I think the approach here is correct for now, especially for this security update-- get the guest account confined with apparmor without dbus mediation (and remember the system bus will have policykit in effect too). This is what we did for other applications in Ubuntu in 13.10; we can examine more strict confinement going forward.
-- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1243339 Title: lightdm no longer runs guest session through wrapper Status in Light Display Manager: Confirmed Status in “lightdm” package in Ubuntu: Confirmed Status in “lightdm” source package in Saucy: Confirmed Status in “lightdm” source package in Trusty: Confirmed Bug description: Till 13.04 guest couldn't access home directory. In 13.10 guests can read the files in the /home-directory. Not sure if it is a problem of lightdm or AppArmor. Problem is the same on update from raring and fresh install of saucy. ProblemType: Bug DistroRelease: Ubuntu 13.10 Package: lightdm 1.8.2-0ubuntu1 ProcVersionSignature: Ubuntu 3.11.0-12.19-generic 3.11.3 Uname: Linux 3.11.0-12-generic x86_64 ApportVersion: 2.12.5-0ubuntu2 Architecture: amd64 Date: Tue Oct 22 19:51:27 2013 InstallationDate: Installed on 2011-10-27 (726 days ago) InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012) MarkForUpload: True SourcePackage: lightdm UpgradeStatus: Upgraded to saucy on 2013-10-19 (3 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1243339/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
