This bug was fixed in the package ubuntu-touch-meta - 1.200
---------------
ubuntu-touch-meta (1.200) 14.09; urgency=medium
* Refreshed dependencies (LP: #1413622), (LP: #1392380)
* Added signon-apparmor-extension
* Added ubuntu-keyboard-azerbaijani
* Added ubuntu-keyboard-bosnian
* Added ubuntu-keyboard-catalan
* Added ubuntu-keyboard-croatian
* Added ubuntu-keyboard-emoji
-- Oliver Grawert <o...@ubuntu.com> Fri, 23 Jan 2015 22:04:23 +0100
** Changed in: ubuntu-touch-meta (Ubuntu RTM)
Status: New => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380
Title:
OA gives out all tokens to any app
Status in the base for Ubuntu mobile products:
Confirmed
Status in signon package in Ubuntu:
Fix Released
Status in signon source package in Utopic:
Confirmed
Status in signon source package in Vivid:
Fix Released
Status in signon package in Ubuntu RTM:
In Progress
Status in ubuntu-touch-meta package in Ubuntu RTM:
Fix Released
Bug description:
The attached app will steal all your tokens. All it takes is the
"accounts" permission in the apparmor file.
Here's the code: https://pastebin.canonical.com/120398/
To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1392380/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
