[Bug 1029157] Re: User should be able to select allowed sources

[Matthew Paul Thomas]

I like that idea. But an option to block third-party software would need
to be lower-level than USC and gdebi, to also prevent someone from using
dpkg -i from the Terminal.

Third-party software could be blocked either at install time, as you
suggest, or at launch time. You link to a screenshot of GateKeeper,
which blocks it at launch time. The Mac has a framework called Launch
Services that is responsible for launching any application, including
checking whether it has ever been run before (LSQuarantine), whether it
is on the list of known malware (XProtect), whether anyone has
permission to run it (GateKeeper), and whether you in particular have
permission to run it (Parental Controls). I expect we would need
something equivalent at the kernel level if we hoped to block third-
party software at launch time.


** Also affects: dpkg (Ubuntu)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gdebi in Ubuntu.
https://bugs.launchpad.net/bugs/1029157

Title:
  User should be able to select allowed sources

Status in “dpkg” package in Ubuntu:
  New
Status in “gdebi” package in Ubuntu:
  New
Status in “software-center” package in Ubuntu:
  New

Bug description:
  Maybe you want to only allow package installs of software from Ubuntu
  Software Center and disallow any package installs from third-party
  sources.

  Have a setting dialog where a user is presented with a choice such as the one below.
  -- Packages --
  Allow applications downloaded from:
  * Ubuntu repository
  * Ubuntu repository and PPA
  * Anywhere
  --------------------

  http://cdn.arstechnica.net/wp-content/uploads/2012/07/gatekeeper-
  small.png

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dpkg/+bug/1029157/+subscriptions