** Branch linked: lp:ubuntu/vivid-proposed/ubuntuone-credentials
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
https://bugs.launchpad.net/bugs/1376445
Title:
Addition of
** Branch linked: lp:~mardy/ubuntuone-credentials/lp1376445-migration-
vivid
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
https://bugs.launchpad.net/bugs/1376445
Title:
** Changed in: pay-ui
Importance: Critical = Undecided
** Changed in: pay-ui
Status: Triaged = Invalid
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
** Changed in: canonical-devices-system-image
Status: In Progress = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
** Changed in: canonical-devices-system-image
Milestone: ww07-2015 = ww09-2015
** Changed in: canonical-devices-system-image
Assignee: (unassigned) = David Barth (dbarth)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed
** Changed in: ubuntu-system-settings-online-accounts (Ubuntu)
Status: In Progress = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
This bug was fixed in the package ubuntuone-credentials -
14.04+15.04.20150122~rtm
---
ubuntuone-credentials (14.04+15.04.20150122~rtm) 14.09; urgency=low
[ Ubuntu daily release ]
* New rebuild forced
[ Rodney Dawes ]
* Handle keyringError from the keyring, by deleting
** Changed in: canonical-devices-system-image
Status: Confirmed = In Progress
** Changed in: canonical-devices-system-image
Milestone: ww05-2015 = ww07-2015
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to
** Also affects: pay-ui
Importance: Undecided
Status: New
** Changed in: pay-ui
Importance: Undecided = Critical
** Changed in: pay-ui
Status: New = Triaged
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed
** Branch unlinked: lp:~online-accounts/ubuntu-system-settings-online-
accounts/master
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
https://bugs.launchpad.net/bugs/1376445
** Branch linked: lp:~dobey/ubuntuone-credentials/acl-unconfined-rtm
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
https://bugs.launchpad.net/bugs/1376445
Title:
This bug was fixed in the package ubuntuone-credentials -
14.04+15.04.20150120
---
ubuntuone-credentials (14.04+15.04.20150120) vivid; urgency=low
[ Rodney Dawes ]
* Set the default ACL as [unconfined] for the account. (LP:
#1376445)
* Handle keyringError from the keyring,
** Branch linked: lp:~mardy/ubuntuone-credentials/lp1376445-migration
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
https://bugs.launchpad.net/bugs/1376445
Title:
** Branch linked: lp:~dobey/ubuntuone-credentials/acl-unconfined
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
https://bugs.launchpad.net/bugs/1376445
Title:
Addition of
** Changed in: ubuntuone-credentials (Ubuntu)
Status: Confirmed = In Progress
** Changed in: ubuntuone-credentials (Ubuntu)
Assignee: (unassigned) = Rodney Dawes (dobey)
** Changed in: ubuntuone-credentials (Ubuntu RTM)
Assignee: (unassigned) = Rodney Dawes (dobey)
--
You
I think we need to push this back, as there seems to be a bigger problem
here in vivid, than we thought. Even on a newly flashed vivid image,
with a newly created u1 account, I am seeing the permissions denied
error message with the signon-apparmor-extension installed. I'll have to
talk to Alberto
** Changed in: canonical-devices-system-image
Milestone: ww03-2015 = ww05-2015
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
https://bugs.launchpad.net/bugs/1376445
** Changed in: canonical-devices-system-image
Milestone: ww51-2014 = ww03-2015
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
https://bugs.launchpad.net/bugs/1376445
** Changed in: ubuntu-system-settings-online-accounts
Status: In Progress = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
We really need the U1 plugin to add unconfined to the ACL of all newly
created accounts.
We recently landed some changes in signond which mitigate this problem, but
they only solve the issue for accounts which are created after this fix landed.
I guess I could add a session migration script to
Confirming as this security issue was agreed to be fixed in first update
** Changed in: canonical-devices-system-image
Importance: Undecided = High
** Changed in: canonical-devices-system-image
Status: New = Confirmed
** Changed in: canonical-devices-system-image
Milestone: None =
** Also affects: canonical-devices-system-image
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
** Also affects: ubuntu-system-settings-online-accounts (Ubuntu RTM)
Importance: Undecided
Status: New
** Changed in: ubuntu-system-settings-online-accounts (Ubuntu RTM)
Assignee: (unassigned) = Alberto Mardegan (mardy)
--
You received this bug notification because you are a
Since this bug is blocking the landing of signon-apparmor-extension, and
the lack of signon-apparmor-extension is a security issue for devices,
marking the bug as Public Security.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed
FYI, the fix for bug 1392380 should accompany when signon-apparmor-
extension hits rtm. Both bugs are currently identically tagged. This
must not slip past OTA-1 otherwise there is a gaping security hole for
shipping devices.
