** Changed in: ubuntuone-client (Ubuntu)
Importance: High = Wishlist
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/528274
Title:
syncdaemon should have AppArmor profile
To manage notifications
** Changed in: ubuntuone-client
Assignee: Rick McBride (rmcbride) = Ubuntu One Desktop+ team
(ubuntuone-desktop+)
** Changed in: ubuntuone-client (Ubuntu)
Assignee: Rick McBride (rmcbride) = Ubuntu One Desktop+ team
(ubuntuone-desktop+)
--
You received this bug notification because
What is the status of this bug? If we are going to be shipping a
disabled file instead of enforcing, we can mark as Wishlist/low instead.
** Changed in: ubuntuone-client (Ubuntu Lucid)
Status: Confirmed = Won't Fix
--
You received this bug notification because you are a member of Ubuntu
** Tags added: apparmor
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/528274
Title:
syncdaemon should have AppArmor profile
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
Jamie,
My work was focused elsewhere this past cycle. I hope to revisit (or
help someone else revisit) this in the future.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/528274
Title:
syncdaemon
at this point this is a next-cycle type activity.
** Changed in: ubuntuone-client (Ubuntu)
Status: In Progress = Confirmed
** Changed in: ubuntuone-client
Status: In Progress = Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
** Changed in: ubuntuone-client (Ubuntu)
Status: Confirmed = In Progress
** Changed in: ubuntuone-client
Status: Confirmed = In Progress
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you are a member of
Yep, rotated back to operations+ and will get the needful resolved
during or shortly after UDS.
Tried to reply via email but LP no longer recognizes my signature :/
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you
ping :)
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
** Changed in: ubuntuone-client
Status: In Progress = Confirmed
** Changed in: ubuntuone-client (Ubuntu Lucid)
Status: In Progress = Confirmed
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you are a
Rick, curious on the status of the disabled profile. Will it make it
into Lucid?
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing
On 04/09/2010 10:59 AM, Jamie Strandboge wrote:
Rick, curious on the status of the disabled profile. Will it make it
into Lucid?
I had one failed attempt where I tried to handle it in debian/rules
I downloaded the source for the examples you referenced, but got side
tracked with operations
** Changed in: ubuntuone-client
Status: Fix Committed = In Progress
** Changed in: ubuntuone-client (Ubuntu Lucid)
Status: Fix Committed = In Progress
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you
I'm going to update the branch as described.
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
I'm investigating the best way of implementing Jamie's suggestion. It
would be great to get user feedback on this.
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to
Rick, this is actually quite easy. Ship the profile as if it is enforcing, then
put a symlink to it in /etc/apparmor.d/disable. Eg, if you install the profile
to /etc/apparmor.d/usr.lib.ubuntuone-client.ubuntuone-syncdaemon, then do:
# ln -s
This is unfortunate. Could a disabled profile be shipped instead or at
the very least an 'example profile' be shipped in /usr/share/doc? This
way users can at least test and use the profile and give feedback along
the way.
--
syncdaemon should have AppArmor profile
Okay, unmilestoning, as we keep seeing changing behavior with the
profile. This should be better tested and rolled out in M, instead.
** Changed in: ubuntuone-client (Ubuntu Lucid)
Milestone: ubuntu-10.04-beta-2 = None
--
syncdaemon should have AppArmor profile
** Changed in: ubuntuone-client (Ubuntu Lucid)
Milestone: ubuntu-10.04-beta-1 = ubuntu-10.04-beta-2
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
This is milestoned for ubuntu-10.04-beta-1 -- what is the status for
getting this in before then?
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
I have proposed the fix branch for merge. I'm awaiting review. I've
addressed the needs-fixing item listed.
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Branch linked: lp:~rmcbride/ubuntu/lucid/ubuntuone-client/fix_528274
** Changed in: ubuntuone-client (Ubuntu Lucid)
Status: Confirmed = In Progress
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you are a
The profile in the bzr tree won't be sufficient, @{HOME}/* rw, should
likely be @{HOME}/** rw, otherwise subdirectories will not be included.
It'd be nice if some areas of the home directory were protected (ssh
keys, gpg keys, etc) please see the firefox profile for examples.
--
syncdaemon
** Changed in: ubuntuone-client
Status: In Progress = Fix Committed
** Changed in: ubuntuone-client (Ubuntu Lucid)
Status: In Progress = Fix Committed
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you
On 03/08/2010 02:58 PM, Kees Cook wrote:
The profile in the bzr tree won't be sufficient, @{HOME}/* rw, should
likely be @{HOME}/** rw, otherwise subdirectories will not be included.
It'd be nice if some areas of the home directory were protected (ssh
keys, gpg keys, etc) please see the
** Changed in: ubuntuone-client
Status: In Progress = Fix Committed
** Changed in: ubuntuone-client (Ubuntu Lucid)
Status: In Progress = Fix Committed
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you
** Changed in: ubuntuone-client
Status: Confirmed = In Progress
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
** Changed in: ubuntuone-client (Ubuntu Lucid)
Status: New = Confirmed
** Changed in: ubuntuone-client (Ubuntu Lucid)
Importance: Undecided = High
** Changed in: ubuntuone-client (Ubuntu Lucid)
Assignee: (unassigned) = Rick McBride (rmcbride)
--
syncdaemon should have AppArmor
** Attachment added: .home.kees..cache.ubuntuone.log.oauth.login.log.txt
http://launchpadlibrarian.net/39808918/.home.kees..cache.ubuntuone.log.oauth.login.log.txt
** Attachment added: Dependencies.txt
http://launchpadlibrarian.net/39808919/Dependencies.txt
** Attachment added:
Here's a profile that works for me -- likely will need to be tuned for
new user directory creation, but that should be trivial.
This should ship in the package in /etc/apparmor.d and gain the appropriate
maintainer-script stanzas to activate the profile on install. For more details
see:
Hi Kees, this is a great idea, and thank you for creating the initial
profile! I believe this initial profile is too restrictive, as in Lucid
users can tell the syncdaemon to manage any folder in their home
directory. Would it be appropriate to give syncdaemon access to
everything in the users
** Changed in: ubuntuone-client
Status: New = Confirmed
** Changed in: ubuntuone-client
Importance: Undecided = High
** Tags added: ops+
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug notification because you are a member of
Ah, I didn't see anywhere to configure the syncdaemon, so I was hoping it
was just the Ubuntu One directory.
It could be made to r/w the entire home directory, but that defeats the
purpose a bit (for me). Feel free to adjust as needed, though! It'd
still be nice to have it isolated just to the
** Changed in: ubuntuone-client
Assignee: (unassigned) = Philip Fibiger (pfibiger)
** Changed in: ubuntuone-client
Assignee: Philip Fibiger (pfibiger) = Rick McBride (rmcbride)
--
syncdaemon should have AppArmor profile
https://bugs.launchpad.net/bugs/528274
You received this bug
34 matches
Mail list logo
