This bug was fixed in the package ubuntu-touch-meta - 1.200 --------------- ubuntu-touch-meta (1.200) 14.09; urgency=medium
* Refreshed dependencies (LP: #1413622), (LP: #1392380) * Added signon-apparmor-extension * Added ubuntu-keyboard-azerbaijani * Added ubuntu-keyboard-bosnian * Added ubuntu-keyboard-catalan * Added ubuntu-keyboard-croatian * Added ubuntu-keyboard-emoji -- Oliver Grawert <o...@ubuntu.com> Fri, 23 Jan 2015 22:04:23 +0100 ** Changed in: ubuntu-touch-meta (Ubuntu RTM) Status: New => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to signon in Ubuntu. https://bugs.launchpad.net/bugs/1392380 Title: OA gives out all tokens to any app Status in the base for Ubuntu mobile products: Confirmed Status in signon package in Ubuntu: Fix Released Status in signon source package in Utopic: Confirmed Status in signon source package in Vivid: Fix Released Status in signon package in Ubuntu RTM: In Progress Status in ubuntu-touch-meta package in Ubuntu RTM: Fix Released Bug description: The attached app will steal all your tokens. All it takes is the "accounts" permission in the apparmor file. Here's the code: https://pastebin.canonical.com/120398/ To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1392380/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp