Package: geoclue-2.0
Version: 2.4.5-1
Followup-For: Bug #924516

Dear Maintainer,

It became apparent that despite explicit settings of gnome desktop environment 
"Settings -> All Settings -> Privacy -> Location Services" set to "OFF", 
package 'geoclue-2.0' ignores settings and continues to send requests via 
networking stack to identify hosts geographical location. 

Could some one from Dabien security team review this bug and hopefully provide 
a work around to stop 'geoclue-2.0' from contacting remote services over the 
network, tracing the hosts geo-location?

Any help would be greatly appreciated.


-- System Information:
Debian Release: 9.9
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-9-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages geoclue-2.0 depends on:
ii  adduser             3.115
ii  libavahi-client3    0.6.32-2
ii  libavahi-common3    0.6.32-2
ii  libavahi-glib1      0.6.32-2
ii  libc6               2.24-11+deb9u4
ii  libgeoclue-2-0      2.4.5-1
ii  libglib2.0-0        2.50.3-2
ii  libjson-glib-1.0-0  1.2.6-1
ii  libmm-glib0         1.6.4-1
ii  libsoup2.4-1        2.56.0-2+deb9u2

Versions of packages geoclue-2.0 recommends:
ii  avahi-daemon      0.6.32-2
ii  iio-sensor-proxy  2.0-4
ii  modemmanager      1.6.4-1
ii  wpasupplicant     2:2.4-1+deb9u4

geoclue-2.0 suggests no packages.

-- no debconf information

Reply via email to