From 0633fd622054003eccf97822068f7f54cb0b8705 Mon Sep 17 00:00:00 2001 From: Sascha Wiswedel Date: Mon, 20 Apr 2020 14:09:20 +0200 Subject: [PATCH 1/8] paragraph about "Approved" tagged apps does no longer apply Signed-off-by: Sascha Wiswedel --- admin_manual/apps_management.rst | 3 --- 1 file changed, 3 deletions(-) diff --git a/admin_manual/apps_management.rst b/admin_manual/apps_management.rst index 5c3a47428..9176fbaf6 100644 --- a/admin_manual/apps_management.rst +++ b/admin_manual/apps_management.rst @@ -26,9 +26,6 @@ have an **Official**-tag. See :doc:`installation/apps_supported` for a list of s .. note:: To get access to work-arounds, long-term-support, priority bug fixing and custom consulting for supported apps, contact our `sales team `_. -Apps with **Approved** tag are community-developed and were uploaded in the -`Nextcloud App Store `_. - .. note:: If you would like to develop your own Nextcloud app, you can find out more information in our `developer manual `_. .. TODO ON RELEASE: Update version number above on release From 1463d0d6a6a6475ab4de33b053347e5997df78b9 Mon Sep 17 00:00:00 2001 From: Sascha Wiswedel Date: Mon, 20 Apr 2020 14:10:01 +0200 Subject: [PATCH 2/8] updated outdated docu link Signed-off-by: Sascha Wiswedel --- admin_manual/apps_management.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/admin_manual/apps_management.rst b/admin_manual/apps_management.rst index 9176fbaf6..f56057a84 100644 --- a/admin_manual/apps_management.rst +++ b/admin_manual/apps_management.rst @@ -27,7 +27,7 @@ have an **Official**-tag. See :doc:`installation/apps_supported` for a list of s and custom consulting for supported apps, contact our `sales team `_. .. note:: If you would like to develop your own Nextcloud app, you can find out - more information in our `developer manual `_. + more information in our `developer manual `_. .. TODO ON RELEASE: Update version number above on release All apps need to be licensed under AGPLv3+ or any compatible license. From b2675694cdb88b4cec9036365475cdf01b0203a9 Mon Sep 17 00:00:00 2001 From: Sascha Wiswedel Date: Mon, 20 Apr 2020 14:15:49 +0200 Subject: [PATCH 3/8] App Store: "official" is now "Featured" Signed-off-by: Sascha Wiswedel --- admin_manual/apps_management.rst | 2 +- admin_manual/configuration_server/occ_command.rst | 2 +- admin_manual/configuration_user/two_factor-auth.rst | 2 +- developer_manual/app/code_signing.rst | 6 +++--- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/admin_manual/apps_management.rst b/admin_manual/apps_management.rst index f56057a84..7fba4e000 100644 --- a/admin_manual/apps_management.rst +++ b/admin_manual/apps_management.rst @@ -21,7 +21,7 @@ During the Nextcloud server installation, some apps are enabled by default. To see which apps are enabled go to your Apps page. Those apps are supported and developed by Nextcloud GmbH directly and -have an **Official**-tag. See :doc:`installation/apps_supported` for a list of supported apps. +have an **Featured**-tag. See :doc:`installation/apps_supported` for a list of supported apps. .. note:: To get access to work-arounds, long-term-support, priority bug fixing and custom consulting for supported apps, contact our `sales team `_. diff --git a/admin_manual/configuration_server/occ_command.rst b/admin_manual/configuration_server/occ_command.rst index 2a8dcf49e..172bd03ff 100644 --- a/admin_manual/configuration_server/occ_command.rst +++ b/admin_manual/configuration_server/occ_command.rst @@ -757,7 +757,7 @@ and to copy external mount configurations to another Nextcloud server. Integrity check --------------- -Apps which have an official tag MUST be code signed with Nextcloud. Unsigned official apps won't be installable anymore. Code signing is optional for all third-party applications:: +Apps which have a ``Featured`` tag MUST be code signed with Nextcloud. Unsigned featured apps won't be installable anymore. Code