Package: geoclue-2.0 Version: 2.4.5-1 Followup-For: Bug #924516 Dear Maintainer,
It became apparent that despite explicit settings of gnome desktop environment "Settings -> All Settings -> Privacy -> Location Services" set to "OFF", package 'geoclue-2.0' ignores settings and continues to send requests via networking stack to identify hosts geographical location. Could some one from Dabien security team review this bug and hopefully provide a work around to stop 'geoclue-2.0' from contacting remote services over the network, tracing the hosts geo-location? Any help would be greatly appreciated. Damien. -- System Information: Debian Release: 9.9 APT prefers oldstable-updates APT policy: (500, 'oldstable-updates'), (500, 'oldstable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-9-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages geoclue-2.0 depends on: ii adduser 3.115 ii libavahi-client3 0.6.32-2 ii libavahi-common3 0.6.32-2 ii libavahi-glib1 0.6.32-2 ii libc6 2.24-11+deb9u4 ii libgeoclue-2-0 2.4.5-1 ii libglib2.0-0 2.50.3-2 ii libjson-glib-1.0-0 1.2.6-1 ii libmm-glib0 1.6.4-1 ii libsoup2.4-1 2.56.0-2+deb9u2 Versions of packages geoclue-2.0 recommends: ii avahi-daemon 0.6.32-2 ii iio-sensor-proxy 2.0-4 ii modemmanager 1.6.4-1 ii wpasupplicant 2:2.4-1+deb9u4 geoclue-2.0 suggests no packages. -- no debconf information
