On Mon, 2015-10-19 at 15:30 +0500, Alexander E. Patrakov wrote: > 19.10.2015 14:49, Arun Raghavan wrote: [...] > > * I'd also like to add a policy module to allow blacklisting > > specific > > applications, and forcing this behaviour on them. This will need a > > protocol update to set a stream flag after the stream is connected. > > > > * For legacy apps that are not covered by the blacklist we could > > add an > > environment variable that makes all stream and sink-input volume > > -related bits to use the new behaviour. > > The question here is whether we would later want to force this upon > all > sandboxed applications (xdg-app). For sandboxing, the approach would probably need to be different -- such as the access control system we've been talking about for xdg-app. Having the decision and implementation done server-side means that the same mechanism as the blacklist would work for the permissions system. -- Arun