signing is optional for all third-party applications:: integrity integrity:check-app Check app integrity using a signature. diff --git a/admin_manual/configuration_user/two_factor-auth.rst b/admin_manual/configuration_user/two_factor-auth.rst index 28ac5b75e..24e480532 100644 --- a/admin_manual/configuration_user/two_factor-auth.rst +++ b/admin_manual/configuration_user/two_factor-auth.rst @@ -5,7 +5,7 @@ Two-factor authentication Two-factor authentication adds an additional layer of security to user accounts. In order to log in on an account with two-factor authentication (2FA) enabled, it is necessary to provide both the login password and another factor. 2FA in Nextcloud is pluggable, meaning that they are not part -of the Nextcloud Server component but provided by official and 3rd-party Nextcloud apps. +of the Nextcloud Server component but provided by featured and 3rd-party Nextcloud apps. Several 2FA apps are already available including diff --git a/developer_manual/app/code_signing.rst b/developer_manual/app/code_signing.rst index 0ad7f1dbd..d18ee827e 100644 --- a/developer_manual/app/code_signing.rst +++ b/developer_manual/app/code_signing.rst @@ -28,7 +28,7 @@ Do we lock down Nextcloud? The Nextcloud project is open source and always will be. We do not want to make it more difficult for our users to run Nextcloud. Any code signing errors on upgrades will not prevent Nextcloud from running, but will display a warning on -the Admin page. For applications that are not tagged "Official" the code signing +the Admin page. For applications that are not tagged "Featured" the code signing process is optional. Not open source anymore? @@ -103,8 +103,8 @@ still be ensured by having a new certificate issued. How code signing affects apps in the app store ---------------------------------------------- -- Apps which have an ``official`` tag **MUST** be code signed. - Unsigned ``official`` apps won't be installable anymore. +- Apps which have a ``Featured`` tag **MUST** be code signed. + Unsigned ``Featured`` apps won't be installable anymore. - Apps which have been signed in a previous release **MUST** be code-signed in all future releases as well, otherwise the update will be refused. From 754ef48b37e458ea94c4df3c93220a4991e11a7f Mon Sep 17 00:00:00 2001 From: Sascha Wiswedel Date: Mon, 20 Apr 2020 14:18:34 +0200 Subject: [PATCH 4/8] Gallery has been replaced by Photos Signed-off-by: Sascha Wiswedel --- admin_manual/apps_management.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/admin_manual/apps_management.rst b/admin_manual/apps_management.rst index 7fba4e000..d61a753f2 100644 --- a/admin_manual/apps_management.rst +++ b/admin_manual/apps_management.rst @@ -4,7 +4,7 @@ Apps management Nextcloud apps can enhance, customize or even restrict the features and experience you and your users has with the Nextcloud server. Next to default enabled functions -like Files, Activity and Gallery there are other apps like Calendar, Contacts, +like Files, Activity and Photos there are other apps like Calendar, Contacts, Talk and more which are enhancing the features of your Nextcloud server. After installing the Nextcloud server, you might want to consider about enabling, From b0961954ad0b9e2bac7ef5c1c82aa30ffab719fc Mon Sep 17 00:00:00 2001 From: Sascha Wiswedel Date: Mon, 20 Apr 2020 14:19:19 +0200 Subject: [PATCH 5/8] typo Signed-off-by: Sascha Wiswedel --- admin_manual/apps_management.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/admin_manual/apps_management.rst b/admin_manual/apps_management.rst index d61a753f2..3ac188fb5 100644 --- a/admin_manual/apps_management.rst +++ b/admin_manual/apps_management.rst @@ -8,7 +8,7 @@ like Files, Activity and Photos there are other apps like Calendar, Contacts, Talk and more which are enhancing the features of your Nextcloud server. After installing the Nextcloud server, you might want to consider about enabling, -disabling or even restricting some apps to groups depending on your and your users +disabling or even restricting some apps to groups depending on your and your users' needs. Apps From fb19f6d5dd027b06d6341f7260f9828ed8fdee51 Mon Sep 17 00:00:00 2001 From: Sascha Wiswedel Date: Mon, 20 Apr 2020 14:19:55 +0200 Subject: [PATCH 6/8] be more strict about licensing requirements Signed-off-by: Sascha Wiswedel --- admin_manual/apps_management.