[packagekit] Proxy

[David Zeuthen]

On Tue, 2008-03-25 at 05:27 -0400, David Zeuthen wrote:
> On Tue, 2008-03-25 at 05:16 -0400, David Zeuthen wrote:
> > On Tue, 2008-03-25 at 08:28 +0000, Richard Hughes wrote:
> > > Doing it per-user, also means we don't have to add extra configuration
> > > as we can use the gnome-desktop settings if we are in GNOME and the KDE
> > > ones if we are in KDE.
> > 
> > That would be nice. However it would be a big security hole to do so.
> > Keep in mind that the user session is always to be considered hostile.
> > 
> > (What you could do instead is making the packagekit system daemon read
> > the proxy settings from the mandatory and default area of gconf.)
> 
> Or even better. Restrict the ability to set proxy settings from the user
> session with a PolicyKit action. Then big sites can lock this down.

Richard asked me to follow up here

 - Daemon provides a SetProxySettings() method on the public interface.
   On the interface to the backends, there's a GetProxySettings. So e.g.
   the yum backend would get the proxy settings from the main daemon.

 - To use it you'll need authorization for the action

    org.freedesktop.packagekit.set-proxy-settings 

   which the daemon defines. By default, we'd default to implicitly
   granting this to local active sessions.

 - The client tools (e.g. pk-update-icon or whatever) reads the proxy
   settings from the desktop / environment / whatever they're running
   in and calls SetProxySettings() before doing their normal job of
   interacting with the daemon.

 - Don't think you need to report errors / throw any UI at this.

      David