[maemo-developers] Security Guidance for N800 OS development

[From: Marius Gedminas]

On Thu, Feb 22, 2007 at 08:20:53PM -0300, Gustavo Sverzut Barbieri wrote:
> On 2/22/07, Eero Tamminen <eero.tamminen at nokia.com> wrote:
> >ext Gustavo Sverzut Barbieri wrote:
> >> yes, but the most harmful action is to add "/" to be scanned, but
> >> that's in blacklist so it's avoided.
> >
> >If it is monitoring file changes in the device, you should also
> >ignore at least /dev & /sys*, otherwise your process wakes up
> >unnecessarily (which drains battery).
> 
> Sure, we ignore:
> 
>    static const gchar *blacklist[] = {
>        "/bin",
>        "/boot",
>        "/dev",
>        "/etc",
>        "/lib",
>        "/proc",
>        "/root",
>        "/sbin",
>        "/sys",
>        "/usr/bin",
>        "/usr/sbin",
>        "/usr/etc",
>        "/usr/lib",
>        NULL
>    };

I'm somewhat surprised that you scan /var and /tmp.  Or, in fact,
anything outside /home and /media.

We're talking about Canola scanning for media files, right?

Marius Gedminas
-- 
If the code and the comments disagree, then both are probably wrong.
                -- Norm Schryer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.maemo.org/pipermail/maemo-developers/attachments/20070223/74126b0b/attachment.pgp