Re: [equinox-dev] JAAS integration (security)

["Oberhuber, Martin" <Martin.Oberhuber@xxxxxxxxxxxxx>]

Hello,

The DSDP Target Management Project is also interested in
picking up security enhancements from Equinox. I entered
https://bugs.eclipse.org/bugs/show_bug.cgi?id=196445
for trackign this on our own behalf, could you please
keep us in the loop.

I edited the Requirements Wiki as follows:

* Support a password management (or perhaps service management)
  UI for storing passwords to CVS, etc.
** DSDP-TM Usecase: 196445 - should be a (potentially backward 
   compatible) replacement of the current Eclipse Keyring, but with
*** Better or pluggable encryption
*** UI for entering the master password instead of having it on 
    startup commandline
*** Access to the opened password database only for trusted modules

Thanks,
--
Martin Oberhuber
Wind River Systems, Inc.
Target Management Project Lead, DSDP PMC Member
http://www.eclipse.org/dsdp/tm

> Here's the IpZilla link:
http://dev.eclipse.org/ipzilla/show_bug.cgi?id=1549

> I believe the code will end up in a security specific incubator
> where we will be hardening it and working on community requirements
> and feedback. The code should work on CDC/Foundation, the core
security
> and JAAS APIs are a part of that runtime. These plug-ins are an
> optional add-on at this point, but that may change eventually as we
> try out tighter integration.

> For now, toss requirements into the wiki: 
> http://wiki.eclipse.org/index.php/Security:_Requirements