[Desktop-packages] [Bug 1299641] Re: the computer is not updated requests root password

2014-03-31 Thread Jamie Strandboge
Thanks for your comments. This does not appear to be a bug report and we are closing it. We appreciate the difficulties you are facing, but it would make more sense to raise your question in the support tracker. Please visit https://answers.launchpad.net/ubuntu/+addquestion ** Information type cha

[Desktop-packages] [Bug 1299669] Re: package libjpeg-turbo8 1.3.0-0ubuntu1.1 [modified: usr/share/doc/libjpeg-turbo8/changelog.Debian.gz] failed to install/upgrade: a tentar sobreescrever '/usr/share/

2014-03-31 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to libjpeg-turbo in Ubuntu. https://bugs.launchpad.net/bugs/1299669 Title: package libjpeg-turbo8 1.3.0-0ubuntu1.1 [modified: usr/

[Desktop-packages] [Bug 1298446] Re: Xorg crashed with SIGABRT

2014-03-31 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to fglrx-installer in Ubuntu. https://bugs.launchpad.net/bugs/1298446 Title: Xorg crashed with SIGABRT Status in “fglrx-installer

[Desktop-packages] [Bug 1299348] Re: fglrx (not installed): fglrx kernel module failed to build

2014-03-31 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to fglrx-installer in Ubuntu. https://bugs.launchpad.net/bugs/1299348 Title: fglrx (not installed): fglrx kernel module failed to

[Desktop-packages] [Bug 1296415] Re: [security] setting "dangerous" properties such as [service].Modem 'Powered' and 'Online' should be restricted.

2014-05-29 Thread Jamie Strandboge
** Changed in: indicator-network (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) ** Changed in: network-manager (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) ** Changed in: powerd (Ubuntu) Assignee: (unassigned) => Jamie Strandboge

[Desktop-packages] [Bug 1296415] Re: [security] please use apparmor to restrict access to ofono to approved services

2014-06-03 Thread Jamie Strandboge
Looks like rild will also need a profile. Furthermore, we need to create the symlinks in /etc/apparmor/init/network-interface-security to make sure these things are coming up confined. ** Changed in: ubuntu-system-settings (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstr

[Desktop-packages] [Bug 1296415] Re: [security] please use apparmor to restrict access to ofono to approved services

2014-06-04 Thread Jamie Strandboge
I think I was wrong about rild and was hitting another issue. I seem to have this all working locally by creating profiles for: usr.bin.nuntium usr.bin.powerd usr.bin.system-settings usr.lib.indicator-network-service usr.lib.urfkilld usr.sbin.NetworkManager usr.sbin.ofonod then adju

[Desktop-packages] [Bug 1016103] Re: changes to toolbar don't persist under GNOME3 with non standard userdirs (due to apparmor restrictions)

2014-06-06 Thread Jamie Strandboge
This bug has morphed into something else. It started as needing to set tunables but is now that we need: owner @{HOME}/.config/evince/* rwl, This access is totally reasonable and I'll add it now. -- You received this bug notification because you are a member of Desktop Packages, which is subsc

[Desktop-packages] [Bug 1325048] Re: Default Profile usr.bin.firefox requires additional rules for Xubuntu 14.04

2014-06-06 Thread Jamie Strandboge
mitted ** Changed in: firefox (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1325048 Title: Default Profile usr.bi

[Desktop-packages] [Bug 1320394] Re: apparmor denies open /etc/dconf/profile/gdm

2014-06-09 Thread Jamie Strandboge
Note, this bug is related to bug #1190865 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to telepathy-mission-control-5 in Ubuntu. https://bugs.launchpad.net/bugs/1320394 Title: apparmor denies open /etc/dconf/profile/gdm Status in “tel

[Desktop-packages] [Bug 1320394] Re: apparmor denies open /etc/dconf/profile/gdm

2014-06-09 Thread Jamie Strandboge
If you add the following to /etc/apparmor.d/usr.lib.telepathy: /var/lib/gdm/.config/libaccounts-glib/accounts.db rwk, /etc/dconf/profile/gdm r, Then run: $ sudo apparmor_parser -r /etc/apparmor.d/usr.lib.telepathy do the denials go away? ** Changed in: telepathy-mission-control-5 (Ubuntu)

[Desktop-packages] [Bug 1296415] Re: [security] please use apparmor to restrict access to ofono to approved services

2014-06-12 Thread Jamie Strandboge
So, I have things working locally, but there is a problem in that a race condition is being hit (LP: #1305108) where telepathy-ofono is launching before their profile is loaded, which breaks the dialer (since the process is running under the 'unconfined' label which isn't allowed to talk to ofono).

