Package: geoclue-2.0
Version: 2.5.2-1
Followup-For: Bug #924516

Dear Maintainer,

This issue still present in a new Debian 10 'Buster' release.

Privacy settings in gnome desktop environment ignored.
While, "Settings -> All Settings -> Privacy -> Location Services" set to "OFF", 
package 'geoclue-2.0' ignores settings and continues to send requests via 
networking stack to identify hosts geographical location. 

Could some one from Dabien security team review this bug and hopefully provide 
a work around to stop 'geoclue-2.0' from contacting remote services over the 
network, tracing the hosts geo-location?

Any help would be greatly appreciated.


-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages geoclue-2.0 depends on:
ii  adduser             3.118
ii  libavahi-client3    0.7-4+b1
ii  libavahi-common3    0.7-4+b1
ii  libavahi-glib1      0.7-4+b1
ii  libc6               2.28-10
ii  libglib2.0-0        2.58.3-2
ii  libjson-glib-1.0-0  1.4.4-2
ii  libmm-glib0         1.10.0-1
ii  libnotify4          0.7.7-4
ii  libsoup2.4-1        2.64.2-2

Versions of packages geoclue-2.0 recommends:
ii  avahi-daemon      0.7-4+b1
ii  iio-sensor-proxy  2.4-2
ii  modemmanager      1.10.0-1
ii  wpasupplicant     2:2.7+git20190128+0c1e29f-6

geoclue-2.0 suggests no packages.

-- no debconf information

Reply via email to