** Information type changed from Public to Public Security
--
You
** Branch linked: lp:~online-accounts/ubuntu-system-settings-online-
accounts/master
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
https://bugs.launchpad.net/bugs/1376445
Since the go-onlineaccounts bug task was added, I guess we are also
tracking the problems with scopes here too.
In my investigations last week, I came to the conclusion that the
problems were not limited to the Go scopes, but instead affected all
scopes running under confinement.
After digging
** Also affects: ubuntu-system-settings-online-accounts (Ubuntu)
Importance: Undecided
Status: New
** Changed in: ubuntu-system-settings-online-accounts (Ubuntu)
Status: New = In Progress
** Changed in: ubuntu-system-settings-online-accounts (Ubuntu)
Assignee: (unassigned)
** Branch linked: lp:~mardy/ubuntu-system-settings-online-
accounts/lp1376445
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
https://bugs.launchpad.net/bugs/1376445
Title:
** Also affects: go-onlineaccounts
Importance: Undecided
Status: New
** Changed in: signon-apparmor-extension (Ubuntu RTM)
Status: Fix Released = Triaged
** Changed in: signon-apparmor-extension (Ubuntu RTM)
Importance: Undecided = High
** Changed in: go-onlineaccounts
** Tags removed: touch-2014-10-09
** Tags added: touch-2014-10-30
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntuone-credentials in
Ubuntu.
https://bugs.launchpad.net/bugs/1376445
Title:
Addition of
** Changed in: ubuntuone-credentials (Ubuntu)
Importance: Critical = High
** Changed in: ubuntuone-credentials (Ubuntu RTM)
Importance: Critical = High
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to
That was probably my mistake, I misunderstood the scope of the bug and
told Pat it could be closed. I'm reopening it for ubuntuone-credentials,
and lowering the proprity to high.
** Changed in: ubuntuone-credentials (Ubuntu)
Status: Invalid = Confirmed
** Changed in: ubuntuone-credentials
Well, I actually cannot lower the priority.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntuone-credentials in
Ubuntu.
https://bugs.launchpad.net/bugs/1376445
Title:
Addition of signon-apparmor-extension causes token
** Changed in: ubuntuone-credentials (Ubuntu)
Status: Triaged = Invalid
** Changed in: ubuntuone-credentials (Ubuntu RTM)
Status: Triaged = Invalid
** Changed in: savilerow
Status: New = Invalid
--
You received this bug notification because you are a member of Ubuntu
Touch
Pat, why did you mark this as Invalid in ubuntuone-credentials? The
temporary fix in signon-apparmor-extension and temporary removal of that
from the image might have lowered the priority of this bug, but I think
we still need to make adjustments in ubuntuone-credentials to deal with
the ACL
** Changed in: signon-apparmor-extension
Status: In Progress = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntuone-credentials in
Ubuntu.
https://bugs.launchpad.net/bugs/1376445
Title:
Addition of
** Branch linked: lp:ubuntu/utopic-proposed/signon-apparmor-extension
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntuone-credentials in
Ubuntu.
https://bugs.launchpad.net/bugs/1376445
Title:
Addition of
This bug was fixed in the package signon-apparmor-extension -
0.1+14.10.20141002-0ubuntu1
---
signon-apparmor-extension (0.1+14.10.20141002-0ubuntu1) 14.09; urgency=low
[ CI bot ]
* Resync trunk
[ Alberto Mardegan ]
* Let the unconfined profile access any resource (LP:
The problem here is with the U1 account plugin, which doesn't add unconfined
to the initial list of ACL.
After a quick look at the source code, I believe that the code which needs to
be changed is here:
@mardy
I'm also seeing this in other account plugins (namely fitbit and flickr). Is
there any way to add unconfined to the ACL there?
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntuone-credentials in
Ubuntu.
@cwayne18: all plugins based on our OAuth code already add unconfined
to the ACL. So the problem is probably different, in that case.
As @jdstrand suggested in the ML, your scopes are not running under the
unconfined profile (even though they are practically unconfined), so
we need to figure out
** Branch linked: lp:~mardy/signon-apparmor-extension/lp1376445
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntuone-credentials in
Ubuntu.
https://bugs.launchpad.net/bugs/1376445
Title:
Addition of
Yes, the plug-in will be fixed (that's why I filed the bug here), but
according to what Chris is stating, I'm not sure that will be enough to
resolve the issue even for people who create new accounts; given the
problem is happening with OAuth-based plug-ins that have unconfined in
the ACL already.
This is affecting some of our custom scopes that use online accounts as
well.
** Also affects: savilerow
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntuone-credentials in
45 matches
Mail list logo
