** Tags added: testcase
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files profile should include @{HOME}/.config
To manage notifications about thi
** Description changed:
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files profile should include @{HOME}/.config
To manage notifications about thi
** Changed in: apparmor (Ubuntu)
Assignee: Jamie Strandboge (jdstrand) => Mark Valens (ever2note)
** Changed in: apparmor (Ubuntu)
Assignee: Mark Valens (ever2note) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribe
** Changed in: apparmor (Ubuntu Lucid)
Assignee: Karen Postmus (emetech) => Jamie Strandboge (jdstrand)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor pr
** Changed in: apparmor (Ubuntu Lucid)
Assignee: Jamie Strandboge (jdstrand) => Karen Postmus (emetech)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor pr
** Changed in: evince (Ubuntu Lucid)
Assignee: THILAGAN.K (kthilagan177) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files pro
** Changed in: evince (Ubuntu Lucid)
Assignee: (unassigned) => THILAGAN.K (kthilagan177)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files pro
** Changed in: apparmor (Ubuntu Lucid)
Assignee: Moloisi Moloto (mmoloto) => Jamie Strandboge (jdstrand)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor p
** Changed in: apparmor (Ubuntu Lucid)
Assignee: Jamie Strandboge (jdstrand) => Moloisi Moloto (mmoloto)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor p
** Changed in: apparmor (Ubuntu Maverick)
Assignee: charanjeet singh (jeet-232) => Jamie Strandboge (jdstrand)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
appa
** Changed in: apparmor (Ubuntu Maverick)
Assignee: Jamie Strandboge (jdstrand) => charanjeet singh (jeet-232)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
appa
This bug was fixed in the package apparmor - 2.5.1-0ubuntu0.10.10.4
---
apparmor (2.5.1-0ubuntu0.10.10.4) maverick-proposed; urgency=low
* debian/patches/0012-lp698194.patch: explicitly deny access to autostart
directories, chromium, some popular email clients and kwallet
-
** Tags added: verification-done
** Tags removed: verification-needed
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files profile should include @{HO
Tested maverick-proposed using:
* QRT:test-apparmor.py: PASS
* QRT:test-evince.py: PASS
* evince can no longer write to the ~/.config/autostart directory (the TEST
CASE): PASS
* evince can be launched from firefox: PASS
* evince can be launched from evolution (PDF attachment in email): PASS
** Tags removed: verification-done
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files profile should include @{HOME}/.config
--
desktop-bugs maili
This bug was fixed in the package apparmor - 2.5.1-0ubuntu0.10.04.3
---
apparmor (2.5.1-0ubuntu0.10.04.3) lucid-proposed; urgency=low
* debian/patches/0014-lp698194.patch: explicitly deny access to autostart
directories, chromium, some popular email clients and kwallet
- LP:
** Branch linked: lp:ubuntu/maverick-proposed/apparmor
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files profile should include @{HOME}/.config
--
Accepted apparmor into maverick-proposed, the package will build now and
be available in a few hours. Please test and give feedback here. See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed. Thank you in advance!
** Changed in: apparmor (Ubuntu Mave
** Tags added: verification-done
** Tags removed: verification-needed
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files profile should include @{HO
Tested using:
* QRT:test-apparmor.py: PASS
* QRT:test-evince.py: PASS
* evince can no longer write to the ~/.config/autostart directory (the TEST
CASE): PASS
* evince can be launched from firefox: PASS
* evince can by launched from evolution (PDF attachment in email): PASS
* adjusting the ev
** Branch linked: lp:ubuntu/lucid-proposed/apparmor
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files profile should include @{HOME}/.config
--
d
Accepted apparmor into lucid-proposed, the package will build now and be
available in a few hours. Please test and give feedback here. See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed. Thank you in advance!
** Changed in: apparmor (Ubuntu Lucid)
Uploaded to lucid and maverick proposed, pending SRU team approval.
** Description changed:
SRU
1. This update provides additional protection for consumers of the
private-files and private-files-strict abstractions. In Ubuntu, the
evince and firefox profiles use the private-files abstr
** Patch added: "apparmor_2.5.1-0ubuntu0.10.10.4.debdiff"
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/698194/+attachment/1795900/+files/apparmor_2.5.1-0ubuntu0.10.10.4.debdiff
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscrib
** Patch added: "apparmor_2.5.1-0ubuntu0.10.04.3.debdiff"
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/698194/+attachment/1795899/+files/apparmor_2.5.1-0ubuntu0.10.04.3.debdiff
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscrib
** Description changed:
+ SRU
+
+ 1. This update provides additional protection for consumers of the
+ private-files and private-files-strict abstractions. In Ubuntu, the
+ evince and firefox profiles use the private-files abstraction. The
+ firefox profile is disabled by default.
+
+ 2. This wa
** Branch linked: lp:ubuntu/evince
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files profile should include @{HOME}/.config
--
desktop-bugs maili
This bug was fixed in the package evince - 2.32.0-0ubuntu5
---
evince (2.32.0-0ubuntu5) natty; urgency=low
* debian/apparmor-profile.abstraction:
- deny access to kwallet, chromium configuration, writing to .pki/nssdb/*,
and some popular mail client files (LP: #698194)
** Branch linked: lp:ubuntu/apparmor
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files profile should include @{HOME}/.config
--
desktop-bugs mai
This bug was fixed in the package apparmor - 2.6~devel+bzr1617-0ubuntu1
---
apparmor (2.6~devel+bzr1617-0ubuntu1) natty; urgency=low
* Merge with upstream bzr revision 1617. Closes the following bugs:
- LP: #692406: temporarily disable the defunct repository until an
alter
** Changed in: apparmor (Ubuntu Maverick)
Milestone: None => maverick-updates
** Changed in: apparmor (Ubuntu Lucid)
Milestone: None => lucid-updates
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.
https://bu
** Changed in: apparmor (Ubuntu Natty)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files profile should
** Changed in: apparmor (Ubuntu Natty)
Status: Triaged => In Progress
** Changed in: apparmor (Ubuntu Maverick)
Importance: High => Medium
** Changed in: apparmor (Ubuntu Lucid)
Importance: High => Medium
** Changed in: apparmor (Ubuntu Natty)
Importance: High => Medium
--
You
That's way more thorough than my suggestion. Thanks for looking into
this!
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.
https://bugs.launchpad.net/bugs/698194
Title:
apparmor private-files profile should include
This should be added to private-files-strict as well:
audit deny @{HOME}/.kde/share/apps/kwallet/** mrwkl,
audit deny @{HOME}/.kde/share/apps/kmail/** mrwkl,
And this to evince abstraction:
audit deny @{HOME}/.kde/share/apps/kwallet/** mrwkl,
audit deny @{HOME}/.kde/share/apps/kmail/** mrwkl,
Thank you for reporting a bug and helping to make Ubuntu better.
We can't disable all of ~/.config because of the way that 'deny' works
in AppArmor (once you explicitly add a deny rule, you can't override it
later). However, I think it is appropriate to:
Add this to private-files:
audit deny @{H
36 matches
Mail list logo