RFE: FireKit

[Colin Walters]

On Fri, Jul 24, 2009 at 1:35 PM, Colin Walters<walters at verbum.org> wrote:
>
>> Joe might have file sharing enabled to share his documents with his colleagues
>> in his own company, but just because Joe wants to let people see the
>> presentation, that doesn't mean he wants anyone who might be connected to the
>> customer's network to read all his documents.
>
> Hmm?  How would they be able to read all his documents?

Oh, I see what you're saying; if they enabled gnome-user-share to
share documents at their main office.  Hmm, yes.

Ok, how about this - gnome-user-share and vino are by default tied to
networks, rather than global.  So instead of one global GConf key,
they have per-network state stored either in /system/networking or
based of some key in their own config.  When the network changes, they
adjust.

If we do ship a firewall on by default, then yes we would need a way
for these desktop apps to poke holes programatically.  Which is kind
of a mess...if Lennart wouldn't object too much maybe the code could
live inside Avahi, since most of the things we want to enable are
Avahi services.