This bug was fixed in the package libaccounts-glib -
1.14+13.10.20131016.2-0ubuntu1
---------------
libaccounts-glib (1.14+13.10.20131016.2-0ubuntu1) saucy; urgency=low
[ Alberto Mardegan ]
* New upstream release (1.14)
- Add ag_provider_get_single_account
Fixes: http://code.google.com/p/accounts-sso/issues/detail?id=202
- Add coverage reporting using lcov
- Tests: increase test coverage
- Tests: increase tolerance on blocking time
* New upstream release (1.13)
- Allow disabling WAL journaling mode at configuration time; this is
needed in order to support accessing the DB in read-only mode
(LP: #1232097)
- Tests: make test_signals_other_manager() more stable
Fixes: http://code.google.com/p/accounts-sso/issues/detail?id=200
* debian/rules
- removed quilt usage
* debian/patches/0001-Tests-allow-some-time-for-D-Bus-signals-to-arrive.patch
- removed, merged upstream
[ Ubuntu daily release ]
* Automatic snapshot from revision 178
-- Ubuntu daily release <[email protected]> Wed, 16 Oct 2013
14:15:26 +0000
** Changed in: libaccounts-glib (Ubuntu Saucy)
Status: In Progress => Fix Released
** Bug watch added: Accounts&SSO issues #202
http://code.google.com/p/accounts-sso/issues/detail?id=202
** Bug watch added: Accounts&SSO issues #200
http://code.google.com/p/accounts-sso/issues/detail?id=200
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to libaccounts-glib in Ubuntu.
https://bugs.launchpad.net/bugs/1232097
Title:
accounts-qml-module requires read/write access to accounts.db
Status in “libaccounts-glib” package in Ubuntu:
Fix Released
Status in “libaccounts-glib” source package in Saucy:
Fix Released
Bug description:
Applications using the accounts apparmor policy groups do not work correctly
under application confinement because they are trying to open the accounts.db
database as read/write. Currently we are silencing writes to accounts.db with
this rule:
# FIXME: LP: #1220713 - online accounts currently tries rw and falls back to
# ro. This can go away once an access() LSM hook is implemented. For
# now, just silence the denial.
deny @{HOME}/.config/libaccounts-glib/accounts.db* w,
If you comment out the deny rule, then you can see these apparmor denials:
Sep 27 10:48:33 localhost kernel: [70254.114785] type=1400
audit(1380296913.224:603): apparmor="DENIED" operation="open" parent=3180
profile="net.launchpad.ubuntu-security.ubuntu-sdk-1310-api-demos_ubuntu-sdk-1310-api-demos_0.5"
name="/home/jamie/.config/libaccounts-glib/accounts.db" pid=12076
comm="qmlscene" requested_mask="w" denied_mask="w" fsuid=1000 ouid=1000
Sep 27 10:48:33 localhost kernel: [70254.115243] type=1400
audit(1380296913.224:604): apparmor="DENIED" operation="open" parent=3180
profile="net.launchpad.ubuntu-security.ubuntu-sdk-1310-api-demos_ubuntu-sdk-1310-api-demos_0.5"
name="/home/jamie/.config/libaccounts-glib/accounts.db-wal" pid=12076
comm="qmlscene" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
Sep 27 10:48:33 localhost kernel: [70254.115298] type=1400
audit(1380296913.224:605): apparmor="DENIED" operation="open" parent=3180
profile="net.launchpad.ubuntu-security.ubuntu-sdk-1310-api-demos_ubuntu-sdk-1310-api-demos_0.5"
name="/home/jamie/.config/libaccounts-glib/accounts.db-shm" pid=12076
comm="qmlscene" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
The accounts policy group cannot be used at this time as a result of
this bug.
This is related to bug #1220552 and the solution for friends should be
the same as it was in libaccounts-glib-- try to open the accounts.db
as rw, then fallback to ro (perhaps the QML module doesn't need to
update the accounts.db at all-- in which case just open it as ro in
the first place).
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libaccounts-glib/+bug/1232097/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
