Balint, could you follow through on this bug? Martin has provided some
good general guidance already about what's required to re-enable secure
guest sessions in artful.
** Changed in: lightdm (Ubuntu Artful)
Milestone: None => ubuntu-17.05
** Changed in: lightdm (Ubuntu Artful)
Assignee: Robert Ancell (robert-ancell) => Balint Reczey (rbalint)
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1663157
Title:
Guest session processes are not confined in 16.10 and newer releases
Status in Light Display Manager:
New
Status in apparmor package in Ubuntu:
Invalid
Status in lightdm package in Ubuntu:
Triaged
Status in lightdm source package in Yakkety:
Fix Released
Status in lightdm source package in Zesty:
Fix Released
Status in lightdm source package in Artful:
Triaged
Bug description:
Processes launched under a lightdm guest session are not confined by
the /usr/lib/lightdm/lightdm-guest-session AppArmor profile in Ubuntu
16.10, Ubuntu 17.04, and Ubuntu Artful (current dev release). The
processes are unconfined.
The simple test case is to log into a guest session, launch a terminal
with ctrl-alt-t, and run the following command:
$ cat /proc/self/attr/current
Expected output, as seen in Ubuntu 16.04 LTS, is:
/usr/lib/lightdm/lightdm-guest-session (enforce)
Running the command inside of an Ubuntu 16.10 and newer guest session
results in:
unconfined
To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1663157/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
