** Changed in: signon (Ubuntu Vivid)
Status: Confirmed => Fix Released
** Changed in: signon (Ubuntu RTM)
Assignee: (unassigned) => Alberto Mardegan (mardy)
** Changed in: signon (Ubuntu RTM)
Status: New => In Progress
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380
Title:
OA gives out all tokens to any app
Status in signon package in Ubuntu:
Fix Released
Status in signon source package in Utopic:
Confirmed
Status in signon source package in Vivid:
Fix Released
Status in signon package in Ubuntu RTM:
In Progress
Bug description:
The attached app will steal all your tokens. All it takes is the
"accounts" permission in the apparmor file.
Here's the code: https://pastebin.canonical.com/120398/
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/signon/+bug/1392380/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