[Desktop-packages] [Bug 1224756] Re: Pulseaudio should integrate with trust-store

2014-06-13 Thread Jamie Strandboge
** Also affects: pulseaudio (Ubuntu Utopic) Importance: High Status: Invalid ** Changed in: pulseaudio (Ubuntu Trusty) Status: Confirmed => Won't Fix ** Changed in: pulseaudio (Ubuntu Utopic) Status: Invalid => Triaged -- You received this bug notification because you ar

[Desktop-packages] [Bug 1224756] Re: Pulseaudio should integrate with trust-store

2014-06-13 Thread Jamie Strandboge
I think implementing a limited client is a good midterm goal, but not something for rtm. For rtm I think the most important workflow is achieving mpt's point '1' in comment #14. Ie: * app tries to record audio * at that point, pulseaudio uses lp:trust-store to see if the user said this app can

[Desktop-packages] [Bug 1224756] Re: Pulseaudio should integrate with trust-store

2014-06-13 Thread Jamie Strandboge
There is one other adjustment for pulseaudio that came up today. If an app is able to handle a file name to pulseaudio (ie, the app process doesn't have to open it first but instead tells pulseaudio to open and play a file), then pulseaudio should also have apparmor integration for playback in addi

[Desktop-packages] [Bug 1224756] Re: Pulseaudio should integrate with trust-store

2014-06-13 Thread Jamie Strandboge
Something that occurred to me-- for devices that ship LEDs, maybe pulseaudio could turn on the 'record' LED (ie, the red one) when performing audio recording? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to pulseaudio in Ubuntu. https://b

[Desktop-packages] [Bug 1288260] Re: firefox apparmor updates for trusty

2014-03-17 Thread Jamie Strandboge
Sorry, to be clear, the fix was only partially applied to the beta branch. The udev rules are present, but the uevent rule is missing. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1288

[Desktop-packages] [Bug 1288260] Re: firefox apparmor updates for trusty

2014-03-17 Thread Jamie Strandboge
This actually was not fixed in the latest upload to trusty. ** Changed in: firefox (Ubuntu) Status: Fix Released => In Progress -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/128

[Desktop-packages] [Bug 1288260] Re: firefox apparmor updates for trusty

2014-03-17 Thread Jamie Strandboge
This will be fixed in the next upload. ** Changed in: firefox (Ubuntu) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1288260 Title: firef

[Desktop-packages] [Bug 1290535] Re: [FFE] Webapps support for the new Oxide container

2014-03-17 Thread Jamie Strandboge
MIR request for Oxide gives some background: bug #1293681. Essentially, Oxide "is the Chromium Content API wrapped with bindings for Ubuntu. The Chromium Content API contains Blink, V8, etc and is subject to main new security vulnerabilities. The Oxide bindings are written in such a way that we are

[Desktop-packages] [Bug 1230091] Re: [feature] Window reparenting (required for appstore app trust model)

2013-09-30 Thread Jamie Strandboge
Adding an apparmor-easyprof-ubuntu task since because of this bug, the accounts policy group is reserved and not available to untrusted appstore apps. When mir and online accounts are fixed, we can move the accounts policy group back to 'common'. -- You received this bug notification because you

[Desktop-packages] [Bug 1230091] Re: [feature] Window reparenting (required for appstore app trust model)

2013-09-30 Thread Jamie Strandboge
Adding a signon task since it will need to be adjusted to use this Mir feature. ** Also affects: signon (Ubuntu) Importance: Undecided Status: New ** Changed in: signon (Ubuntu Saucy) Importance: Undecided => High ** Also affects: apparmor-easyprof-ubuntu (Ubuntu) Importance: Und

[Desktop-packages] [Bug 1230091] Re: [feature] Window reparenting (required for appstore app trust model)

2013-09-30 Thread Jamie Strandboge
** Also affects: signon (Ubuntu T-series) Importance: Undecided Status: New ** Also affects: apparmor-easyprof-ubuntu (Ubuntu T-series) Importance: Undecided Status: New ** Also affects: unity-mir (Ubuntu T-series) Importance: Undecided Status: New -- You received

[Desktop-packages] [Bug 1211380] Re: pulseaudio socket needs confined app restrictions

2013-09-30 Thread Jamie Strandboge
** Also affects: pulseaudio (Ubuntu T-series) Importance: Undecided Status: New ** Also affects: apparmor-easyprof-ubuntu (Ubuntu T-series) Importance: Undecided Status: New ** Changed in: pulseaudio (Ubuntu Saucy) Importance: Critical => Undecided ** Changed in: pulseaudi

[Desktop-packages] [Bug 1235216] [NEW] evince dbus policy denies access to avahi and colord when printing

2013-10-04 Thread Jamie Strandboge
Public bug reported: The following policy (or similar) should be added to evince: /{,var/}run/dbus/system_bus_socket rw, dbus (send) bus=system path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=Hello peer=(name=org.freedesktop.DBus), dbus (send

[Desktop-packages] [Bug 1208988] Re: AppArmor no longer mediates access to path-based AF_UNIX socket files

