Shred Files . 33 4.2.6 Renaming Files, Creating Directories and Link Handling . 33 4.2.7 Viewing and Editing files . 33 4.3 Archive Handling . 34 4.3.1 Browsing Archives . 34 4.3.2 Unpack Files .
    [Show full text]
  • The Kwallet Handbook
    The KWallet Handbook George Staikos Lauri Watts Developer: George Staikos The KWallet Handbook 2 Contents 1 Introduction 5 1.1 Create a Wallet . .5 1.2 Using KWallet . .8 2 KWallet Manager9 2.1 The Wallet Window . .9 2.1.1 Contents tab . 10 2.1.1.1 Import and Export . 11 2.1.1.2 Adding Entries Manually . 11 2.1.2 Applications tab . 11 3 Configuring KWallet 12 3.1 Wallet Preferences . 12 3.2 Access Control . 13 4 Advanced Features 14 5 Credits and License 15 Abstract The wallet subsystem provides a convenient and secure way to manage all your passwords. The KWallet Handbook Chapter 1 Introduction Computer users have a very large amount of data to manage, some of which is sensitive. In particular, you will typically have many passwords to manage. Remembering them is difficult and writing them down on paper or in a text file is insecure. KWallet provides a secure way to store passwords and other secret information, allowing the user to remember only a single password instead of numerous different passwords and credentials. 1.1 Create a Wallet Wallet is a password storage. It is usually sufficient to have just one wallet secured by one master password but you can organize your large collection of passwords by wallets using KWallet Manager. By default a wallet named kdewallet will be used to store your passwords. This wallet is secured by your login password and will automatically be opened at login, if kwallet_pam is installed and properly configured. On certain distros (e.g. Archlinux) kwallet_pam is not installed by default Other wallets have to be opened manually.
    [Show full text]
  • Release Notes for Fedora 17
    Fedora 17 Release Notes Release Notes for Fedora 17 Edited by The Fedora Docs Team Copyright © 2012 Fedora Project Contributors. The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at http://creativecommons.org/licenses/by-sa/3.0/. The original authors of this document, and Red Hat, designate the Fedora Project as the "Attribution Party" for purposes of CC-BY-SA. In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version. Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, JBoss, MetaMatrix, Fedora, the Infinity Logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries. For guidelines on the permitted uses of the Fedora trademarks, refer to https:// fedoraproject.org/wiki/Legal:Trademark_guidelines. Linux® is the registered trademark of Linus Torvalds in the United States and other countries. Java® is a registered trademark of Oracle and/or its affiliates. XFS® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries. MySQL® is a registered trademark of MySQL AB in the United States, the European Union and other countries. All other trademarks are the property of their respective owners.
    [Show full text]
  • KDE Frameworks and Plasma 5 (Aka KDE 5) Previous Major Updates of This Desktop Environment Have Been As Popular As the Apocalypse
    REVIEWS KDE 5 KDE Frameworks and Plasma 5 (aka KDE 5) Previous major updates of this desktop environment have been as popular as the apocalypse. Fortunately, Graham Morrison is wielding Andúril this time. riting two pages on the latest release of the majority of frameworks (21) falling into tier 1. DATA KDE 5 is a tough proposition. But this is a This means their only dependency is Qt 5, which good thing. Were we to step into Bill and itself brings many, many performance and feature Web kde.org W Developer KDE developer Ted’s telephone box outside the Circle K and take enhancements. Tier 1 frameworks include those community ourselves back to 2008, surrounded by the fallout that deal with archives, codecs, hardware integration Licence GPL from the release of KDE 4, we’d be in a rather different and specific GUI additions, and developers can now situation. There would be so much to write about, include these without any further KDE dependencies, nearly all of it negative, that we wouldn’t know where basically as a KDE-flavoured extension to the to start. KDE 4.0 didn’t work, because its users considerable features already offered by Qt. This will expected a fully fledged desktop upgrade and the first help many developers appeal to an audience who major release should have been an early alpha release don’t want to install the entire KDE desktop just to get instead. It took years before the sum of all the new hold of an application or two, and this should lead to technologies that were tested in 4.0 became a viable the development of more KDE applications that run replacement for 3.x.
