Closing trusty task ** Changed in: pulseaudio (Ubuntu Trusty) Status: Confirmed => Won't Fix
-- You received this bug notification because you are a member of Desktop Packages, which is subscribed to pulseaudio in Ubuntu. https://bugs.launchpad.net/bugs/1211380 Title: pulseaudio socket needs confined app restrictions Status in PulseAudio sound server: New Status in “apparmor” package in Ubuntu: Fix Released Status in “apparmor-easyprof-ubuntu” package in Ubuntu: Fix Released Status in “pulseaudio” package in Ubuntu: Confirmed Status in “apparmor” source package in Saucy: Fix Released Status in “apparmor-easyprof-ubuntu” source package in Saucy: Fix Released Status in “pulseaudio” source package in Saucy: Won't Fix Status in “apparmor” source package in Trusty: Fix Released Status in “apparmor-easyprof-ubuntu” source package in Trusty: Fix Released Status in “pulseaudio” source package in Trusty: Won't Fix Bug description: Confined applications need access to the pulseaudio socket. Currently several sockets are available to apps, and some allow performing dangerous operations, such as loading a module from an arbitrary path. It also allows them to enumerate installed applications by listing clients. The Pulseaudio daemon should verify if an application is confined, and if so, restrict access to certain commands. If module loading cannot be disabled for confined applications, perhaps it could be modified to only load modules from trusted system locations. To manage notifications about this bug go to: https://bugs.launchpad.net/pulseaudio/+bug/1211380/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp