Re: Oaf default build...

[Maciej Stachowiak <mjs eazel com>]

Maciej Stachowiak <mjs@eazel.com> writes:

> Michael Meeks <michael@helixcode.com> writes:
> 
> > Hi all,
> > 
> > 	I just made oaf the default for bonobo configures and bumped the
> > version to 0.14 in CVS.
> 
> While in some ways I'm pleased, there are two siginificant missing OAF
> features that should now be added ASAP. One is shared library
> activation, which should not be hard to fix
> (http://bugzilla.eazel.com/show_bug.cgi?id=1026).
> 
> Miguel also says that "security" is not implemented, but I am not sure
> what kind of security is called for exactly. OAF doesn't use the X
> server for activation or anything, strictly ORBit local sockets, so
> UNIX permissions should take care of security needs. Someone should
> clarify the issue.

Actually, I am completely wrong about both of these things.

1) Shared library activation is implemented. I foolishly trusted
   someone who claimed to have read the code before reading it
   myself. It looks like it should work fine, though I have not tried
   it.

2) Elliot says that security issues are resolved by randomization of
   object keys in ORBit.

 - Maciej