2013-10-04 Thread Jamie Strandboge
** Also affects: evince (Ubuntu) Importance: Undecided Status: New ** Also affects: firefox (Ubuntu) Importance: Undecided Status: New ** No longer affects: evince (Ubuntu) ** No longer affects: evince (Ubuntu Saucy) ** Changed in: firefox (Ubuntu Saucy) Status: New =

[Desktop-packages] [Bug 1208988] Re: AppArmor no longer mediates access to path-based AF_UNIX socket files

2013-10-04 Thread Jamie Strandboge
** Tags added: application-confinement -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1208988 Title: AppArmor no longer mediates access to path-based AF_UNIX socket files Status in A

[Desktop-packages] [Bug 1208988] Re: AppArmor no longer mediates access to path-based AF_UNIX socket files

2013-10-04 Thread Jamie Strandboge
** Patch added: "apparmor_2.8.0-0ubuntu30.debdiff" https://bugs.launchpad.net/apparmor/+bug/1208988/+attachment/3860023/+files/apparmor_2.8.0-0ubuntu30.debdiff -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https:/

[Desktop-packages] [Bug 1208988] Re: AppArmor no longer mediates access to path-based AF_UNIX socket files

2013-10-08 Thread Jamie Strandboge
apparmor-easyprof-ubuntu needs to allow /dev/socket/property_service and use attach_disconnected on touch images. ** Changed in: apparmor-easyprof-ubuntu (Ubuntu Saucy) Status: Fix Released => In Progress -- You received this bug notification because you are a member of Desktop Packages,

[Desktop-packages] [Bug 1208988] Re: AppArmor no longer mediates access to path-based AF_UNIX socket files

2013-10-08 Thread Jamie Strandboge
** Changed in: apparmor (Ubuntu Saucy) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1208988 Title: AppArmor no longer mediates access to

[Desktop-packages] [Bug 766512] Re: Apparmor prevents the use of mozplugger

2013-10-09 Thread Jamie Strandboge
** Changed in: firefox (Ubuntu) Assignee: Micah Gersten (micahg) => (unassigned) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/766512 Title: Apparmor prevents the use of mozplug

[Desktop-packages] [Bug 455792] Re: deluge doesn't open .torrent files from firefox while apparmor is on

2013-10-09 Thread Jamie Strandboge
** Changed in: firefox (Ubuntu Karmic) Status: In Progress => Won't Fix -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/455792 Title: deluge doesn't open .torrent files from fir

[Desktop-packages] [Bug 1060213] Re: firefox freezes each time loading flash plugin-container

2013-10-09 Thread Jamie Strandboge
/usr/lib/xulrunner-*/plugin-container ixr, is allowed in the firefox profile for a long time. ** No longer affects: apparmor-profiles ** No longer affects: adobe-flashplugin (Ubuntu) ** Changed in: firefox (Ubuntu) Status: Incomplete => Fix Released -- You received this bug notification

[Desktop-packages] [Bug 1244157] Re: [3.11.0-12.18 regression] "Failed name lookup - disconnected path" in dhclient D-BUS access

2013-10-24 Thread Jamie Strandboge
For adding the attach_disconnected flag, unfortunately there isn't a convenient way to apply attach_disconnected without modifying the profile directly. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bu

[Desktop-packages] [Bug 1223436] Re: telepathy-gabble 0.18 does not work with jabberd2

2013-10-24 Thread Jamie Strandboge
** Attachment added: "gabble (jabber)-24-10-13_16-25-10.log" https://bugs.launchpad.net/ubuntu/+source/telepathy-gabble/+bug/1223436/+attachment/3890335/+files/gabble%20%28jabber%29-24-10-13_16-25-10.log ** Changed in: telepathy-gabble (Ubuntu) Status: Incomplete => New -- You receive

[Desktop-packages] [Bug 1223436] Re: telepathy-gabble 0.18 does not work with jabberd2

2013-10-24 Thread Jamie Strandboge
Attached is the log for 0.16. What I find interesting is that 0.18 is logging twice. Eg: gabbleauthentication-DEBUG: 10/21/2013 16:13:21.904870: gabble_server_sasl_channel_start_auth_async (server-sasl-channel.c:836): Starting authentication gabbleauthentication-DEBUG: 10/21/2013 16:13:21.904870

[Desktop-packages] [Bug 1246302] Re: Port back security fixes

2013-10-30 Thread Jamie Strandboge
** Changed in: chromium-browser (Ubuntu) Assignee: (unassigned) => Chad Miller (cmiller) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1246302 Title: Port back security

[Desktop-packages] [Bug 1090008] Re: Apparmor denies telepathy to load libraries due to wrong profile

2013-06-10 Thread Jamie Strandboge
ntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to telepathy-mission-control-5 in Ubuntu. https://bugs.launchpad.net/bugs/1090008 Title: Apparmor denies telepathy to load libraries