    [Show full text]
  • Towards Left Duff S Mdbg Holt Winters Gai Incl Tax Drupal Fapi Icici
    jimportneoneo_clienterrorentitynotfoundrelatedtonoeneo_j_sdn neo_j_traversalcyperneo_jclientpy_neo_neo_jneo_jphpgraphesrelsjshelltraverserwritebatchtransactioneventhandlerbatchinsertereverymangraphenedbgraphdatabaseserviceneo_j_communityjconfigurationjserverstartnodenotintransactionexceptionrest_graphdbneographytransactionfailureexceptionrelationshipentityneo_j_ogmsdnwrappingneoserverbootstrappergraphrepositoryneo_j_graphdbnodeentityembeddedgraphdatabaseneo_jtemplate neo_j_spatialcypher_neo_jneo_j_cyphercypher_querynoe_jcypherneo_jrestclientpy_neoallshortestpathscypher_querieslinkuriousneoclipseexecutionresultbatch_importerwebadmingraphdatabasetimetreegraphawarerelatedtoviacypherqueryrecorelationshiptypespringrestgraphdatabaseflockdbneomodelneo_j_rbshortpathpersistable withindistancegraphdbneo_jneo_j_webadminmiddle_ground_betweenanormcypher materialised handaling hinted finds_nothingbulbsbulbflowrexprorexster cayleygremlintitandborient_dbaurelius tinkerpoptitan_cassandratitan_graph_dbtitan_graphorientdbtitan rexter enough_ram arangotinkerpop_gremlinpyorientlinkset arangodb_graphfoxxodocumentarangodborientjssails_orientdborientgraphexectedbaasbox spark_javarddrddsunpersist asigned aql fetchplanoriento bsonobjectpyspark_rddrddmatrixfactorizationmodelresultiterablemlibpushdownlineage transforamtionspark_rddpairrddreducebykeymappartitionstakeorderedrowmatrixpair_rddblockmanagerlinearregressionwithsgddstreamsencouter fieldtypes spark_dataframejavarddgroupbykeyorg_apache_spark_rddlabeledpointdatabricksaggregatebykeyjavasparkcontextsaveastextfilejavapairdstreamcombinebykeysparkcontext_textfilejavadstreammappartitionswithindexupdatestatebykeyreducebykeyandwindowrepartitioning
    [Show full text]
  • The Smb4k Handbook
    The Smb4K Handbook Alexander Reinholdt The Smb4K Handbook 2 Contents 1 Introduction 8 2 Using Smb4K 10 2.1 Running Smb4K . 10 2.2 The Main Window . 10 2.3 The Network Neighborhood Browser . 11 2.3.1 Browsing . 12 2.3.2 Searching . 12 2.3.3 Actions and Popup Menu . 13 2.3.4 Tooltips . 15 2.3.5 Mounting a Share . 15 2.3.6 Printing Files on Remote Printers . 16 2.3.7 Previewing Shares . 16 2.3.8 Providing Authentication Information . 17 2.3.9 Defining Custom Options . 18 2.3.9.1 Common Mount Settings (Linux® only) . 19 2.3.9.2 Advanced Mount Settings (Linux® only) . 19 2.3.9.3 Mount Settings (BSD only) . 19 2.3.9.4 Browse Settings . 19 2.3.9.5 Wake-On-LAN Settings . 20 2.3.10 Adding Bookmarks . 20 2.4 The Mounted Shares View . 20 2.4.1 Different Views . 20 2.4.2 Actions and Popup Menu . 21 2.4.3 Tooltips . 22 2.4.4 Inaccessible Shares . 22 2.4.5 Icons . 22 2.4.6 Drag-and-Drop . 23 2.4.7 Unmounting Shares . 24 2.4.8 Synchronization . 24 2.4.9 Opening a Share . 26 The Smb4K Handbook 2.5 The System Tray Widget . 26 2.5.1 Location and Usage . 26 2.5.2 Menus and Menu Items . 27 2.6 The Plasmoid . 29 2.6.1 Network Neighborhood Tab . 29 2.6.2 Mounted Shares Tab . 30 2.6.3 Bookmarks Tab . 30 2.6.4 Profiles Tab .
