Opened 8 years ago

Last modified 6 years ago

#1502 new task

Security control panel

Reported by: jg Owned by: Eben
Priority: normal Milestone: Future Release
Component: security Version:
Keywords: security Cc: krstic, holger, mstone, eben, cscott
Blocked By: Blocking: #6428
Deployments affected: Action Needed: never set
Verified: no

Description

The activity security system needs a GUI designed for its control.

Change History (13)

comment:1 Changed 8 years ago by Eben

  • Status changed from new to assigned

Ivan, could I get a functional spec (or link thereto) for the security system?

comment:2 Changed 8 years ago by kimquirk

  • Milestone changed from BTest-4 to Trial-2
  • Verified unset

Moved to next SW release, Trial-2.

comment:3 Changed 8 years ago by holger

  • Cc holger added

comment:4 Changed 7 years ago by jg

  • Milestone changed from Trial-2 to Trial-3

comment:5 Changed 7 years ago by mstone

  • Cc mstone added

comment:6 Changed 7 years ago by krstic

  • Component changed from distro to security
  • Milestone changed from Trial-3 to V1.1
  • Owner changed from Eben to krstic
  • Priority changed from high to normal
  • Status changed from assigned to new

A CLI will be present for FRS. A proper GUI is post-FRS material. I'll take back ownership to produce a functional spec for it.

comment:7 Changed 7 years ago by Eben

This might be covered by #3239, unless we want to force a reboot with modifier to access it.

comment:8 follow-up: Changed 7 years ago by sj

  • Priority changed from normal to high

If users are going to be prevented from installing the activities of their choice until they can figure out how this works, making this simple to use and/or well-documented is necessary, not just another feature. Making this part of the solution to #3239 sounds reasonable.

comment:9 in reply to: ↑ 8 Changed 7 years ago by krstic

  • Priority changed from high to normal

Replying to sj:

If users are going to be prevented from installing the activities of their choice until they can figure out how this works

They're not. Please don't change bug priorities without consulting with bug owner or Jim/Kim.

comment:10 Changed 6 years ago by cscott

  • Action Needed set to never set
  • Owner changed from krstic to cscott

I'll take this one. I'm a sugar-control-panel wizard now!

comment:11 Changed 6 years ago by cscott

  • Cc eben cscott added
  • Owner changed from cscott to Eben
  • Summary changed from Security system will need a GUI designed. to Security control panel

From discussion with Eben: there are three sections to this control panel:

  • Theft-deterrence
    • Last check in with theft-deterrence server
    • Time current lease expires
    • Manual lease renewal button
    • "Where in the world am I" button (poorly defined, but this is information from the theft-deterrence server: maybe school name, maybe location based on IP address, maybe something else?)
    • Black list check button (check right now w/ the update server and let me know right away if this machine is stolen, not stolen, or "can't tell"). When someone is trying to sell you an XO, have them take you to the nearest internet cafe and click this button before you hand over your money.
  • Developer key
    • Status: installed, temporarily disabled, requested but not yet issued, or not present.
    • Request/fetch developer key button.
  • Bitfrost (http://wiki.laptop.org/go/OLPC_Bitfrost)
    • "Almost all of the protections we discuss can be disabled by the user through a graphical interface"
    • For 9.1: P_SF_CORE / P_SF_RUN

Reassigning to Eben for GUI mockups. Reassign back to me when ready to implement.

comment:12 Changed 6 years ago by cscott

  • Blocking 6428 added

(In #6428) This bug has been absorbed by #1502.

comment:13 Changed 6 years ago by bert

IMHO a user doesn't even have to know there is a "dev key". So why not simply have a checkbox labeled something like "allow running test builds"? I'm not even sure it has to live in the security panel ... KISS rules ;)

Note: See TracTickets for help on using tickets.