[Desktop-packages] [Bug 1189948] [NEW] /etc/apparmor.d/abstractions/lightdm* have wrong permissions

2013-06-11 Thread Jamie Strandboge
Public bug reported: $ ls -l /etc/apparmor.d/abstractions/lightdm* -rwxr-xr-x 1 root root 1909 Mar 26 21:32 /etc/apparmor.d/abstractions/lightdm -rwxr-xr-x 1 root root 1495 Oct 1 2012 /etc/apparmor.d/abstractions/lightdm_chromium-browser These should be 0644. ** Affects: lightdm (Ubuntu)

[Desktop-packages] [Bug 577919] Re: chromium-browser fails to start (guest account, OpenVZ): "Failed to move to new PID namespace: Operation not permitted"

2013-06-11 Thread Jamie Strandboge
** Also affects: lightdm-remote-session-uccsconfigure (Ubuntu Precise) Importance: Undecided Status: New ** Changed in: lightdm (Ubuntu Precise) Status: New => In Progress ** Changed in: lightdm (Ubuntu Precise) Assignee: (unassigned) => Jamie Strandboge (jdstrand) ** Chan

[Desktop-packages] [Bug 1189948] Re: /etc/apparmor.d/abstractions/lightdm* have wrong permissions

2013-06-11 Thread Jamie Strandboge
** Changed in: lightdm (Ubuntu) Importance: Undecided => Low ** Changed in: lightdm (Ubuntu) Status: New => In Progress ** Changed in: lightdm (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member o

[Desktop-packages] [Bug 1189948] Re: /etc/apparmor.d/abstractions/lightdm* have wrong permissions

2013-06-11 Thread Jamie Strandboge
** Also affects: lightdm Importance: Undecided Status: New -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1189948 Title: /etc/apparmor.d/abstractions/lightdm* have wrong per

[Desktop-packages] [Bug 577919] Re: chromium-browser fails to start (guest account, OpenVZ): "Failed to move to new PID namespace: Operation not permitted"

2013-06-11 Thread Jamie Strandboge
** Description changed: Binary package hint: chromium-browser [Impact] Chromium-browser does not launch from guest session. Fix by Jamie Strandboge: "It would be nice if AppArmor could merge profiles, but we can't yet, so we need to do like you initially did: have

[Desktop-packages] [Bug 577919] Re: chromium-browser fails to start (guest account, OpenVZ): "Failed to move to new PID namespace: Operation not permitted"

2013-06-11 Thread Jamie Strandboge
hint: chromium-browser [Impact] Chromium-browser does not launch from guest session. Fix by Jamie Strandboge: "It would be nice if AppArmor could merge profiles, but we can't yet, so we need to do like you initially did: have two mostly identical profiles. Because the lightdm rem

[Desktop-packages] [Bug 1189948] Re: /etc/apparmor.d/abstractions/lightdm* have wrong permissions

2013-06-11 Thread Jamie Strandboge
Uploaded to saucy and proposed a merge with trunk. ** Changed in: lightdm (Ubuntu) Status: In Progress => Fix Committed ** Branch linked: lp:~jdstrand/lightdm/lightdm-1189948 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightd

[Desktop-packages] [Bug 1190865] Re: apparmor denies the creation of directory

2013-06-14 Thread Jamie Strandboge
hemas installed in /usr/local? ** Changed in: telepathy-mission-control-5 (Ubuntu) Status: New => Incomplete ** Changed in: telepathy-mission-control-5 (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member

[Desktop-packages] [Bug 1279786] [NEW] implement ACL checks for com.nokia.singlesignonui.cookiesForIdentity

2014-02-13 Thread Jamie Strandboge
Public bug reported: This request is a hardening measure now that we allow com.nokia.singlesignonui.cookiesForIdentity to provide defense in depth and help protect against attacks against webapp-container and/or the Unity APIs exposed to webapps. ** Affects: signon-ui Importance: High

[Desktop-packages] [Bug 1022962] Re: LXDE, apparmor: "Show Containing Folder" button failed to execute err

2014-02-26 Thread Jamie Strandboge
** Changed in: evince (Ubuntu) Status: Confirmed => In Progress ** Changed in: evince (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to evince in Ubuntu.

[Desktop-packages] [Bug 1267880] Re: cups-daemon upgrade generates warnings about "rules not enforced"

2014-01-14 Thread Jamie Strandboge
This appears to be a result of booting a non-Ubuntu kernel without the AppArmor compat patches. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1267880 Title: cups-daemon upgrade generate

[Desktop-packages] [Bug 1270189] [NEW] Ubuntu Touch devices are using cellular DNS servers over wifi connection

2014-01-17 Thread Jamie Strandboge
Public bug reported: On my Nexus 4, build 121 with TMobile, when I am on wifi, I correctly get a 192.168 ip and DNS entries for this network (on wlan0) -- fine. When I am in range of cellular data, I get an ip address from TMobile and am given DNS entries that aren't on the same network as the