    [Show full text]
  • Technical Notes All Changes in Fedora 18
    Fedora 18 Technical Notes All changes in Fedora 18 Edited by The Fedora Docs Team Copyright © 2012 Red Hat, Inc. and others. The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at http://creativecommons.org/licenses/by-sa/3.0/. The original authors of this document, and Red Hat, designate the Fedora Project as the "Attribution Party" for purposes of CC-BY-SA. In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version. Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, JBoss, MetaMatrix, Fedora, the Infinity Logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries. For guidelines on the permitted uses of the Fedora trademarks, refer to https:// fedoraproject.org/wiki/Legal:Trademark_guidelines. Linux® is the registered trademark of Linus Torvalds in the United States and other countries. Java® is a registered trademark of Oracle and/or its affiliates. XFS® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries. MySQL® is a registered trademark of MySQL AB in the United States, the European Union and other countries. All other trademarks are the property of their respective owners.
    [Show full text]
  • KF6 the Architecture Overview Time to Slice Things up Yet Again
    KF6 the Architecture Overview Time to Slice Things Up Yet Again Kevin Ottens Akademy 2021, June 19th whoami • Started to use KDE with 1.0-beta1 in 1997 • Procrastinated until 2003 to finally contribute code • Fell in love with the community back then • Kept doing things here and there. most notably helped with: – kdelibs – KDE Frameworks architecture – the KDE Manifesto – Community Data Analytics • Part of the enioka Haute Couture family • Living in Toulouse KF6 the Architecture Overview 2| Let’s Drive Down The Memory Lane KF6 the Architecture Overview 3| History KF6 the Architecture Overview 4| KDE Platform Basically it was. • kdelibs • kdebase-runtime With a rather monolithic development KF6 the Architecture Overview 5| Plasma Desktop Dependencies KF6 the Architecture Overview 6| kdeinit4 Dependencies KF6 the Architecture Overview 7| libplasma Dependencies KF6 the Architecture Overview 8| Tokamak 4, February 2010 KF6 the Architecture Overview 9| Someone Took an Ax! KF6 the Architecture Overview 10| KDE Platform on Mobile? KF6 the Architecture Overview 11| • More than 40% reduction in size Platform 11, June 2011 Ten Years Ago! KF6 the Architecture Overview 12| AkonadiConsole Dependencies • Welcome to a Cabin in the Swiss Alps. KF6 the Architecture Overview 13| Someone Took a Machete! KF6 the Architecture Overview 14| Bunch of Geeks in the Middle of Nowhere KF6 the Architecture Overview 15| Kanban Board (Start) KF6 the Architecture Overview 16| Kanban Board (End) KF6 the Architecture Overview 17| KDE Frameworks 5 Dependency Plan • Notice – rows – columns – colors – shapes • Where is KParts? :-) KF6 the Architecture Overview 18| KDE Frameworks 5 Organizational Matrix • Looks familiar? At least the tiers should be.
    [Show full text]
  • K Desktop Environment 3 from Wikipedia, the Free Encyclopedia
    K Desktop Environment 3 From Wikipedia, the free encyclopedia K Desktop Environment 3 is the third series of releases of the K Desktop Environment (after that called KDE Software Compilation). There are six major releases in this series. K Desktop Environment 3 Contents 1 K Desktop Environment 3.0 2 K Desktop Environment 3.1 3 K Desktop Environment 3.2 4 K Desktop Environment 3.3 K Desktop Environment 3.5 5 K Desktop Environment 3.4 6 K Desktop Environment 3.5 Developer(s) KDE Initial release 3 April 2002 6.1 Kolab Enterprise Stable release 3.5.10 / 26 August 7 Release schedule 2008 Development status Superseded by 8 Trinity Desktop Environment KDE SC 4 9 References Written in C++ (Qt 3) Operating system Unix-like with X11 10 External links Available in Multilingual Type Desktop environment K Desktop Environment 3.0 License GPL and other licenses K Desktop Environment 3.0 introduced better support for restricted usage, a feature demanded by certain environments such as kiosks, Internet cafes and enterprise deployments, which disallows the user from having full access to all capabilities of a Website kde.org (http://kde piece of software.[1] To address these needs, KDE 3.0 included a new lockdown framework, essentially a permissions-based .org/) system for altering application configuration options that supplements the standard UNIX permissions system.[2] The KDE panel and the desktop manager were modified to employ this system, but other major desktop components, such as Konqueror and the Control Center, had to wait for subsequent releases.[3] K Desktop Environment 3.0 debuted a new printing framework, KDEPrint.
    [Show full text]