Public bug reported:
Currently the 'calendar' policy group is reserved because giving access
to the EDS's DBus API allows applications to access all calendars
without user consent. If calendars are going to be made generally
available to untrusted appstore apps, EDS needs to be modified to use
trust-store, like location-service does. Integrating with trust-store
means that when an app tries to connect to the EDS over DBus, EDS will
contact trust-store, the trust-store will prompt the user ("Foo wants to
access your calendars. Is this ok? Yes|No"), optionally cache the result
and return the result to EDS. In this manner the user is given a
contextual prompt at the time of access by the app. Using caching this
decision can be remembered the next time. If caching is used, there
should be a method to change the decision in settings.
Targeting to T-Series for now, since the trust-store is not in a
reusable form yet.
** Affects: apparmor-easyprof-ubuntu (Ubuntu)
Importance: Undecided
Status: New
** Affects: evolution-data-server (Ubuntu)
Importance: Undecided
Status: New
** Affects: apparmor-easyprof-ubuntu (Ubuntu Saucy)
Importance: Undecided
Status: Won't Fix
** Affects: evolution-data-server (Ubuntu Saucy)
Importance: Undecided
Status: Won't Fix
** Affects: apparmor-easyprof-ubuntu (Ubuntu T-series)
Importance: Undecided
Status: Triaged
** Affects: evolution-data-server (Ubuntu T-series)
Importance: Undecided
Status: New
** Tags: application-confinement
** Also affects: apparmor-easyprof-ubuntu (Ubuntu)
Importance: Undecided
Status: New
** Also affects: evolution-data-server (Ubuntu Saucy)
Importance: Undecided
Status: New
** Also affects: apparmor-easyprof-ubuntu (Ubuntu Saucy)
Importance: Undecided
Status: New
** Also affects: evolution-data-server (Ubuntu T-series)
Importance: Undecided
Status: New
** Also affects: apparmor-easyprof-ubuntu (Ubuntu T-series)
Importance: Undecided
Status: New
** Changed in: apparmor-easyprof-ubuntu (Ubuntu Saucy)
Status: New => Won't Fix
** Changed in: apparmor-easyprof-ubuntu (Ubuntu T-series)
Status: New => Triaged
** Changed in: evolution-data-server (Ubuntu Saucy)
Status: New => Won't Fix
** Tags added: application-confinement
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to evolution-data-server in Ubuntu.
https://bugs.launchpad.net/bugs/1227824
Title:
please integrate with trust-store
Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
New
Status in “evolution-data-server” package in Ubuntu:
New
Status in “apparmor-easyprof-ubuntu” source package in Saucy:
Won't Fix
Status in “evolution-data-server” source package in Saucy:
Won't Fix
Status in “apparmor-easyprof-ubuntu” source package in t-series:
Triaged
Status in “evolution-data-server” source package in t-series:
New
Bug description:
Currently the 'calendar' policy group is reserved because giving
access to the EDS's DBus API allows applications to access all
calendars without user consent. If calendars are going to be made
generally available to untrusted appstore apps, EDS needs to be
modified to use trust-store, like location-service does. Integrating
with trust-store means that when an app tries to connect to the EDS
over DBus, EDS will contact trust-store, the trust-store will prompt
the user ("Foo wants to access your calendars. Is this ok? Yes|No"),
optionally cache the result and return the result to EDS. In this
manner the user is given a contextual prompt at the time of access by
the app. Using caching this decision can be remembered the next time.
If caching is used, there should be a method to change the decision in
settings.
Targeting to T-Series for now, since the trust-store is not in a
reusable form yet.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1227824/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