[Desktop-packages] [Bug 1270189] Re: Ubuntu Touch devices are using cellular DNS servers over wifi connection

2014-01-17 Thread Jamie Strandboge
** Description changed: - On my Nexus 4, build 121 with TMobile, when I am on wifi, I correctly get a 192.168 ip and DNS entries for this network (on wlan0) -- fine. When I am in range of cellular data, I get an ip address from TMobile and am given DNS entries that aren't on the same network as

[Desktop-packages] [Bug 1231778] Re: wifi not working on Saucy Salamander

2013-11-05 Thread Jamie Strandboge
** Also affects: network-manager (Ubuntu Saucy) Importance: Undecided Status: New ** Also affects: apparmor (Ubuntu Saucy) Importance: Undecided Status: New ** Also affects: network-manager (Ubuntu Trusty) Importance: Medium Status: Invalid ** Also affects: apparmor

[Desktop-packages] [Bug 1231778] Re: wifi not working on Saucy Salamander

2013-11-07 Thread Jamie Strandboge
Uploaded 2.8.0-0ubuntu31.1. Tyler, can you make sure you follow any of the other steps in https://wiki.ubuntu.com/StableReleaseUpdates so it shows up on the SRU team's radar? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager

[Desktop-packages] [Bug 1231778] Re: wifi not working on Saucy Salamander

2013-11-07 Thread Jamie Strandboge
apparmor 2.8.0-0ubuntu34 is awaiting landing team approval. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1231778 Title: wifi not working on Saucy Salamander Status in Enabl

[Desktop-packages] [Bug 1231778] Re: wifi not working on Saucy Salamander

2013-11-08 Thread Jamie Strandboge
apparmor 2.8.0-0ubuntu34 uploaded to trusty. ** Changed in: apparmor (Ubuntu Trusty) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1

[Desktop-packages] [Bug 211631]

2013-11-12 Thread Jamie Strandboge
Thank you for reporting this bug to Ubuntu. natty has reached EOL (End of Life) for this package and is no longer supported. As a result, this bug against natty is being marked "Won't Fix". Please see https://wiki.ubuntu.com/Releases for currently supported Ubuntu releases. Please feel free to rep

[Desktop-packages] [Bug 206583]

2013-11-12 Thread Jamie Strandboge
Thank you for reporting this bug to Ubuntu. hardy has reached EOL (End of Life) for this package and is no longer supported. As a result, this bug against hardy is being marked "Won't Fix". Please see https://wiki.ubuntu.com/Releases for currently supported Ubuntu releases. Please feel free to rep

[Desktop-packages] [Bug 798484]

2013-11-12 Thread Jamie Strandboge
Thank you for reporting this bug to Ubuntu. natty has reached EOL (End of Life) for this package and is no longer supported. As a result, this bug against natty is being marked "Won't Fix". Please see https://wiki.ubuntu.com/Releases for currently supported Ubuntu releases. Please feel free to rep

[Desktop-packages] [Bug 798484] Re: Tracking bug for Firefox 5 transition in Natty

2013-11-12 Thread Jamie Strandboge
** Changed in: moon (Ubuntu Natty) Status: Fix Committed => Won't Fix -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/798484 Title: Tracking bug for Firefox 5 transition in Natt

[Desktop-packages] [Bug 1197921] Re: LibreOffice spreadsheet causes full Xorg crash with Anti-Aliasing enabled

2013-12-03 Thread Jamie Strandboge
Ritesh, thanks for your patches! A couple of notes: - these are security patches, so you should use -security instead of -proposed - I'm not sure if launchpad would autoclose a bug with 'lp: #1197921' in the changelog, but that is non-conventional. You should use 'LP: #1197921' instead - there is

[Desktop-packages] [Bug 1197921] Re: LibreOffice spreadsheet causes full Xorg crash with Anti-Aliasing enabled

2013-12-03 Thread Jamie Strandboge
Ritesh: one more thing, you add a quilt patch but the series file was not updated. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to xorg-server in Ubuntu. https://bugs.launchpad.net/bugs/1197921 Title: LibreOffice spreadsheet causes ful

[Desktop-packages] [Bug 1197921] Re: LibreOffice spreadsheet causes full Xorg crash with Anti-Aliasing enabled

2013-12-03 Thread Jamie Strandboge
CVE request: http://www.openwall.com/lists/oss-security/2013/12/03/8 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to xorg-server in Ubuntu. https://bugs.launchpad.net/bugs/1197921 Title: LibreOffice spreadsheet causes full Xorg crash w

[Desktop-packages] [Bug 1197921] Re: LibreOffice spreadsheet causes full Xorg crash with Anti-Aliasing enabled

2013-12-03 Thread Jamie Strandboge
Ritesh: oops, sorry, you did update the series file correctly (I was comparing it to the Debian update which didn't use the quilt patch system and got confused). -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to xorg-server in Ubuntu. https