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/admin_manual/apps_management.rst b/admin_manual/apps_management.rst index 3ac188fb5..2befeebe0 100644 --- a/admin_manual/apps_management.rst +++ b/admin_manual/apps_management.rst @@ -30,7 +30,7 @@ have an **Featured**-tag. See :doc:`installation/apps_supported` for a list of s more information in our `developer manual `_. .. TODO ON RELEASE: Update version number above on release -All apps need to be licensed under AGPLv3+ or any compatible license. +All apps must be licensed under AGPLv3+ or any compatible license. Managing apps ------------- From a98da78d4b9be93b37ccb6e6d7e5ed03add9a91e Mon Sep 17 00:00:00 2001 From: Sascha Wiswedel Date: Mon, 20 Apr 2020 14:24:05 +0200 Subject: [PATCH 7/8] added note about app store URL whitelisting Signed-off-by: Sascha Wiswedel --- admin_manual/apps_management.rst | 3 +++ 1 file changed, 3 insertions(+) diff --git a/admin_manual/apps_management.rst b/admin_manual/apps_management.rst index 2befeebe0..ed66d456b 100644 --- a/admin_manual/apps_management.rst +++ b/admin_manual/apps_management.rst @@ -23,6 +23,9 @@ To see which apps are enabled go to your Apps page. Those apps are supported and developed by Nextcloud GmbH directly and have an **Featured**-tag. See :doc:`installation/apps_supported` for a list of supported apps. +.. note:: Your Nextcloud server needs to be able to communicate with + ``https://apps.nextcloud.com`` to list and download apps. Please make sure to whitelist this target in your firewall or proxy if necessary_. + .. note:: To get access to work-arounds, long-term-support, priority bug fixing and custom consulting for supported apps, contact our `sales team `_. From 0d4dea503102f5f5a6d212445ca144d6a39633e7 Mon Sep 17 00:00:00 2001 From: Sascha Wiswedel Date: Mon, 20 Apr 2020 15:09:11 +0200 Subject: [PATCH 8/8] licensing note also put into dev docs Signed-off-by: Sascha Wiswedel --- developer_manual/app/publishing.rst | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/developer_manual/app/publishing.rst b/developer_manual/app/publishing.rst index 756d1ae37..a9d032a80 100644 --- a/developer_manual/app/publishing.rst +++ b/developer_manual/app/publishing.rst @@ -41,12 +41,13 @@ These are the app guidelines an app has to comply with to have a chance to be ap Legal and security ^^^^^^^^^^^^^^^^^^ -* Apps can not use 'Nextcloud' in their name. +* Apps must be licensed under AGPLv3+ or any compatible license. +* Apps must not use 'Nextcloud' in their name. * Irregular and unannounced security audits of all apps can and will take place. * If any indication of malicious intent or bad faith is found the developer(s) in question can count on a minimum 2 year ban from any Nextcloud infrastructure. * Malicious intent includes deliberate spying on users by leaking user data to a third party system or adding a back door (like a hard-coded user account) to Nextcloud. An unintentional security bug that gets fixed in time won't be considered bad faith. * Apps do not violate any laws; it has to comply with copyright- and trademark law. -* App authors have to respond timely to security concerns and not make Nextcloud more vulnerable to attack. +* App authors have to respond timely to security concerns and not make Nextcloud more vulnerable to attacks. .. note:: Distributing malicious or illegal applications can have legal consequences including, but not limited to Nextcloud or affected users taking legal action.