Le 15/03/20 à 05:17, w4t-w4t a écrit :
Dear Maintainer,
This is not fixed. Upstream said it was intentional to not be able to
disable location sharing. This is problematic. There needs to be a way
to ensure ones privacy (not relying on the workaround).
Excuse me; maybe this is not the place to continue this discussion,
but I don't know which is.
Any help would be appreciated.
You should talk to upstream then because as downstream I don't see much
what we can do here.
But two remarks:
1) Preventing geoclue from starting by masking the systemd service (at
the system level) is actually a stronger solution than the integrated
way if you really wants geoclue to not reply to any location requests.
As explained in the upstream bugreport, geoclue relies on the .desktop
files to identify the allowed applications and these can easily be
spoofed. In addition, a malicious applications could give access to
itself by modifying the user configuration.
2) geoclue is using information already available to other applications
(maybe with the exception of data coming from ModemManager in case you
have a GSM modem/GPS), AFAIK all other applications can get your IP, the
mac address of your router and/or the wifi network in your neighborhood
already without the need of geoclue, note that geoclue is not running as
root. So in case you have a malware trying to guess your location, it's
probably better for them to get the data from these primary sources than
rely on geoclue.
It's completely true that gnome-control-center options are misleading
here, that should be improve in GNOME[0]. And I can also maybe add a
warning in the README file explaining this.
[0] https://gitlab.gnome.org/GNOME/gnome-control-center/issues/885