[Desktop-packages] [Bug 1197921] Re: LibreOffice spreadsheet causes full Xorg crash with Anti-Aliasing enabled

2013-12-03 Thread Jamie Strandboge
** Changed in: pixman (Ubuntu Precise) Status: New => In Progress ** Changed in: pixman (Ubuntu Precise) Importance: Undecided => Medium ** Changed in: pixman (Ubuntu Precise) Assignee: (unassigned) => Jamie Strandboge (jdstrand) ** Changed in: pixman (Ubunt

[Desktop-packages] [Bug 1197921] Re: LibreOffice spreadsheet causes full Xorg crash with Anti-Aliasing enabled

2013-12-03 Thread Jamie Strandboge
FYI, the freedesktop.org bug is for pixman, not xorg. The xorg-server patch is in patchwork: http://patchwork.freedesktop.org/patch/14769/ but has not received comment from xorg yet. The CVE request CC'd xorg_security, but the message is in moderation. ** Changed in: pixman (Ubuntu Precise) I

[Desktop-packages] [Bug 1197921] Re: LibreOffice spreadsheet causes full Xorg crash with Anti-Aliasing enabled

2013-12-03 Thread Jamie Strandboge
** Changed in: pixman (Ubuntu Precise) Status: In Progress => Fix Committed ** Changed in: pixman (Ubuntu Quantal) Status: In Progress => Fix Committed ** Changed in: pixman (Ubuntu Raring) Status: In Progress => Fix Committed ** Changed in: pixman (Ubuntu Saucy) Stat

[Desktop-packages] [Bug 1197921] Re: LibreOffice spreadsheet causes full Xorg crash with Anti-Aliasing enabled

2013-12-03 Thread Jamie Strandboge
** Changed in: pixman (Ubuntu Precise) Importance: Low => Medium ** Changed in: pixman (Ubuntu Quantal) Importance: Low => Medium ** Changed in: pixman (Ubuntu Raring) Importance: Low => Medium ** Changed in: pixman (Ubuntu Saucy) Importance: Low => Medium -- You received this bug

[Desktop-packages] [Bug 1197921] Re: LibreOffice spreadsheet causes full Xorg crash with Anti-Aliasing enabled

2013-12-03 Thread Jamie Strandboge
** Changed in: pixman (Ubuntu) Importance: Low => Medium -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to xorg-server in Ubuntu. https://bugs.launchpad.net/bugs/1197921 Title: LibreOffice spreadsheet causes full Xorg crash with Anti-

[Desktop-packages] [Bug 1254052] Re: Please demote ruby1.8 to universe

2013-12-04 Thread Jamie Strandboge
Override component to universe ruby1.8 1.8.7.358-8ubuntu2 in trusty: main/interpreters -> universe libruby1.8 1.8.7.358-8ubuntu2 in trusty amd64: main/libs/optional/100% -> universe libruby1.8 1.8.7.358-8ubuntu2 in trusty arm64: main/libs/optional/100% -> universe libruby1.8 1.8.7.358-8ubuntu2 in

[Desktop-packages] [Bug 1254052] Re: Please demote ruby1.8 to universe

2013-12-04 Thread Jamie Strandboge
Override component to universe rubygems 1.8.24-1ubuntu2 in trusty: main/ruby -> universe rubygems 1.8.24-1ubuntu2 in trusty amd64: main/interpreters/optional/100% -> universe rubygems 1.8.24-1ubuntu2 in trusty arm64: main/interpreters/optional/100% -> universe rubygems 1.8.24-1ubuntu2 in trusty a

[Desktop-packages] [Bug 1257816] Re: the apparmor profile should allow access to avatars datas

2013-12-04 Thread Jamie Strandboge
mor.d/usr.lib.telepathy' first. ** Changed in: telepathy-mission-control-5 (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) ** Changed in: telepathy-mission-control-5 (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a m

[Desktop-packages] [Bug 1197921] Re: LibreOffice spreadsheet causes full Xorg crash with Anti-Aliasing enabled

2013-12-05 Thread Jamie Strandboge
>From oss-security: Please use CVE-2013-6424 for the issue in xorg-server Please use CVE-2013-6425 for the issue in pixman. ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2013-6425 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2013-6424 -- You received this

[Desktop-packages] [Bug 1230091] Re: [enhancement] Window reparenting (required for appstore app trust model)

2013-12-12 Thread Jamie Strandboge
** Changed in: signon (Ubuntu Saucy) Status: Confirmed => Won't Fix ** Changed in: signon (Ubuntu Trusty) Importance: Undecided => High ** Changed in: unity-mir (Ubuntu Trusty) Importance: Undecided => High ** Changed in: unity-mir (Ubuntu Saucy) Status: Confirmed => Won't Fi

[Desktop-packages] [Bug 1208988] Re: AppArmor no longer mediates access to path-based AF_UNIX socket files

