** Tags added: audit
** Changed in: mediascanner2 (Ubuntu)
Importance: Medium => Critical
** Changed in: mediascanner2 (Ubuntu)
Assignee: (unassigned) => James Henstridge (jamesh)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
https://bugs.launchpad.net/bugs/1489489
Title:
The org.freedesktop.DBus.GetConnectionAppArmorSecurityContext() method
is deprecated
Status in Ubuntu Online Accounts API:
Confirmed
Status in apparmor package in Ubuntu:
Triaged
Status in content-hub package in Ubuntu:
Confirmed
Status in dbus package in Ubuntu:
Triaged
Status in media-hub package in Ubuntu:
Confirmed
Status in mediascanner2 package in Ubuntu:
Confirmed
Status in signon-apparmor-extension package in Ubuntu:
Confirmed
Status in ubuntu-download-manager package in Ubuntu:
Confirmed
Status in ubuntu-system-settings-online-accounts package in Ubuntu:
Confirmed
Bug description:
When upstream D-Bus merged the AppArmor mediation patches, they did
not like the GetConnectionAppArmorSecurityContext() bus method.
Instead, they decided to expose a peer's AppArmor context using the
org.freedesktop.DBus.GetConnectionCredentials() bus method. All users
of the GetConnectionAppArmorSecurityContext() method should switch to
the GetConnectionCredentials() method as soon as possible so that
Ubuntu can drop the patch that implements
GetConnectionAppArmorSecurityContext() by the time 16.04 LTS is
released.
In order to switch to the new method, you'll need to depend on
libapparmor 2.10 or newer.
I'll be adding example code that illustrates how to switch from
GetConnectionAppArmorSecurityContext() to GetConnectionCredentials().
content-hub, media-hub, mediascanner2, signon-apparmor-extension,
ubuntu-download-manager, and ubuntu-system-settings-online-accounts
all need to transition to the new method of obtaining the AppArmor
label.
The apparmor package should be updated to drop the libapparmor-
mention-dbus-method-in-getcon-man.patch patch and the dbus package
should be updated to drop the aa-get-connection-apparmor-security-
context.patch patch.
To manage notifications about this bug go to:
https://bugs.launchpad.net/online-accounts-api/+bug/1489489/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