2013-12-12 Thread Jamie Strandboge
Trusty firefox has the fix as well. ** Changed in: firefox (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1208988 Title: AppArmo

[Desktop-packages] [Bug 1208988] Re: AppArmor no longer mediates access to path-based AF_UNIX socket files

2013-12-12 Thread Jamie Strandboge
This was fixed in at least 25.0.1+build1-0ubuntu0.13.10.1 ** Changed in: firefox (Ubuntu Saucy) Status: Fix Committed => Fix Released ** Changed in: apparmor Status: Triaged => Fix Committed -- You received this bug notification because you are a member of Desktop Packages, which

[Desktop-packages] [Bug 888789] Re: evince doesn't render embedded font

2014-01-06 Thread Jamie Strandboge
Thanks Scott for the feedback. This rule: /usr/local/texlive/2013/texmf-dist/fonts/** r, is not really something we'll add to the shipped profile because it is site specific. However, this rule can be added to /etc/apparmor.d/local/usr.bin.evince, which is intended for site- specific modificatio

[Desktop-packages] [Bug 1211380] Re: pulseaudio socket needs confined app restrictions

2013-09-11 Thread Jamie Strandboge
I just noticed your question. David, there is both a libapparmor API and a DBus API. See man aa_getcon for details. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to pulseaudio in Ubuntu. https://bugs.launchpad.net/bugs/1211380 Title: pu

[Desktop-packages] [Bug 577919] Re: chromium-browser fails to start (guest account, OpenVZ): "Failed to move to new PID namespace: Operation not permitted"

2013-09-11 Thread Jamie Strandboge
romium-browser [Impact] Chromium-browser does not launch from guest session. Fix by Jamie Strandboge: "It would be nice if AppArmor could merge profiles, but we can't yet, so we need to do like you initially did: have two mostly identical profiles. Because the lightdm remote sessi

[Desktop-packages] [Bug 1222248] Re: regression: scroll areas on touchpad do not work any more

2013-09-11 Thread Jamie Strandboge
I can confirm that two finger touch works here instead of edge scrolling. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-control-center in Ubuntu. https://bugs.launchpad.net/bugs/148 Title: regression: scroll areas on touchp

[Desktop-packages] [Bug 1224751] [NEW] pulseaudio should use app-specific directory for shm files

2013-09-12 Thread Jamie Strandboge
Public bug reported: Currently we have apparmor rules for pulseaudio like this: owner /{run,dev}/shm/pulse-shm*rk, deny /{run,dev}/shm/pulse-shm* w, # deny unless we have to have it The rules are this way because the shared memory files are not a

[Desktop-packages] [Bug 1224756] Re: pulseaudio should give a visual indication when it is recording

2013-09-12 Thread Jamie Strandboge
** Description changed: David and the security team (inspired by an observation from Rick) discussed that when recording, pulseaudio should somehow unobtrusively show the user that it is recording. The easiest thing to do would be for pulseaudio to alert indicator-sound which would then tu

[Desktop-packages] [Bug 1224756] Re: pulseaudio should give a visual indication when it is recording

2013-09-12 Thread Jamie Strandboge
Adding an indicator-sound task in case there is work to do there to support this. If the API is there already, please mark 'Invalid'. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to pulseaudio in Ubuntu. https://bugs.launchpad.net/bugs/12

[Desktop-packages] [Bug 1224756] [NEW] pulseaudio should give a visual indication when it is recording

2013-09-12 Thread Jamie Strandboge
Public bug reported: David and the security team (inspired by an observation from Rick) discussed that when recording, pulseaudio should somehow unobtrusively show the user that it is recording. The easiest thing to do would be for pulseaudio to alert indicator-sound which would then turn its icon

[Desktop-packages] [Bug 1224756] Re: pulseaudio should give a visual indication when it is recording

2013-09-13 Thread Jamie Strandboge
** Description changed: David and the security team (inspired by an observation from Rick) discussed that when recording, pulseaudio should somehow unobtrusively show the user that it is recording. The easiest thing to do would be for pulseaudio to alert indicator-sound which would then tu

[Desktop-packages] [Bug 1224756] Re: pulseaudio should give a visual indication when it is recording

2013-09-13 Thread Jamie Strandboge
I think the pulseaudio task is valid-- it will certainly need to alert indicator-sound that it is recording, no? ** Description changed: David and the security team (inspired by an observation from Rick) discussed that when recording, pulseaudio should somehow unobtrusively show the user th

[Desktop-packages] [Bug 1220552] Re: App Armor denies access, despite appropriate security policy groups in manifest

2013-09-16 Thread Jamie Strandboge
Re-opening the apparmor-easyprof-ubuntu task since we need to allow the write access until libaccounts-glib is fixed. ** Changed in: apparmor-easyprof-ubuntu (Ubuntu Saucy) Status: Fix Released => Triaged -- You received this bug notification because you are a member of Desktop Packages,

[Desktop-packages] [Bug 1227295] [NEW] incorrect object path 'deskop' used in gio/gdbusobjectmanagerclient.c

2013-09-18 Thread Jamie Strandboge
Public bug reported: In profiling applications, I received the following DBus denial: Sep 18 10:31:17 localhost dbus[16510]: apparmor="DENIED" operation="dbus_method_call" bus="session" name="org.freedesktop.DBus" path="/org/freedeskop/DBus" interface="org.freedesktop.DBus" member="AddMatch" m

[Desktop-packages] [Bug 1220552] Re: App Armor denies access, despite appropriate security policy groups in manifest

2013-09-19 Thread Jamie Strandboge
** Changed in: apparmor-easyprof-ubuntu (Ubuntu Saucy) Status: Triaged => In Progress -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to libaccounts-glib in Ubuntu. https://bugs.launchpad.net/bugs/1220552 Title: App Armor denies ac

[Desktop-packages] [Bug 1227824] [NEW] please integrate with trust-store

2013-09-19 Thread Jamie Strandboge
Public bug reported: Currently the 'calendar' policy group is reserved because giving access to the EDS's DBus API allows applications to access all calendars without user consent. If calendars are going to be made generally available to untrusted appstore apps, EDS needs to be modified to use tru

[Desktop-packages] [Bug 1227295] Re: incorrect object path 'deskop' used in gio/gdbusobjectmanagerclient.c

2013-09-24 Thread Jamie Strandboge
** Bug watch added: GNOME Bug Tracker #708677 https://bugzilla.gnome.org/show_bug.cgi?id=708677 ** Also affects: glib via https://bugzilla.gnome.org/show_bug.cgi?id=708677 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Deskto

[Desktop-packages] [Bug 1229766] [NEW] noisy apparmor denials

2013-09-24 Thread Jamie Strandboge
Public bug reported: Looking at bug #1227284's https://launchpadlibrarian.net/150624587/KernLog.txt, there are a bunch of denials like this: kernel: [ 916.009109] type=1400 audit(1379519775.414:254): apparmor="DENIED" operation="open" parent=825 profile="/usr/sbin/cupsd" name="/etc/udev/udev.c

[Desktop-packages] [Bug 1229371] Re: gnome-panel crashed with SIGSEGV in g_signal_emit_valist()

2013-09-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-panel in Ubuntu. https://bugs.launchpad.net/bugs/1229371 Title: gnome-panel crashed with SIGSEGV in g_signal_emit_valist(

[Desktop-packages] [Bug 1229369] Re: gvfsd-mtp crashed with SIGSEGV in LIBMTP_Get_Friendlyname()

2013-09-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gvfs in Ubuntu. https://bugs.launchpad.net/bugs/1229369 Title: gvfsd-mtp crashed with SIGSEGV in LIBMTP_Get_Friendlyname() Sta

[Desktop-packages] [Bug 1227070] Re: Сбой при включении ДРАЙВЕРЫ УСТРОЙСТВ

2013-09-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to jockey in Ubuntu. https://bugs.launchpad.net/bugs/1227070 Title: Сбой при включении ДРАЙВЕРЫ УСТРОЙСТВ Status in “jockey” pack

[Desktop-packages] [Bug 1227285] Re: mission-control-5 crashed with SIGSEGV in g_slice_alloc()

2013-09-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to telepathy-mission-control-5 in Ubuntu. https://bugs.launchpad.net/bugs/1227285 Title: mission-control-5 crashed with SIGSEGV in

[Desktop-packages] [Bug 1226084] Re: pidgin crashed with SIGSEGV in g_str_equal()

2013-09-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to pidgin in Ubuntu. https://bugs.launchpad.net/bugs/1226084 Title: pidgin crashed with SIGSEGV in g_str_equal() Status in “pidgi

[Desktop-packages] [Bug 1225349] Re: gnome-session-properties crashed with signal 5 in g_cclosure_marshal_VOID__BOXEDv()

2013-09-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-session in Ubuntu. https://bugs.launchpad.net/bugs/1225349 Title: gnome-session-properties crashed with signal 5 in g_c

[Desktop-packages] [Bug 1225427] Re: crushing brightness

2013-09-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-control-center in Ubuntu. https://bugs.launchpad.net/bugs/1225427 Title: crushing brightness Status in “gnome-control-ce

[Desktop-packages] [Bug 1225409] Re: crushing

2013-09-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/1225409 Title: crushing Status in “gnome-terminal” package in Ubuntu

[Desktop-packages] [Bug 1227284] Re: mission-control-5 crashed with SIGSEGV in thread_memory_from_self()

2013-09-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to telepathy-mission-control-5 in Ubuntu. https://bugs.launchpad.net/bugs/1227284 Title: mission-control-5 crashed with SIGSEGV in

<    1   2   3   4   5   6   7   8   9   10   >